Thanks

I’m trying to figure out if this plugin only works when you manually upload the files or if it will function properly when the user uploads a file to the form that then gets sent to our external server such as google cloud storage. (with this plugin activated of course)

I found in a couple of places that the MIME type is application/octet-stream

I set your plugin to a custom filetype. Here is a screenshot of my settings: https://i.stack.imgur.com/daXUb.png.

DWG files upload now (thank you). Is there something I need to do to make .rvt files upload?

When you have a form that as file uploads capabilities, files are stored in /wp-content/uploads/formidable/…

On one customers web site, they use Formidable Forms for subscription and some documents can be uploaded through it.

These files by default can be accessed by any users on frontend should they be able to guess the file names.

I have tested the suggested limitations of permission suggested from this page : https://formidableforms.com/knowledgebase/file-upload/ and was still able to access the uploaded files directly in browser private mode. I limited the access to admins and subscribers only.

Do you have suggestions on how to protect these files to only permit admin and the subscribed account users?

Thanks

we migrated an old member directory page onto a new page based on Ultimate Member. We successfully imported our old users and their meta fields. But we are facing one problem we just can’t solve. It’s about the file uploads (audio files). We did save the absolute file paths from our old database into the new user meta fields. In our case for example the meta field is called sk_audio01 and it could have something like https://example.com/wp-content/uploads/2015/05/user-audio.mp3 in it. This works on our frontend listings / profile pages but we ran into troubles if users try to edit their profile because those file upload form fields don’t recognise this and will clear all those fields when saving the profile.

As we already found out, there should be actually only the file name in the meta field instead of the absolute path and furthermore there should be some serialized data in a 2nd meta field called sk_audio01_metadata. But we are missing those.

So my question is, is there any solution to run some code that converts or regenerates these meta fields to have the database entries in a proper way?

Hope to get some feedback on this issue.

Thanks in advance,
Christian

The website has 1117 images in the media library. The Medias tab information indicated that all 1117 images were unused in the website. It did not detect a single image as being used.

There may be many reasons for its failure to do such but I think it worthwhile for the plugin authors and anyone viewing the plugin utilities to be aware of this issue.

file_upload Malicious File Upload (PHP)

will allow Gravity Forms to upload a user-submitted photo.

There is no standard file being uploaded. These are photos snapped by phone cameras or uploaded from a desktop/laptop from photo archive.

There are no errors which appear.

Learning Mode worked but failed to continue to work once Protection mode was turned back on.

There is no easy way to craft an URL for bypassing or whitelisting the firewall.

For now, this rule has to be disabled (and will remain so) for this form to work.

WordFence support?

In the Console, I see Javascript errors. I’ve tested in multiple browsers and tried clearing cache and cookies. It didn’t help. This is the first line: Uncaught TypeError: t.addClass(…).position(…).trigger is not a function pum-site-scripts.js?defer&generated=1643214811&ver=1.16.4

Is there any way to fix the conflict? The site really needs this.