contact form to post > Media is scanned?

Hi @maikel123, thanks for reaching out.

There are usually 3 possible firewall rules involved when somebody uploads a file to your site. “Malicious File Upload“, “Malicious File Upload (PHP)“, and “Malicious File Upload (Patterns)”.

There are layers to how uploaded files are checked, so malicious files should be disallowed by one of the above. Some customers see false-positives from time-to-time as PDF or image files can easily match malicious PHP code patterns such as?<??when viewed as text. If you ever have to turn one of the rules off for this reason, a different stage of the checking process will still scan the file(s).

Many thanks,
Peter.

Hello Peter,

thank you very much for your answer. So it does scan files which are uploaded by the plugin “post my contact form” is this right? And to be safe I think we should upgrade to the pro version, correct?

Thanks
Michael

Hi @maikel123,

Any files uploaded to your site will be checked by our firewall rules, so it shouldn’t matter which plugin is involved with generating or handling the form.

I’m unable to discuss upgrades from Wordfence Free here but if you contact our team at presales @ wordfence . com, they can check whether your use-case is suitable and discuss the process further.

Thanks again,
Peter.