With this plugin you or other users tin can upload files to your site from whatsoever folio, mail or sidebar easily and deeply.

Only put the shortcode [wordpress_file_upload] to the contents of whatever WordPress page / postal service or add the plugin's widget in any sidebar and you volition be able to upload files to any directory inside wp-contents of your WordPress site.

Y'all can add custom fields to submit additional data together with the uploaded file.

Yous can use it to capture screenshots or video from your webcam and upload it to the website (for browsers that back up this characteristic).

Yous tin even use it as a uncomplicated contact (or whatever other type of) course to submit data without including a file.

The plugin displays the listing of uploaded files in a split up top-level menu in Dashboard and includes a file browser to access and manage the uploaded files (only for admins currently).

Several filters and actions before and after file upload enable extension of its capabilities.

The characteristics of the plugin are:

  • It uses the latest HTML5 applied science, even so it will also work with sometime browsers and mobile phones.
  • It is compliant with the Full general Data Protection Regulation (GDPR) of the European Marriage.
  • It can exist added in posts, pages or sidebars (as a widget).
  • Information technology tin can capture and upload screenshots or video from the device'southward camera.
  • Information technology supports additional form fields (like checkboxes, text fields, email fields, dropdown lists etc).
  • Information technology tin be used as a unproblematic contact form to submit data (a pick of file tin be optional).
  • It produces notification messages and east-mails.
  • Information technology supports option of destination folder from a list of subfolders.
  • Upload progress tin exist monitored with a progress bar.
  • Upload process tin exist cancelled at any time.
  • It supports redirection to another url after successful upload.
  • There can be more than than i instances of the shortcode in the aforementioned folio or post.
  • Uploaded files tin exist added to Media or exist fastened to the current folio.
  • Uploaded files can exist saved to an FTP location (ftp and sftp protocols supported).
  • It is highly customizable with many (more than 50) options.
  • It supports filters and deportment before and after file upload.
  • Information technology contains a visual editor for customizing the plugin easily without any cognition of shortcodes or programming
  • It supports logging of upload events or management of files, which tin be viewed by admins through the Dashboard.
  • Information technology includes an Uploaded Files top-level menu detail in the Dashboard, from where admins can view the uploaded files.
  • It includes a file browser in the Dashboard, from where admins can manage the files.
  • It supports multilingual characters and localization.

The plugin is translated in the following languages:

  • Portuguese, kindly provided by Rui Alao
  • German
  • French, kindly provided by Thomas Bastide of http://www.omicronn.fr/ and improved by other contributors
  • Serbian, kindly provided by Andrijana Nikolic of http://webhostinggeeks.com/
  • Dutch, kindly provided by Ruben Heynderycx
  • Chinese, kindly provided past Yingjun Li
  • Castilian, kindly provided by Marton
  • Italian, kindly provided by Enrico Marcolini https://www.marcuz.it/
  • Shine
  • Swedish, kindly provided by Leif Persson
  • Persian, kindly provided past Shahriyar Modami http://chabokgroup.com
  • Greek

Delight note that old desktop browsers or mobile browsers may not back up all of the above functionalities. In social club to go full functionality use the latest versions browsers, supporting HTML5, AJAX and CSS3.

For additional features, such equally multiple file upload, very large file upload, elevate and drop of files, captcha, detailed upload progress bars, list of uploaded files, epitome gallery and custom css please consider WordPress File Upload Professional.

Please visit the Other Notes section for customization options of this plugin.

Plugin Customization Options

Please visit the back up page of the plugin for detailed description of customization options.

Requirements

The plugin requires to accept Javascript enabled in your browser. For Internet Explorer yous also need to have Active-X enabled.
Delight note that old desktop browsers or mobile browsers may not back up all of the plugin'southward features. In gild to get full functionality utilize the latest versions of browsers, supporting HTML5, AJAX and CSS3.

