Plugin Directory

WordPress File Upload

Simple yet very powerful plugin to allow users to upload files to your website from any page and manage the uploaded files


  • removed 'form-field' class from admin table tr elements
  • corrected bug that was causing problems in uploadrole and uploaduser attributes when a username or role contained uppercase letters
  • uploadrole and uploaduser attributes logic modified; guests are allowed only if 'guests' word is included in the attribute
  • modifications to the download functionality script to be more robust
  • corrected bug that was not showing options below a line item of admin tables in Internet Explorer
  • several feature additions and bug fixes in Professional version


  • added option in plugin's settings to relax CSS rules so that plugin inherits theme styling
  • modifications in html and css of editable subfolders feature to look better
  • modifications in html and css of prompt message when a required userdata field is empty
  • PLUGINDIR was replaced by WP_PLUGIN_DIR so that the plugin can work for websites where the contents dir is other than wp-content
  • fixed bug that was not allowing Shortcode Composer to launch when the shortcode was too big
  • fixed bug that was causing front-end file list not to work properly when no instance of the plugin existed in the same page / post


  • important bug detected and fixed that was stripping slashes from post or page content when updating the shortcode using the shortcode composer


  • the previous version broke the easy creation of shortcodes through the plugin's settings in Dashboard and it has been corrected, together with some improvements


  • an important feature (front-end file browser) has been added in professional version 3.1.0
  • added port number support for uploads using ftp mode
  • corrected bug that was not showing correctly in file browser files that were uploaded using ftp mode
  • eliminated confirmbox warning showing in page when website's DEBUG mode is ON
  • eliminated warning: "Invalid argument supplied for foreach() in ...plugins/wordpress-file-upload-pro/lib/wfu_admin.php on line 384"
  • eliminated warning: "Notice: Undefined index: postmethod in /var/www/wordpress/wp-content/plugins/wordpress-file-upload-pro/lib/wfu_functions.php on line 1348"
  • eliminated warnings in plugin's settings in Dashboard


  • major version number has advanced because an important feature has been added in Pro version (logged users can browse their uploaded files through their Dashboard)
  • several code modifications in file browser to make the plugin more secure against hacking, some functionalities in file browser have slightly changed
  • new file browser cannot edit files that were not uploaded with the plugin and it cannot edit or create folders
  • upload path cannot be outside the wordpress installation root
  • files with extension php, js, pht, php3, php4, php5, phtml, htm, html and htaccess are forbidden for security reasons


  • added functionality in Dashboard to add the plugin to a page automatically
  • fixed bug that was not showing the Shortcode Composer because the plugin could not find the plugin instance when the shortcode was nested in other shortcodes


  • added German and Greek translation


  • added Serbian translation thanks to Andrijana Nikolic from http://webhostinggeeks.com/
  • bug fix with %blogid%, %pageid% and %pagetitle% that where not implemented in notification emails
  • in single button operation selected files are removed in case that a subfolder has not been previously selected or a required user field has not been populated
  • bug fixed in single file operation that allowed selection of multiple files through drag-and-drop
  • bug fixed with files over 1MB that got corrupted when maintaining files with same filename
  • dummy (test) Shortcode Composer button removed from the plugin's Settings as it is no longer useful
  • added support for empty (zero size) files
  • many code optimizations and security enhancements
  • fixed javascript errors in IE8 that were breaking upload operation
  • code improvements to avoid display of session warnings
  • added %username% in redirect link
  • added option in plugin's Settings in Dashboard to select alternative POST Upload method, in order to resolve errors like "http:// wrapper is disabled in the server configuration by allow_url_fopen" or "Call to undefined function curl_init()"
  • added filter action wfu_after_upload, where the admin can define additional javascript code to be executed on user's browser after each file is finished


  • important bug fix in Pro version
  • added wfu_before_email_notification filter
  • corrected bug not showing correctly special characters (double quotes and braces) in email notifications


