Title: Security Guidelines II
Last modified: January 16, 2019

---

# Security Guidelines II

 *  Resolved [gcurtisdep](https://wordpress.org/support/users/gcurtisdep/)
 * (@gcurtisdep)
 * [7 years, 4 months ago](https://wordpress.org/support/topic/security-guidelines-ii/)
 * I am having the same problem as bkgeterna (@bkgeterna) [https://wordpress.org/support/topic/security-guidelines/](https://wordpress.org/support/topic/security-guidelines/)
 * I added the XLSM mime type to allow for initially uploading the file using the
   wp-config define(‘ALLOW_UNFILTERED_UPLOADS’, true);.
 * However, trying to replace an XLSM file.
    $mimes[‘xlsm’] = “application/vnd.ms-
   excel”;
 * Getting “File type does not meet security guidelines. Try another.”
 * Seems the wp_check_filetype_and_ext() is returning an empty $filedata[“ext”]
 * Please let me know how to replace an XLSM file.
 * The page I need help with: _[[log in](https://login.wordpress.org/?redirect_to=https%3A%2F%2Fwordpress.org%2Fsupport%2Ftopic%2Fsecurity-guidelines-ii%2F%3Foutput_format%3Dmd&locale=en_US)
   to see the link]_

Viewing 8 replies - 1 through 8 (of 8 total)

 *  Plugin Author [ShortPixel](https://wordpress.org/support/users/shortpixel/)
 * (@shortpixel)
 * [7 years, 3 months ago](https://wordpress.org/support/topic/security-guidelines-ii/#post-11116296)
 * [@gcurtisdep](https://wordpress.org/support/users/gcurtisdep/) – thank you for
   using EMR and for your message. Could you please try this [post](https://wordpress.org/support/topic/emr-csv-not-able-to-replaced/)
   as it could contain a solution to your problem?
 *  [miux](https://wordpress.org/support/users/miux/)
 * (@miux)
 * [7 years, 3 months ago](https://wordpress.org/support/topic/security-guidelines-ii/#post-11116299)
 * Possible solution:
    [https://wordpress.org/support/topic/bugfix-upload-files-restriction/](https://wordpress.org/support/topic/bugfix-upload-files-restriction/)
 *  Thread Starter [gcurtisdep](https://wordpress.org/support/users/gcurtisdep/)
 * (@gcurtisdep)
 * [7 years, 3 months ago](https://wordpress.org/support/topic/security-guidelines-ii/#post-11117499)
 * Thank you for solutions.
 * I installed [https://wordpress.org/plugins/disable-real-mime-check/](https://wordpress.org/plugins/disable-real-mime-check/)
   reluctantly and it solved my problem.
 * Hopefully, the next release of EMR has this corrected and I can remove this plugin.
 *  Plugin Author [ShortPixel](https://wordpress.org/support/users/shortpixel/)
 * (@shortpixel)
 * [7 years, 3 months ago](https://wordpress.org/support/topic/security-guidelines-ii/#post-11120375)
 * [@gcurtisdep](https://wordpress.org/support/users/gcurtisdep/) – This isn’t an
   EMR issue but rather a WP security limitation. While I understand that you’d 
   like to only have a single plugin instead of 2 we do not believe that adding 
   this kind of feature (like the one covered by [this plugin](https://wordpress.org/plugins/disable-real-mime-check/))
   would be aligned with EMR’s scope.
 *  Thread Starter [gcurtisdep](https://wordpress.org/support/users/gcurtisdep/)
 * (@gcurtisdep)
 * [7 years, 3 months ago](https://wordpress.org/support/topic/security-guidelines-ii/#post-11122703)
 * [@shortpixel](https://wordpress.org/support/users/shortpixel/) I agree that you
   should not add this kind of feature but I believe it is still an EMR issue. In
   my opinion, if I add a filter to upload a certain file type (xlsm), then I would
   believe the EMR should allow that file type to be replaced. By EMR using wp_check_filetype_and_ext,
   I hope this will be [corrected in WordPress 5.2](https://core.trac.wordpress.org/ticket/40175)
 *  Plugin Author [ShortPixel](https://wordpress.org/support/users/shortpixel/)
 * (@shortpixel)
 * [7 years, 3 months ago](https://wordpress.org/support/topic/security-guidelines-ii/#post-11148696)
 * [@gcurtisdep](https://wordpress.org/support/users/gcurtisdep/) this should be
   fixed as suggested by you in the latest plugin update, could you please check
   and confirm?
 * Thank you,
    Alex
 *  Thread Starter [gcurtisdep](https://wordpress.org/support/users/gcurtisdep/)
 * (@gcurtisdep)
 * [7 years, 3 months ago](https://wordpress.org/support/topic/security-guidelines-ii/#post-11148798)
 * [@shortpixel](https://wordpress.org/support/users/shortpixel/)
    Hi Alex,
 * Thank you for letting me know. However, EMR update version 3.2.8 did not fix 
   my issue. I continue to get ‘File type does not meet security guidelines. Try
   another.’ when trying to replace a file that already exists with the same extension
   XLSM.
 *  Plugin Author [ShortPixel](https://wordpress.org/support/users/shortpixel/)
 * (@shortpixel)
 * [7 years, 3 months ago](https://wordpress.org/support/topic/security-guidelines-ii/#post-11152514)
 * Thank you for your follow-up, we’re (again!) looking into this.

Viewing 8 replies - 1 through 8 (of 8 total)

The topic ‘Security Guidelines II’ is closed to new replies.

 * ![](https://ps.w.org/enable-media-replace/assets/icon-256x256.png?rev=1940728)
 * [Enable Media Replace](https://wordpress.org/plugins/enable-media-replace/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/enable-media-replace/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/enable-media-replace/)
 * [Active Topics](https://wordpress.org/support/plugin/enable-media-replace/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/enable-media-replace/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/enable-media-replace/reviews/)

 * 8 replies
 * 3 participants
 * Last reply from: [ShortPixel](https://wordpress.org/support/users/shortpixel/)
 * Last activity: [7 years, 3 months ago](https://wordpress.org/support/topic/security-guidelines-ii/#post-11152514)
 * Status: resolved