  1. First install the plugin using WordPress motorcar-installer or download the .zip file from wordpress.org and install information technology from the Plugins department of your Dashboard or copy wordpress_file_upload directory inside wp-contents/plugins directory of your wordpress site.
  2. Activate the plugin from Plugins department of your Dashboard.
  3. In order to use the plugin simply go to the Dashboard / Settings / WordPress File Upload and follow the instructions in Plugin Instances or alternatively put the shortcode [wordpress_file_upload] in the contents of any page.
  4. Open up the page on your browser and you will see the upload form.
  5. You can alter the upload directory or any other settings easily by pressing the minor edit push found at the left-top corner of the upload form. A new window (or tab) with pop upwardly with plugin options. If yous exercise not see the new window, adjust your browser settings to allow pop-up windows.
  6. Full documentation about the plugin options can be establish at https://wordpress.org/plugins/wp-file-upload/other_notes/ or at http://www.iptanus.com/wordpress-plugins/wordpress-file-upload/ (including the Pro version)

A getting started guide tin be found at http://www.iptanus.com/getting-started-with-wordpress-file-upload-plugin/

Will the plugin piece of work in a mobile browser?

Yeah, the plugins will work in most mobile phones (has been tested in iOS, Android and Symbian browsers as well as Opera Mobile)

Do I need to accept Flash to apply then plugin?

No, you do not demand Flash to use the plugin.

I get a Rubber Manner restriction error when I try to upload a file. Is there an alternative?

Your domain has probably turned Condom MODE ON and you have restrictions uploading and accessing files. WordPress File Upload includes an alternative way to upload files, using FTP access. Simply add the aspect accessmethod="ftp" inside the shortcode, together with FTP access information in ftpinfo attribute.

Can I see the progress of the upload?

Yes, you lot can encounter the progress of the upload. During uploading a progress bar will announced showing progress info, however this functionality functions but in browsers supporting HTML5 upload progress bar.

Can I upload many files at the same fourth dimension?

Yeah, but not in the complimentary version. If you want to allow multiple file uploads, delight consider the Professional version.

Where do files go afterwards upload?

Files by default are uploaded inside wp-content directory of your WordPress website. To change it use attribute uploadpath.

Can I meet and download the uploaded files?

Administrators tin can view all uploaded files together with associated field data from the plugin's Settings in Dashboard. The Professional version of the plugin allows users to view their uploaded files, either from the Dashboard, or from a page or mail.

Are there filters to restrict uploaded content?

Yeah, you tin can control allowed file size and file extensions by using the appropriate aspect (see Other Notes department).

Are there whatsoever upload file size limitations?

Yeah, there are file size limitations imposed past the web server or the host. If you lot desire to upload very large files, please consider the Professional version of the plugin, which surpasses size limitations.

Who tin can upload files?

By default all users can upload files. You can define which user roles are allowed to upload files. Even guests tin can exist immune to upload files. If you want to permit only specific users to upload files, then delight consider the Professional version of the plugin.

What security is used for uploading files?

The plugin is designed not to expose website sensitive information. Information technology has been tested by experts and verified that protects against CSRF and XSS attacks. All parameters passing from server to client side are encoded and sanitized. For higher protection, like use of captcha, please consider the Professional version of the plugin.

What happens if connection is lost during a file upload?

In the free version the upload volition fail. Notwithstanding in the Pro version the upload volition resume and volition keep until the file is fully uploaded. This is especially useful when uploading very large files.

The plugin does not look nice with my theme. What tin I practise?

There is an pick in plugin's settings in Dashboard to relax the CSS rules, so that buttons and text boxes inherit the theme'southward styles. If boosted styling is required, this tin can be done using CSS. The Professional version of the plugin allows CSS rules to be embed in the shortcode.

I've spent almost calendar month trying to become this to work. Information technology doesn't upload to the specified path. Back up is very unresponsive. Requesting a full refund.

Dear plugin author, how on globe could you hardcode the css into wfu_template.php? WHY? Inline css is a very bad practise. Autonomously from that, thanks for nice plugin.

Simply doesn't work. I add together the shortcode to the page, then exam it. Click on the file upload button, choose the file I desire to upload, so click 'Open'. Goes back to the main page and nothing at that place. Information technology doesn't bear witness the file I just chose. Can't upload. Waste material of time.

This plugin seems to be exactly what I need. Oasis't had the take a chance to utilise it that much yet but will likely consider getting the Professional Version. It seems to not work with some plugins, for case Elementor, which is fine. Simply create a separate page for uploading without such plugins.

Information technology took a bit to wrap my caput effectually all of the configuration possibilities, simply it's well worth the learning curve. Once you see everything it can do and how to exercise it, I can't imagine very many scenarios this plugin couldn't cover. If there was any gripe at all, information technology would be that the documentation is a bit scattered about. Accept your time to set this up properly and you'll exist happy you did. V Stars!