  • important bug fix in Pro version, very slight changes in free version


  • fixed bug with faulty plugin instances appearing when Woocommerce plugin is also installed
  • Upload of javascript (.js) files is not allowed for avoiding security issues
  • fixed bug with medialink and postlink attributes that were not working correctly
  • when medialink or postlink is activated, the files will be uploaded to the upload folder of WP website
  • when medialink or postlink is activated, subfolders will be deactivated
  • added option in subfolders to enable the list to populate automatically
  • added option in subfolders the user to be able to type the subfolder
  • wfu_before_file_check filter can modify the target path (not only the file name)


  • corrected bug when deleting plugin instance from the Dashboard
  • corrected bug not finding "loading_icon.gif"


  • full redesign of the upload algorithm to become more robust
  • added improved server-side handling of large files
  • plugin shortcodes can be edited using the Shortcode Composer
  • added visual editor button on the plugin to enable administrators to change the plugin settings easily
  • corrected bug causing sometimes database overloads
  • slight improvements of subfolder option
  • improvements to avoid code breaking in ajax calls when there are php warnings or echo from WordPress environment or other plugins
  • improvements and bug fixes in uploader when classic (no AJAX) upload is selected
  • eliminated php warnings in shortcode composer
  • corrected bug that was not correctly downloading files from the plugin's File Browser
  • added better security when downloading files from the plugin's File Browser
  • fixed bug not correctly showing the user that uploaded a file in the plugin's File Browser
  • use of curl to perform server http requests was replaced by native php because some web servers do not have CURL installed
  • corrected bug in shortcode composer where userdata fields were not shown in variables drop down
  • added feature that prevents page closing if an upload is on progress
  • added forcefilename attribute to avoid filename sanitization
  • added ftppassivemode attribute for enabling FTP passive mode when FTP method is used for uploading
  • added ftpfilepermissions attribute for defining the permissions of the uploaded file, when using FTP method
  • javascript and css files are minified for faster loading


  • fixed serious bug not uploading files when captcha is enabled
  • fixed bug not redirecting files when email notification is enabled


  • mitigated issue with "Session failed" errors appearing randomly in websites
  • fixed bug not applying %filename% variable inside redirect link
  • fixed bug not applying new filename, which has been modified with wfu_before_file_upload filter, in email notifications and redirects
  • fixed bug where when 2 big files were uploaded at the same time and one failed due to failed chunk, then the progress bar would not go to 100% and the file would not be shown as cancelled


  • fixed bug not allowing redirection to work
  • fixed bug that was including failed files in email notifications on certain occasions
  • default value for uploadrole changed to "all"


  • fixed important bug in free version not correctly showing message after failed upload


  • fixed important bug in free version giving the same name to all uploaded files
  • fixed bug in free version not clearing completely the plugin cache from previous file upload


  • major redesign of upload algorithm to address upload issues with Safari for Mac and Firefox
  • files are first checked by server before actually uploaded, in order to avoid uploading of large files that are invalid
  • modifications to progress bar code to make progress bar smoother
  • restrict upload of .php files for security reasons
  • fixed bug not showing correctly userdata fields inside email notifications when using ampersand or other special characters in userdata fields


  • variables %blogid%, %pageid% and %pagetitle% added in email notifications and subject and %dq% in subject
  • corrected bug that was breaking Shortcode Composer when using more than ten attributes
  • corrected bug that was rejecting file uploads when uploadpattern attribute contained blank spaces
  • several code corrections in order to eliminate PHP warning messages when DEBUG mode is on
  • several code corrections in order to eliminate warning messages in Javascript


