Support » Fixing WordPress » New security restrictions on 3.6.1

Viewing 10 replies - 1 through 10 (of 10 total)
  • Sorry – what restrictions? I think you’ll find that this is being controlled by your server’s configuration. Try asking your hosts about it.

    nope. those are new on 3.6.1, bro:

    Additional security hardening:

    Updated security restrictions around file uploads to mitigate the potential for cross-site scripting. The extensions .swf and .exe are no longer allowed by default, and .htm and .html are only allowed if the user has the ability to use unfiltered HTML.

    http://codex.wordpress.org/Version_3.6.1

    i updated one blog and i can’t upload swf to it now.

    Oh – I hadn’t spotted that! Do you need it just for admins?

    for now yes, but i’d like full control over it… it says these file types are forbidden by default. i guess there is a way to config it.

    I’ve not tried it myself but something like:

    function demo($mimes) {
    	if ( function_exists( 'current_user_can' ) )
    		$unfiltered = $user ? user_can( $user, 'unfiltered_html' ) : current_user_can( 'unfiltered_html' );
    	if ( !empty( $unfiltered ) ) {
    		$mimes = array(
    				'swf' => 'application/x-shockwave-flash',
    				'exe' => 'application/x-msdownload',
    		);
    	}
    	return $mimes;
    }
    add_filter('upload_mimes','demo');

    in your theme’s functions.php file might work.

    [EDITED]

    Whoops – made an error in there!

    function demo($mimes) {
    	if ( function_exists( 'current_user_can' ) )
    		$unfiltered = $user ? user_can( $user, 'unfiltered_html' ) : current_user_can( 'unfiltered_html' );
    	if ( !empty( $unfiltered ) ) {
    		$mimes = array(
    				'swf' => 'application/x-shockwave-flash',
    				'exe' => 'application/x-msdownload',
    		);
    	}
    	return $mimes;
    }
    add_filter('upload_mimes','demo');

    So far, it seems to be working!

    Thanks buddy!

    Cool! 🙂

    hello

    esmi i had the same problem and your advice helped me too, but now i have

    another issue, in new wp (3.6.1) it is also impossible to upload images

    can you help me?

    thnaks

    Moderator Jan Dembowski

    (@jdembowski)

    Forum Moderator and Brute Squad

    nikaba per the forum welcome can you please post your own topic?

    How-To and Troubleshooting

    now i have another issue, in new wp (3.6.1) it is also impossible to upload images

    Your problem is similar but not identical to this one.

Viewing 10 replies - 1 through 10 (of 10 total)
  • The topic ‘New security restrictions on 3.6.1’ is closed to new replies.