Read all 107 reviews

"WordPress File Upload" is open up source software. The following people take contributed to this plugin.

Contributors

  • nickboss

4.xvi.3

  • improved sanitization and escaping of shortcode attributes to avoid XSS attacks
  • file type .svg moved to blacklist to avoid XSS attacks coming from scripts within SVG files
  • added security bank check to forbid uploads inside wp-content/plugin directory
  • improved handling of videoname and imagename file uploader shortcode attributes to avoid directory traversal attacks
  • improved /lib and /extensions loader to avoid arbitrary code execution through injected image files
  • all wfu_blocks.php functions became redeclareable

4.xvi.2

  • minor bug fixes in Pro version

four.16.1

  • corrected $_SESSION variable problem in maintenance purge role

iv.16.0

  • visual editor edit button misalignment fixed
  • corrected echo trouble when recording from webcam with audio

4.15.0

  • COOKIEHASH bug corrected
  • credentials in FTP paths are stripped from the paths
  • corrected File Detais to File Details
  • regex "/(.)<\/mode><script.?>(.)<\/script>(.)/s" changed to "/(.)<\/mode>.?<script.?>(.)<\/script>(.*)/south" in functions.php
  • corrected notice: Undefined alphabetize: post in wfu_admin.php when the website has no posts

iv.xiv.four

  • restored .po files in languages and then that users can change translations

4.14.3

  • slight change in wfu_get_filtered_recs to handle cases where b.date_from is aught
  • code improvements to increase loading speed of plugin's file browser
  • added wfu_mime_content_type() function that uses several methods to become MIME type of a file

4.14.2

  • code improved so that upload message colors correctly suit to shortcode color settings
  • slight modifications to upload bulletin colors while upload is in progress
  • plugin cookie names adjusted in case COOKIEHASH does non exist
  • corrected bug of the new plugin updater causing a alarm when there are plugins that do not accept their own subdirectory
  • closing tags removed from all PHP files to avoid "Headers already sent" errors
  • corrected bug where the uploads counter was showing to non-administrators
  • wfu_log_action and wfu_process_files functions became redeclarable
  • removed debug_log from wfu_process_files_queue
  • consent Yes/No question was added in translation
  • corrected locale of Greek translation

iv.14.1

  • ready webcam play button bug
  • corrected issue with implode() function of minifier library appearing in websites having PHP > vii.4.ii
  • wfu_admin.php modified to utilise wfu_ajaxurl() office

4.14.0

  • modest fixes of bugs and code improvements.

iv.13.1

  • file checking of uploaded files hardened to meliorate handle xss attacks coming through uploaded image files.

four.13.0

  • corrected security vulnerability where remote code could exist executed using directory traversal method. Credits to p4w security expert for identifying the vulnerability.
  • improved user check algorithm during upload, related to upload parameters assortment
  • corrected issues where Restricted Page Loading was working but for pages, all other postal service types were loading the plugin files as if there was no brake

4.12.two

  • corrected bug where files could not be downloaded in some server environments when dboption user country handler was enabled

iv.12.1

  • corrected problems where files could not be downloaded from Dashboard / Uploaded Files folio

four.12.0

  • corrected bug where export information file was not deleted after download
  • corrected problems in FTP credentials configurator about double backslash (\) issue
  • added cookies user state handler that has been integrated with dboption as 'Cookies (DBOption)' to comply with WordPress directives not to use session
  • 'Cookies (DBOption)' user state handler has been set as the default one
  • added advanced option WFU_US_DBOPTION_BASE so that dboption can too work with session
  • added avant-garde option WFU_US_SESSION_LEGACY to use the old session functionality of the plugin, having session_start() in header
  • added auto-aligning of user land handler to 'dboption' during activation (or update) of the plugin
  • bug "Error: [] ringlet error 28" in WordPress Site Wellness disappears when setting user state handler to 'Cookies (DBOption)' or when WFU_US_SESSION_LEGACY advanced option is false
  • added the ability to run PHP processes in queue, which is necessary for correctly handling uploads when user land handler is dboption

iv.11.2

  • added easier configuration of FTP Credentials (ftpinfo) attribute of the uploader shortcode

iv.11.1

  • corrected bug in functions wfu_manage_mainmenu() and wfu_manage_mainmenu_editor() that were echoing and not returning the generated HTML
  • added fix for compatibility with Fast Velocity Minify plugin

