wp_editor, allow guests to upload images?

  • In the wp_editor codex, it says you can enable to media button for the editor using media_buttons => true.
    I have enabled it for my editor and it works well if you are logged in. However, to guests, the button does not show up.
    How can I allow guests to upload images in their user submitted posts, within the content?

Viewing 2 replies - 1 through 2 (of 2 total)
  • Moderator bcworkz

    (@bcworkz)

    From WP. you essentially cannot, because doing so is a huge security risk. Your only option, if you want to continue with this foolish idea, is to develop your own upload form.

    Uploading an image file is not a big deal in itself, but it’s possible for image files to contain malicious code payloads. That’s still doesn’t make a hack successful by itself, but you’re now just one other server setup error away from being hacked. Such errors do happen, but can be useless without being able to upload files. Allowing random strangers to upload image files removes an important layer of protection. Don’t do it! Requiring someone that wants to put files on your server to register is not asking too much of anyone.

    Thread Starter vgramlich

    (@vgramlich)

    Thanks for explaining why it’s such a bad idea!

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘wp_editor, allow guests to upload images?’ is closed to new replies.