[wp-testers] Uploading images - htaccess fix

Andy Skelton skeltoac at gmail.com
Thu Mar 27 02:16:09 GMT 2008


On Wed, Mar 26, 2008 at 6:22 PM, Benoit Bisson <benoit at benoitbisson.com> wrote:
> The image uploading issue that results in an http error has been brought up
>  repeatedly, and answers on the topic repeatedly point towards either add-on
>  issues or the possibility of the user not having the latest Flash version.
>  Well, before any user starts pulling out hair, I believe it's Brent Logan
>  who first posted this slight change to the htaccess file:
>
>  > SecFilterEngine Off
>  > SecFilterScanPOST Off
>
>  That worked like a charm for me, using WP2.5 RC2, with either FF or IE,

That's good, but before we turn that into a core patch or even a
recommendation for other users we should make sure it's as minimal as
possible. The way I read it, those lines turn off the security filter
engine for everything at or below that directory level. Can we get the
desired result within just the desired scope? And what happens when
mod_security is not loaded? (Hint: 500)

This is something I crafted from a few google hits:

<IfModule mod_security.c>
SecFilterSelective "REQUEST_URI" "wp-admin/async-upload.php" "allow,nolog"
</IfModule>

Would you mind testing it? I don't have mod_security so I need some
help on this one.

Cheers,
Andy


More information about the wp-testers mailing list