4.eleven.0

  • code improved so that shortcode composer can be used by all users who can edit pages (and not just the admins)
  • added environs variable 'Show Shortcode Composer to Non-Admins' to control whether non-admin users can edit the shortcodes
  • added filtering of get_users() part in order to handle websites with many users more efficiently
  • added notification in shortcode composer if user leaves page without saving
  • corrected issues where restricted frontend loading of the plugin was non working for websites installed in localhost due to wrong calculation of asking uri

four.ten.3

  • added the power to move one or more files to another folder through the File Browser feature in Dashboard area of the plugin
  • improved responsiveness of shortcode composer and Primary Dashboard page of the plugin
  • bug fix in wfu_revert_log_action

4.x.ii

  • added wordpress_file_upload_preload_check() office in primary plugin file to avert conflicts of variable names with WordPress
  • updated webcam lawmaking to address createObjectURL Javascript error that prevents webcam feature to work in latest versions of browsers

4.10.i

  • code modified so that vendor libraries are loaded just when necessary
  • improved process of deleting all plugin options
  • added honeypot field to userdata fields; this is a security characteristic, in replacement of captchas, invisible to users that prevents bots from uploading files
  • added attribute 'Consent Deprival Rejects Upload' in uploader shortcode Personal Information tab to stop the upload if the consent answer is no, too as 'Turn down Bulletin' attribute to customize the upload rejection bulletin shown to the user
  • added attribute 'Do Non Remember Consent Answer' in uploader shortcode Personal Data tab to show the consent question every fourth dimension (and not only the first time)
  • attribute 'Preselected Answer' in uploader shortcode Personal Data tab modified to be compatible with either checkbox or radio Consent Format
  • upload result message adjusted to bear witness the right upload status in example that files were uploaded only were not saved due to Personal Data policy
  • code improved for sftp uploads to handle PECL ssh2 bug #73597

four.10.0

  • plugin code improved to support files containing single quote characters (') in their filename
  • corrected problems where plugin was deactivated afterward update

4.9.1

  • added Maintenance activeness 'Purge All Data' that entirely erases the plugin from the website and deactivates information technology
  • added advanced pick 'Hide Invalid Uploaded Files' so that Uploaded Files page in Dashboard tin prove only valid uploads
  • added advanced option 'Restrict Front-Stop Loading' to load the plugin only on specific pages or posts in order to reduce unnecessary workload on pages not containing the plugin
  • code improved for better functioning of the plugin when the website works behind a proxy
  • added selection in Make clean Log to erase the files together with plugin data

four.9.0

  • code further improved to reduce "Iptanus Server unreachable…" errors
  • checked Weglot Translate compatibility; /wp-admin/admin-ajax.php needs to be added to Exclusion URL list of Weglot configuration so that uploads tin work
  • several meaning additions in the Pro version, including Microsoft OneDrive integration

iv.8.0

  • added detail in Admin Bar that displays number of new uploads and redirects to Uploaded Files Dashboard page
  • lawmaking improved in Uploaded Files Dashboard page and so that download activeness directly downloads the file, instead of redirecting to File Browser
  • added Avant-garde option 'WFU_UPLOADEDFILES_COLUMNS' that controls the order and visibility of Uploaded Files Dashboard page columns
  • added Advanced option 'WFU_UPLOADEDFILES_ACTIONS' that controls the social club and visibility of Uploaded Files Dashboard page file actions
  • added several filters in Uploaded Files Dashboard page to make it more customizable
  • PHP part redeclaration system significantly improved to back up arguments past reference, execution later on the original part and redeclaration of variables
  • code improved to reduce "Iptanus Server unreachable…" errors (better functioning of verify_peer http context property)
  • added a link in Iptanus Unreachable Server error message to an Iptanus commodity describing how to resolve it

iv.vii.0

  • added Uploaded Files tiptop-level Dashboard carte du jour item, showing all the uploaded files and highlighting the new ones
  • added Portuguese translation from Rui Alao
  • checked and verified compatibility with Gutenberg
  • plugin initialization deportment moved to plugins_loaded filter
  • fixed problems clearing userdata fields when Select File is pressed
  • File Browser and View Log tables modified to become more than responsive particularly for small screens

four.6.2

  • corrected consent_status alert when updating user profile and Personal Data is off
  • user fields code improved for improve data autofill behaviour

