File Uploads Blocked

Hi,

Did you allow uploads? Go to “Firewall Policies > Uploads”, select “Allow Uploads”, then scroll down to the bottom of the page and click “Save Firewall Policies”.

Hi there,

I did as you suggested and also clicked the “sanitize” checkbox. The upload then worked, but also locked me out of my site (“access denied.)

What should I do now? I need the upload feature so clients can send me design files and I’d really like to use this service.

Thanks,
Kelley

Hi,

Can you clarify what is the “access denied” message? Is this the NinjaFirewall blocked user message (similar to that screenshot)?
If it is, can you check the “Firewall Log” and paste here the corresponding line?

Hi,

No, it is simply the words access denied on a blank white background. Can not login to site (use custom login URL). No page will allow me access.

After I uploaded test file, I logged out (which took me to custom logout URL) which is when the access denied began.

I also use AIO Firewall & Security plugin in conjunction with yours.

Happy to provide you login creds if interested via a private email message.

Kelley

Actually, I can access the upload folder where Gravity Forms stores files. So, not completely blocked. Just wanted to clarify.

This is not a NinjaFirewall message.
I suggest you temporarily turn off the AIO Firewall & Security plugin as it looks like you have some rules in your .htaccess that are blocking you, and then try again only with NinjaFirewall enabled.

OK thanks. I can’t access the site via regular login so will reach out to the developer of the other plugin to see how to disable via FTP.

I’ve removed any reference to AIOS&FW in my .htaccess file. All that is there now is the code from Ninja and standard WP lines. I am still unable to access my site. This is limited to me; others can access the site.

Any suggestions?

I’ve renamed the AIO plugin file; the issue persists.

Very weird.
Can you make a copy of your .htaccess, then delete the NinjaFirewall’s lines and try again?
Afterwards, you could restore the original .htaccess.

This is limited to me; others can access the site.

Do you have any plugin than can blacklist users?

Finally figured it out! It was the Zero Spam plugin causing the issue (perhaps I did not have it configured correctly). Don’t really need it so disabled/deleted.

Thank you for your time and perseverance!