Thread

My client’s generating his PDFs directly from Word for Windows 98. Seems to be a common thread. FYI.

My client’s generating his PDFs directly from Word for Windows 98. Seems to be a common thread. FYI.

Again, don’t want to lose the original post:

PDF uploads worked fine for me (without XSS setting changed to ‘no’) in all versions prior to EE 2.1.3.

And, again, to not lose the original post, I concurred. My client’s Word-generated PDFs uploaded fine prior to 2.1.3 (without XSS setting changed to ‘no’).
For the record.

carvingCode and dashard,

Can you confirm for troubleshooting purposes if you can or cannot upload the PDF that Sue attached to this thread.

Can you also both attach a PDF that will not upload to each of your installs so we can try and replicate on our end please

Turning XSS filtering back to ‘yes’ I WAS able to upload Sue’s “Dinner” PDF. I was once again NOT able to upload the Word doc converted to PDF by my client. I’m attaching that here in case you want to take a look at its internals.

EDIT: HA! I tried to upload the PDF in question (see above) and got the MIME type error.

http://queensvw.com/images/uploads/grabs/mime-type-error.png

ONE MORE EDIT: Ran the document through Acrobat’s “Prepare for Web Publishing” wizard, and that one failed as well. Since I can’t upload it here, I posted it on my server and it can be downloaded from the website, again, to examine its internals.

http://queensvw.com/images/uploads/grabs/Holidays-office-2011.pdf

dashard,

Basically there is JavaScript included in the PDF after being created from Word.
As you can see I have been able to upload the PDF . This was after removing the JS in the PDF.

Tried the same on this end and I get a message stating that my changes cannot be accepted:

http://queensvw.com/images/uploads/grabs/js-error.mov

Hi Dashard,

You are editing it on a mac. so you may need to check the file permissions and chown the file to do that.

Sincerely,

Barry Cogan

I am afraid that really looks like an issue with Word: saving a PDF file will embed some Javascript which will trigger EE’s XSS filtering, doing what it was designed to do. If that is not desired turning off that check is really the only viable option. Superadmin uploads are never subjected to such checks, either.

@barry - has nothing to do with permissions. Seems more like an internal XML structure that Acrobat is insisting on keeping.
@ingmar - I think I have to dispute the SuperAdmin being exempt from XSS checks, as when my client reported the issue to me I did, in fact, attempt the upload while logged in as SuperAdmin. It failed with the error message provided. Can try again to make sure…

http://queensvw.com/images/uploads/grabs/suuper-admin-error.png

Nope. No go as Super Admin.

Hi -

With XSS filtering set to ‘Yes’, I can’t open the file Sue attached, nor any other.  With it set to ‘No’ I can.

BUT, let me mention something that may help move this toward a solution.

I was moving my local dev install to my remote testing area today.  After the move and import of the database, I kept getting some weird PHP errors. (Associated with Magpie and others that I can’t recall specifics on).

So, I decided to go for a clean install of EE 2.1.3 on the remote.  Did that.  Moved my addons and templates over, imported the database, and made the changes int he CP.

With the clean install, I can upload all PDFs with ‘XSS filtering’ set to ‘Yes’.

So, I’m concluding there was some problem during the upgrade from 2.1.1 -> 2.1.2 -> 2.1.3 here.

When I get back from the holiday, I’ll do a clean install locally to see if that clears things up.

Thanks,

Randy

Hmmmm…Verrry Int-ereshtingk. EL?

dashard,

It failed with the error message provided. Can try again to make sure…

This error looks more like a permissions problem. Can you check the permissions on your uploads folder to make sure that it is writable (777)

permissions are all 777. The error text seems disjointed from the error.

Hi Dashard,

Is your site a fresh install and please also confirm the version and build? Have you copied or edited the system/expressionengine/config/mimes.php

@carvingCode, please let us know what happens after your test.

Cheers

Greg