4.half dozen.1

  • added uploader shortcode aspect 'resetmode' to command whether the upload form will be reset after an upload
  • added pagination in File Browser tab in Dashboard area of the plugin

4.6.0

  • corrected slash (/) parse Javascript error almost 'fakepath' appearring on some situations
  • added nonces in Maintenance Actions to increase security
  • improved code in View Log so that no links appear to invalid files
  • improved code in View Log so that when the admin opens a file link to view file details, 'go back' button will atomic number 82 back to the View Log page and not to File Browser
  • improved code in 'Clean Log' push in Maintenance Deportment in Dashboard expanse of the plugin, then that the admin can select the menstruum of make clean-up

4.v.1

  • code improved in wfu_js_decode_obj function for ameliorate compatibility with Safari browser
  • code improved to sanitize all shortcode attributes earlier uploader form or file viewer is rendered
  • removed external references to lawmaking.jquery.com and cdnjs.cloudflare.com for better compliance with GDPR

iv.v.0

  • added basic compliance with GDPR
  • added several shortcode attributes to configure personal data consent appearance and behaviour
  • added area in User Profile from where users can review and alter their consent status
  • added Personal Data option in Settings that enables personal data operations
  • added Personal Information tab in plugin's surface area in Dashboard from where administrators tin can export and erase users' personal data
  • corrected bug not accepting subfolder dimensions when subfolder chemical element was active

4.4.0

  • added culling user country handler using DB Options tabular array in order to overcome problems with session variables actualization on many web servers

four.iii.4

  • all Settings sanitized correctly to preclude XSS attacks – credits to ManhNho for mentioning this problem

4.3.3

  • all shortcode attributes sanitized correctly to shut a serious security pigsty – credits to ManhNho for mentioning this problem

4.iii.ii

  • fixed issues in wfu_before_upload and wfu_after_upload filters that was breaking JS scripts if they contained a closing bracket ']' symbol

4.3.1

  • added placeholder option in available label positions of additional fields; label will be the placeholder attribute of the field

4.3.0

  • fixed bug where ftp credentials did not piece of work when username or password independent (:) or (@) symbols
  • RegExp fix for wfu_js_decode_obj role for improved compatibility with caching plugins
  • corrected WFU_Original_Template::get_instance() method considering it ever returned the original class
  • View Log folio improved so that displayed additional user fields of an uploaded file are not cropped

4.2.0

  • changed logic of file sanitizer; dots in filename are past default converted to dashes, in order to avoid upload failures acquired when the plugin detects double extensions
  • corrected issues where a Javascript error was generated when askforsubfolders was disabled and showtargetfolder was active
  • added css and js minifier in inline code
  • plugin modified so that the shortcodes return correctly either Javascript loads early (in header) or late (in footer)
  • plugin modified so that Media record is deleted when the associated uploaded file is deleted from plugin'due south database
  • corrected bug where some plugin images were non loaded while Relax CSS choice was inactive

4.1.0

  • changed logic of file sanitizer; dots in filename are by default converted to dashes, in order to avert upload failures caused when the plugin detects double extensions
  • added avant-garde pick WFU_SANITIZE_FILENAME_DOTS that determines whether file sanitizer volition sanitize dots or non
  • timepicker script and mode replaced by virtually recent version
  • timepicker script and style files removed from plugin and loaded from cdn
  • json2 script removed from plugin and loaded from WordPress registered script
  • JQuery UI way updated to latest 1.12.1 minified version
  • added wfu_before_admin_scripts filter before loading admin scripts and styles in society to control incompatibilities
  • removed getElementsByClassName-one.0.one.js file from plugin, getElementsByClassName part was replaced past DOM querySelectorAll
  • corrected issues showing alarm "Notice: Undefined variable: page_hook_suffix…" when a non-admin user opened Dashboard
  • corrected fatal error "func_get_args(): Can't exist used as a function parameter" appearing in websites with PHP lower than 5.three
  • added _wfu_file_upload_hide_output filter that runs when plugin should not exist shown (e.grand. for users not inluded in uploadroles), in order to output custom HTML
  • corrected bug where email fields were always validated, fifty-fifty if validate option was not activated
  • corrected bug where number fields did not permit invalid characters, fifty-fifty if typehook choice was non activated
  • corrected bug where email fields were non immune to exist ampty when validate option was activated
  • corrected error T_PAAMAYIM_NEKUDOTAYIM appearing when PHP version is lower than 5.3
  • corrected problems with random upload fails caused when params_index corresponds to more than i params

