Thread

New file upload directory made for PDF files, and works when using Mark Huot’s File upload extension.

Now I need to upload/link to some PDF’s from the middle of a large textarea, which obviously requires using the EE “Upload File” button. I click that, select my PDF for upload to the PD upload destination we set up, and inevitably (regardless of the size on the PDF…I’m uploading PDF’s from 17k to 2MB) I get this message: “The filetype you are attempting to upload is not allowed”.

I’m logged in as a Super-Admin, the file upload destination is set to “All File Types”, and the path is correct because we’ve already uploaded a number of PDF files for another weblog using Huot’s extension on a different custom field. Right now, I’m dragging those files out there via FTP, and then just browsing the directory, rather than uploading through the CP with “Upload File”.

Is there any obvious setting I might be missing?

Just tried uploading images to a different directory (that allows images…) with the same method, and I’m getting the same error message. So, it looks like I can’t use the EE “Upload File” feature at all.

I’m a little stumped here - I feel like I’m missing something obvious!

What version/build are you running?  And pdf should be in the allowed mime types- in system/lib/mimes.php, but… anything odd about the file names?  Can you paste the name of one that fails?

ExpressionEngine 1.6.3 - Build: 20080319

Sample filenames I’m trying to upload:

To the default “Main Upload Directory”
economic_impact.jpg
annual_operations.jpg

To the “PDF File” directory
Local_Economic_Plan_Blueprint.pdf
CVAccessNeeds.pdf

Nothing out of the ordinary on these. Again, uploading to these directories through any custom field set to “File” using Huot’s File extension works fine.

This particular site is on a Mosso server.
Sample File Upload Info:
Server Path to Upload Directory: /mnt/Target01/123456/654321/www.site.com/web/content/uploads/pdf/
URL of Upload Directory: http://www.site.com/uploads/pdf/
Allowed File Types: All file types

See anything amiss with the above? Thanks!

No- looks dead correct to me.  Would be a good idea to go ahead and upgrade, just in case that’s the issue.  Hm- could try attaching the pdf here, see if that works.  And I’ve got another report of similar issue I’m about to go check now.  Let’s see if that gives me any hints.

Ah- other thread they were hitting that due to the security filter.  There have been tweaks since 1.6.3, so I’d seriously try upgrading before poking it too hard.  Let’s blow the dust out and get the bug fixes in there.

Sound good?

Yep, I’ll try doing that first, and report back here on whether that did the trick.

Just let us know what you find out, Ryan.

For the record, still using 1.6.3, I set “Apply XSS Filtering to uploaded files?” to “No” as someone suggested, and I’m still getting the same error message. May try to update the site to 1.6.4 if the client is OK with that.

Yeah, the fixes are in the 1.6.4 20080808 build.

I am experiencing the same error, even though I have upgraded to Build:  20080829

I have also set the control panel as folows: Allowed File Types = All file types

Is there something I am missing?

hereward, is this a PDF file or what kind of file are you attempting to upload? Is it you trying to upload it as a SuperAdmin?

What happens if your turn off XSS Sanitizing?

Admin > System Preferences > Security and Session Preferences

I have done as you requested. This makes no difference.

The file extension is “.flv”

file size = 580 Kb

Have you allowed for that filetype in system/lib/mimes.php? You need to edit that manually, I think.

Have you allowed for that filetype in system/lib/mimes.php? You need to edit that manually, I think.

I can confirm that this needs to be edited manually - personally I would like to see a control panel option where file extensions could be added to the safe list