Upload path security improvement in 1.23.3

Hello @mrbleuu ,

Previously the path was /wp-content/uploads/ directory.

After version 1.23.1, by default, the uploads will be stored in /wp-content/uploads/forminator/ directory, inside the designated sub-directories (specific to each form), and with the random file names. This has been implemented for improving security.

You can change the upload path to a custom directory in Forminator > Data > File Upload Storage > Custom.

Can we customise the upload path to be outside the public folder now?

Although you can use such paths for uploading and storing files (unless that’s not prohibited on the server), it will not be possible to view or download such files from the backend I’m afraid, because the direct link will not work.

I hope this helps. Let us know if you need any further clarifications!

Best Regards,
Dmytro

You can change the upload path to a custom directory in Forminator > Data > File Upload Storage > Custom.

Is this only available on the latest version? I cannot see it on 1.22.1

Hi @mrbleuu

Yes, this option was added with recent version because:

– we had a lot of requests in the past to allow customization of upload path
– and the security changes (which we had to add) made also all the past solutions (like custom code) obsolete (incompatible with current version and not possible to be made compatible).

If you have used some custom code to change upload path with previous versions and it worked, it will still work with those versions. After update, you will be able to used that option directly in plugin to change the path instead.

Kind regards,
Adam

Hello @mrbleuu ,

We haven’t heard from you for some time now, so it looks like you don’t have more questions for us.

Feel free to re-open this ticket if needed.

Kind regards
Kasia