Comments on: WordPress 2.5 Released & My Needed Fix for Image Upload on servers with Mod_Security

By: Gary LaPointe

Gary LaPointe — Mon, 26 May 2008 19:39:16 +0000

2 more things:
1) The files are in my media library and appear to be tied to the post.

2) did you stop using the “Read Gary’s last blog post” plug-in? If so, any reason why? (I was thinking of using it, but if the cool kids aren’t using it any more…)

By: Gary LaPointe

Gary LaPointe — Mon, 26 May 2008 18:55:24 +0000

Here’s the weird thing for me.

Mine uploads the files fine (did not mod anything). I can FTP in to the site and see them, and when I look in the “media library” they’re there.

It’s when I hit “insert into post” the flash frame goes blank and it never inserts my photos. This happens on my leopard Mac in Safari and Firefox (flash 9.x).

Very strange….
Gary

By: Lelia Katherine Thomas

Lelia Katherine Thomas — Sun, 04 May 2008 04:12:48 +0000

Just wanted to say thanks so much for publishing that fix. My site requires a lot of images to be posted, and I thought I was up the creek without a paddle for a moment there!

By: Gary LaPointe

Gary LaPointe — Sat, 03 May 2008 14:30:17 +0000

I haven’t installed it yet. But when implementing something nice a new Flash unloader I can’t believe they didn’t leave in the code for the old uploader (just in case); especially with more and more mobile devices coming out I’d hate to exclude WordPress from my choices someday since I need it to work with an non-Flash device.

Gary

By: Wonderer

Wonderer — Sat, 03 May 2008 14:25:20 +0000

Gary,

The problem is still there in 2.5.1, unless you apply the htaccess mod. I doubt there is any way to fix it within the Wordpress code unless they develop a different method of uploading files.

One has to assume that Wordpress 2.5 and 2.5.1 were only tested on servers with mod_security disabled, otherwise this bug would have been a show-stopper.

Wonderer

By: Gary LaPointe

Gary LaPointe — Fri, 02 May 2008 03:21:45 +0000

Lisa,
Does 2.5.1 fix this?

By: Wonderer

Wonderer — Fri, 02 May 2008 00:27:13 +0000

Hi Lisa,

This is a major problem and there are thousands of Google entries reporting it. Your solution worked for me but I have seen other proposed solutions that open mod_security for every file, which seems quite dangerous.

I’m amazed that there is no mention of this issue in the official release notes, and I have no idea how to reach the developers in order to escalate the problem. Perhaps you might be able to elevate it further.

Wonderer

P.S. Loved your book!

By: Yan

Yan — Mon, 28 Apr 2008 18:04:02 +0000

Hi Lisa,

It seems like everyone is advocating the fix by editing .htaccess. I tried that but it gives me fatal error and worsens the matter further - it couldn’t even show the upload box.

Sad

By: Lisa

Lisa — Mon, 21 Apr 2008 05:42:56 +0000

@Sage - I did a quick Google search on that error message and found this. Give it a shot - good luck!

By: Sage

Sage — Mon, 21 Apr 2008 05:37:32 +0000

I have altered the htaccess code many times now and I still get this message.
Fatal error: Call to undefined function wp_constrain_dimensions() in /home2/newyorka/public_html/wp-admin/includes/image.php on line 173
I’m using safari and FF on a Mac OS 10.5

Help please.

(» Read Sage’s last blog post..Adi visits)

By: 12thharmonic

12thharmonic — Mon, 07 Apr 2008 00:02:22 +0000

A better fix?
This morning I go to a client’s site and my server is deleting the htaccess file. This is happening on all my wordpress blogs. Even when I delete the fix. I have a ticket in with my parent host. Anyone else run into this?

If there is a new fix for this issue (which worked till the auto delete thing began)? I assume, my perent host saw the exploit and took action.

(» Read 12thharmonic’s last blog post..Follow Up: The Green Scare - The Government and Eco-Terrorism)

By: How to fix Wordpress 2.5 image upload issue

How to fix Wordpress 2.5 image upload issue — Fri, 04 Apr 2008 09:34:12 +0000

[...] upload any image through the new AJAX image uploader. After i search through internet, i found this post, which teach user how to fix this [...]