Title: rpart's Replies | WordPress.org

---

# rpart

  [  ](https://wordpress.org/support/users/rpart/)

 *   [Profile](https://wordpress.org/support/users/rpart/)
 *   [Topics Started](https://wordpress.org/support/users/rpart/topics/)
 *   [Replies Created](https://wordpress.org/support/users/rpart/replies/)
 *   [Reviews Written](https://wordpress.org/support/users/rpart/reviews/)
 *   [Topics Replied To](https://wordpress.org/support/users/rpart/replied-to/)
 *   [Engagements](https://wordpress.org/support/users/rpart/engagements/)
 *   [Favorites](https://wordpress.org/support/users/rpart/favorites/)

 Search replies:

## Forum Replies Created

Viewing 2 replies - 1 through 2 (of 2 total)

 *   Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/)
    In
   reply to: [[Wordfence Security - Firewall, Malware Scan, and Login Security] File upload error](https://wordpress.org/support/topic/file-upload-error-22/)
 *  [rpart](https://wordpress.org/support/users/rpart/)
 * (@rpart)
 * [4 years, 6 months ago](https://wordpress.org/support/topic/file-upload-error-22/#post-15488149)
 * Hi guys,
 * wanted to +1, as I have the very same issue as of today as described above, but
   with Contact Form 7 plugin that uploading files.
    After a looong investigation
   I have found out the rule “Malicious File Upload (PHP)” is causing the issue;
   despite the files uploaded are PDF`s (for me other file types are OK including
   images). Would have been easier if I found this thread first, meh 🙂
 * So in my experience, WF was correctly adding the exception to the CF7 callback
   during learning mode, but after switching to protection mode the api calls for
   anonyms users like `/wp-json/contact-form-7/v1/contact-forms/4668/feedback` are
   all giving http 403, without any sign/entry in live traffic view, or any log 
   entry in WP logs. Pretty frustrating as you can guess, so until a long term fix
   it would be great to have at least a log entry when WF finds a file malicious.
 * In my case it is not possible to switch back to pre 8 version of PHP, so my question
   if there is any suggestion apart form turning off this rule?
 * Thanks,
    Roland
 *   Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/)
    In
   reply to: [[Advanced Addons for Elementor] Twitter profile pictures not using SSL](https://wordpress.org/support/topic/twitter-profile-pictures-not-using-ssl/)
 *  Thread Starter [rpart](https://wordpress.org/support/users/rpart/)
 * (@rpart)
 * [6 years, 5 months ago](https://wordpress.org/support/topic/twitter-profile-pictures-not-using-ssl/#post-12832397)
 * Hi guys, thanks for your reply, but i just updated the your plugin and the issue
   remianed still. Could you please take a look?
 * Thanks

Viewing 2 replies - 1 through 2 (of 2 total)