Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author Wordfence Security

    (@mmaunder)

    I think this may be an issue with your site. What’s probably happening is the .htaccess file created in the uploads folder is incompatible with your config and is generating a 500 error. Please try the following:

    Enable the option on your site.

    Then try to load an image URL directly that is not appearing on your site. Right click the image and open it in a new tab. Let us know what you see and post a screenshot if you can. Even better, let us know what appears in your web server error logs if you have access to those – that will tell us why the .htaccess is incompatible with your config and help us fix it.

    Regards,

    Mark.

    Thread Starter marek

    (@bahus01)

    When I visit my site I can see everything except images. When I open an image in a new tab, I’m getting the following error:

    The server encountered an internal error or misconfiguration and was unable to complete your request.

    Please contact the server administrator at [] to inform them of the time this error occurred, and the actions you performed just before this error.

    The htaccess file that’s in uploads directory looks like this:

    # BEGIN Wordfence code execution protection
    <IfModule mod_php5.c>
    php_flag engine 0
    </IfModule>

    AddHandler cgi-script .php .phtml .php3 .pl .py .jsp .asp .htm .shtml .sh .cgi
    Options -ExecCGI
    # END Wordfence code execution protection

    Here is what’s in web server error logs:

    [Tue Jan 27 01:58:10.520908 2015] [core:alert] [pid 19465] [client xx.xx.xx.xx:60562] /var/www/wp-content/uploads/.htaccess: php_flag not allowed here, referer:

    Any suggestions?

    Thanks,

    Marek

    Thread Starter marek

    (@bahus01)

    It seems to be working when I add this to apache2 conf file

    <Directory “/var/www/wp-content/uploads/”>
    AllowOverride All
    </Directory>

    Not sure if the code doesn’t defeat the purpose…

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Serious Issue with 'Disable Code Execution for Uploads directory'’ is closed to new replies.