• Resolved miux

    (@miux)


    Ladies and Gentlemen

    we encountered a bug while uploading a file type (exe) that doesn’t seem to be supported with your plugin even though it’s enabled via wordpress core
    (wordpress capability unfiltered_upload).

    Issue:
    Plugin Version: 3.2.7
    Replace File type: exe
    “File type does not meet security guidelines. Try another.”, ‘enable-media-replace’

    Bugfix:
    Remove line 230-233. Allowed file types are already being checked by wordpress core function ‘wp_check_filetype_and_ext’

    File: upload.php
    Line: 227 – 233
    Function:

    	// New method for validating that the uploaded file is allowed, using WP:s internal wp_check_filetype_and_ext() function.
    	$filedata = wp_check_filetype_and_ext($_FILES["userfile"]["tmp_name"], $_FILES["userfile"]["name"]);
    
    	if ($filedata["ext"] == "") {
    		echo esc_html__("File type does not meet security guidelines. Try another.", 'enable-media-replace');
    		exit;
    	}
    • This topic was modified 6 years, 2 months ago by miux.
    • This topic was modified 6 years, 2 months ago by miux.
Viewing 4 replies - 1 through 4 (of 4 total)
Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Bugfix: Version 3.2.7, Upload files restriction’ is closed to new replies.