Hot answers tagged

7

I assume that EE's native file upload functions use the Upload class, but what exactly does the Upload class do to validate and sanitize? Does it check MIME type using some sort of actual file analysis, or does it simply rely on what the browser reads it as? The Upload class uses the $_FILES array and it does use $_FILES[]['type'], but we do some ...


4

I think it's a bug, look at this bug report: https://support.ellislab.com/bugs/detail/19732 Francois


3

I've seen instances where PDF uploads won't work in Firefox if you've got ExpressionEngine XSS filtering file uploads. In Admin -> Security and Session Preferences, set "Apply XSS Filtering to uploaded files?" to "No". I'm not a fan of disabling security measures like this, but I've found no other solution.


3

This is not a solution, but I am using EE 2.7 and have been able to narrow down the offending code. Simply commenting out these three lines allowed for my offending PDFs to pass. I personally am not using this in production, and I have spent time trying to modify the code to get it to work... with no luck. Maybe someone can use this information to help ...


2

I figured it out. The Browse Server button only appears when the upload directory belongs to the current site. In the Wygwam settings you can create different configurations. By default there are the Basic and Full configuration. You can use the clone function to duplicate the configuration you're using now. For me this is Basic. After you clone it you can ...


2

A few things that should help you out. 1) You should be using the EE instance. Normally you to the get_instance() in the constructor of your module and make it available as a class variable. 2) The do_upload method accepts a string with the name of the file upload field, not the value of the posted field. Your code should look somehting like this // ...


2

I use the Focus Labs 'master.config' system rather than the Bootstrap one but it's basically just a variation on the same theme AFAIK so hopefully this input will still be applicable. What I've found is that whilst, in theory, you're supposed to create the upload destinations before you can redefine them with your config file, in practice it is possible to ...


2

This is caused by not having a trailing slash on the server_path parameter in the upload directory config. The Focus Labs documentation within the master config doesn't include the slash $env_config['upload_preferences'] = array( 1 => array( 'name' => 'Uploads', 'server_path' => $images_path . '/uploads', '...


2

try to use this one 'pdf' => array('application/pdf', 'application/x-download', 'application/download') and tell me and you can always solve this problem by rename the mimeTypes.rdf file which you can find in AppData\Roaming\Mozilla\Firefox\Profiles\ Regard's.


1

have you checked your php max upload filesize?


1

I had a similar issue recently when PHP was reconfigured. It turned out PHP's fileinfo extension wasn't enabled. Fixing that fixed the upload problem I was having. Might at least be something to check on in your case too.


1

I was able to solve this problem. it turned out that there was a wrong FastCGI implemented on the server. My host implemented a new version of FastCGI and now the upload with assets works like it should.


1

Channel Files will probably do what you're looking to do. The "Limit Stored Files by Author" setting is probably what you're looking for, here's a screenshot of the fieldtype settings screen: http://www.devdemon.com/images/products/30/fieldtype.jpg You can buy it here: http://devot-ee.com/add-ons/channel-files


1

If you use S3 you don't need youtube. CloudFront even has streaming http://aws.amazon.com/cloudfront/streaming/


1

I don't believe there's an off the shelf Vimeo or YouTube uploader available currently. Would you be open to using Amazon S3 for storage? If so, you could use Pixel & Tonic's Assets which allows you to use S3 as a file upload folder.


1

Checked the permissions of the upload destination folder, make sure that PHP has permission to create files and folders. If the 'thumbs' folder exists in this destination make sure nothing odd has happen to that, and it's permissions are set correctly. EE should have created it but in the past I've deleted whole directories and uploaded local folders with a ...


1

Sounds like an addon is getting in the way. You can check to see if it's an Extension causing the issue by temporarily disable Extensions by adding this into your /system/expressionengine/config/config.php file: $config['allow_extensions'] = 'n';


1

This was a bug that has been fixed in Assets 2.2. See changelog.


1

Ah, OK… "SafeCracker File inherits the tags of the standard File field" …so I can just use the appropriate single variable parameter such as… {member_avatar:image_manipulation_short_name} Must read more carefully before posting!


Only top voted, non community-wiki answers of a minimum length are eligible