  • correction of bug when using userfields inside notifyrecipients


  • intermediate update to make the plugin more immune to hackers


  • correction of bug to allow uploadpath to receive userdata as parameter


  • intermediate update to address some vulnerability issues


  • added filters and actions before and after each file upload - check below Filters/Actions section for instructions how to use them
  • added storage of file info, including user data, in database
  • added logging of file actions in database - admins can view the log from the Dashboard
  • admins can automatically update the database to reflect the current status of files from the Dashboard
  • file browser improvements so that more information about each file (including any user data) are shown
  • file browser improvements so that files can be downloaded
  • filelist improvements to display correctly long filenames (Pro version)
  • filelist improvements to distinguish successful uploads from failed uploads (Pro version)
  • improvements of chunked uploads so that files that are not allowed to be uploaded are cancelled faster (Pro version)
  • corrected wrong check of file size limit for chunked files (Pro version)
  • added postlink attribute so that uploaded files are linked to the current page (or post) as attachments
  • added subfolderlabel attribute to define the label of the subfolder selection feature
  • several improvements to subfolder selection feature
  • default value added to subfolder selection feature
  • definition of the subfoldertree attribute in the Shortcode Composer is now done visually
  • %userid% variable added inside uploadpath attribute
  • userdata variables added inside uploadpath and notifyrecipients attributes
  • uploadfolder_label added to dimension items
  • user fields feature improvements
  • user fields label and input box dimensions are customizable
  • captcha prompt label dimensions are customizable (Pro version)
  • added gallery attribute to allow the uploaded files to be shown as image gallery below the plugin (Pro version)
  • added galleryoptions attribute to define options of the image gallery (Pro version)
  • added css attribute and a delicate css editor inside Shortcode Composer to allow better styling of the plugin using custom css (Pro version)
  • email feature improved in conjunction with redirection
  • improved interoperability with WP-Filebase plugin
  • improved functionality of free text attributes (like notifymessage or css) by allowing double-quotes and brackets inside the text (using special variables), that were previously breaking the plugin


  • added option to restore default value for each attribute in Shortcode Composer
  • added support for multilingual characters
  • correction of bug in Shortcode Composer that was not allowing attributes with singular and plural form to be saved
  • correction of bug that was not changing errormessage attribute in some cases


  • correction of bug that was freezing the Shortcode Composer in some cases
  • correction of bug with successmessage attribute


  • serious bug fixed that was breaking operation of Shortcode Composer and File Browser when the WordPress website is in a subdirectory


  • added file browser in Dashboard for admins
  • added attribute medialink to allow uploaded files to be shown in Media
  • serious bug fixed that was breaking the plugin because of preg_replace_callback function
  • corrected error in first attempt to upload file when captcha is enabled


  • variables %pagetitle% and %pageid% added in uploadpath.
  • bug fixes when working with IE8.
  • Shortcode Composer saves selected options
  • Easier handling of userdata variables in Shortcode Composer
  • correction of bug that allowed debugdata to be shown in non-admin users
  • reset.css removed from plugin as it was causing breaks in theme's css
  • correction of bug with WPFilebase Manager plugin


  • Several bug fixes and code reconstruction.
  • Code modifications so that the plugin can operate even when DEBUG mode is ON.
  • New attribute debugmode added to allow better debugging of the plugin when there are errors.


  • Bug fixes with broken images when WordPress website is in a subdirectory.
  • Replacement of glob function because is not allowed by some servers.


  • Bug fixes in Dashboard Settings Shortcode Composer.
  • Correction of important bug that was breaking page in some cases.
  • Minor improvements of user data fields and notification email attributes.


This is the initial release of WordPress File Upload. Since this plugin is the successor of Inline Upload, the whole changelog since the creation of the later is included.

  • Name of the plugin changed to WordPress File Upload.
  • Plugin has been completely restructured to allow additional features.
  • A new more advanced message box has been included showing information in a more structured way.
  • Error detection and reporting has been improved.
  • An administration page has been created in the Dashboard Settings, containing a Shortcode Composer.
  • Some more options related to configuration of message showing upload results have been added.
  • Several bug fixes.


  • Userdata attribute changed to allow the creation of more fields and required ones.
  • Spanish translation added thanks to Maria Ramos of WebHostingHub.


  • Added notifyheaders attribute, in order to allow better control of notification email sent (e.g. allow to send HTML email).


