Bugfix: Version 3.2.7, Upload files restriction

Ladies and Gentlemen

we encountered a bug while uploading a file type (exe) that doesn’t seem to be supported with your plugin even though it’s enabled via wordpress core
(wordpress capability unfiltered_upload).

Issue:
Plugin Version: 3.2.7
Replace File type: exe
“File type does not meet security guidelines. Try another.”, ‘enable-media-replace’

Bugfix:
Remove line 230-233. Allowed file types are already being checked by wordpress core function ‘wp_check_filetype_and_ext’

File: upload.php
Line: 227 – 233
Function:

	// New method for validating that the uploaded file is allowed, using WP:s internal wp_check_filetype_and_ext() function.
	$filedata = wp_check_filetype_and_ext($_FILES["userfile"]["tmp_name"], $_FILES["userfile"]["name"]);

	if ($filedata["ext"] == "") {
		echo esc_html__("File type does not meet security guidelines. Try another.", 'enable-media-replace');
		exit;
	}

• This topic was modified 6 years, 2 months ago by miux.
• This topic was modified 6 years, 2 months ago by miux.