  • Added userdata attribute, in order to allow users to send additional text data along with the uploaded file.


  • Added single button operation (file will be automatically uploaded when selected without pressing Upload Button).


  • Fixed bug with functionality of attribute filebaselink for new versions of WP-Filebase plugin.


  • Fixed problem with functionality of attribute filebaselink for new versions of WP-Filebase plugin.


  • More than one roles can now be defined in attribute uploadrole, separated by comma (,).


  • Variable %filename% now works also in redirectlink.


  • Changes in ftp functionality, added useftpdomain attribute so that it can work with external ftp domains as well.
  • Improvement of classic upload (used in IE or when setting forceclassic to true) messaging functionality.
  • Minor bug fixes.


  • Source modified so that it can work with WordPress sites that are not installed in root.
  • Added variable %blogid% for use with multi-site installations.
  • Bug fixes related to showing of messages.


  • Replacement of json2.js with another version.


  • CSS style changes to resolve conflicts with various theme CSS styles.


  • Added variable %useremail% used in notifyrecipients, notifysubject and notifymessage attributes.


  • Added capability to upload files outside wp-content folder.
  • Improved error reporting.


  • Complete restructuring of plugin HTML code, in order to make it more configurable and customizable.
  • Appearance of messages has been improved.
  • Added option to put the plugin in testmode.
  • Added option to configure the colors of success and fail messages.
  • Added option to modify the dimensions of the individual objects of the plugin.
  • Added option to change the placement of the individual objects of the plugin.
  • Improved error reporting.
  • Added localization for error messages.
  • Minor bug fixes.


  • Bug fixes to correct incompatibilities of the new ajax functionality when uploadrole is set to "all".


  • Bug fixes to correct incompatibilities of the new ajax functionality with redirectlink, filebaselink and adminmessages.


  • Correction of serious bug that prevented the normal operation of the plugin when the browser of the user supports HTML5 functionality.
  • Tags added to the plugin WordPress page.


  • Major lifting of the whole code.
  • Added ajax functionality so that file is uploaded without page reload (works in browsers supporting HTML5).
  • Added upload progress bar (works in browsers supporting HTML5).
  • Added option to allow user to select if wants to use the old form upload functionality.
  • File will not be saved again if user presses the Refresh button (or F5) of the page.
  • Translation strings updated.
  • Bug fixes for problems when there are more than one instances of the plugin in a single page.


  • Added option to notify user about upload directory.
  • Added option to allow user to select a subfolder to upload the file.


  • css corrections for bug fixes.


  • Added option to attach uploaded file to notification email.
  • Added option to customize message on successful upload (variables %filename% and %filepath% can be used).
  • Added option to customize color of message on successful upload.
  • "C:\fakepath\" problem resolved.
  • warning message about function create_directory() resolved.
  • css enhancements for compatibility with more themes.


  • Additional variables added (%filename% and %filepath%).
  • All variables can be used inside message subject and message text.
  • Added option to determine how to treat duplicates (overwrite existing file, leave existing file, leave both).
  • Added option to determine how to rename the uploaded file, when another file already exists in the target directory.
  • Added option to create directories and upload files using ftp access, in order to overcome file owner and SAFE MODE restrictions.
  • Added the capability to redirect to another web page when a file is uploaded successfully.
  • Added the option to show to administrators additional messages about upload errors.
  • Bug fixes related to interoperability with WP_Filebase


  • Added notification by email when a file is uploaded.
  • Added the ability to upload to a variable folder, based on the name of the user currently logged in.


Added the option to allow anyone to upload files, by setting the attribute uploadrole to "all".


Initial version.

Requires: 2.9.2 or higher
Compatible up to: 4.2.4
Last Updated: 2015-8-14
Active Installs: 10,000+


4.4 out of 5 stars


9 of 14 support threads in the last two months have been resolved.

Got something to say? Need help?


Not enough data

0 people say it works.
0 people say it's broken.

100,1,1 100,1,1