4.0.ane

  • translation of the plugin in Persian, kindly provided by Shahriyar Modami http://chabokgroup.com
  • corrected problems where notification email was non sending atachments
  • corrected bug not cleaning log in Maintenance Actions

four.0.0

  • huge renovation of the plugin, the UI code has been rewritten to render based on templates
  • code modified so that it can correctly handle sites where content dir is explicitly defined
  • corrected issues in Dashboard file editor so that it tin work when the website is installed in a subdirectory
  • corrected warnings showing when editing a file that was included in the plugin's database
  • added filter in get_posts then that it does not cause problems when there are as well many pages/posts
  • bug fixes so that forcefilename works better and does not strip spaces in the filename
  • code improved to protect from hackers trying to employ the plugin every bit email spammer
  • added advanced variable Forcefulness E-mail Notifications and so that email tin can exist sent even if no file was uploaded
  • corrected bug not showing sanitized filanames correctly in email
  • corrected problems so that dates show-up in local time and non in UTC in Log Viewer, File Browser and File Editor
  • fixed bug showing "Warning: Missing argument ii for wpdb::prepare()" when cleaning upward the log in Maintenance Deportment
  • corrected bug where when configuring subfolders with visual editor the subfolder dialog showed unknown error
  • corrected bug where the Select File push was not locked during upload in case of classical HTML (no-ajax) uploads
  • added cancel button functionality for classic no-ajax uploads
  • added support for Secure FTP (sftp) using SSH2 library
  • successmessagecolor and waitmessagecolors attributes are hidden as they are no longer used

3.eleven.0

  • added the ability to submit the upload course without a file, simply similar a contact course
  • added attribute allownofile in uploader shortcode; if enabled then the upload form tin can be submitted without pick of a file
  • added wfu_before_data_submit and wfu_after_data_submit filters which are invoked when the upload form is submitted without a file
  • added avant-garde debug options for more comprehensive and deep troubleshooting
  • added internal filters for advanced hooking of ajax handlers
  • fixed several security problems
  • fixed issues that was generating an mistake when automatic subfolders were activated and the upload folder did non be
  • corrected bug where unmarried quote, double quote and backslash characters in user fields were non saved correctly (they were escaped)
  • fixed issues where any changes made to the user data (due east.g. through a filter) were not included in the e-mail message
  • added unique_id variable in wfu_before_file_check and wfu_after_file_upload filters
  • changed column titles in the tables of plugin instances in Main tab in Dashboard
  • fixed problems where if a user field was modified from the file editor, custom columns were changing lodge

3.10.0

  • an alternative Iptanus server is launched in Google Cloud for resolving the notorious error "file_get_contents(https://services2.iptanus.com/wp-admin/admin-ajax.php): failed to open stream: Connexion timed out."
  • added option 'Use Culling Iptanus Server' in Settings to switch to the alternative Iptanus Server
  • added advanced option 'Alternative Iptanus Server' that points to an alternative Iptanus Server
  • added advanced option 'Alternative Iptanus Version Server' that points to the culling Iptanus Server URL returning the latest plugin version
  • an error is shown in the Main page of the plugin in Dashboard if Iptanus Server is unreachable
  • a warning is shown in the Master folio of the plugin in Dashboard if an alternative insecure (http) Iptanus Server is used
  • alternative ready of error accessing https://services2.iptanus.com for roll (by disabling CURLOPT_SSL_VERIFYHOST) and for sockets by employing a better parser of socket response
  • added Swedish translation, kindly provided by Leif Persson
  • improved ftp functionality and so that ftp folders can exist created recursively

three.ix.6

  • added internal filter _wfu_file_upload_output before echoing uploader shortcode html
  • added ability to alter the gild of boosted user fields in shortcode visual editor

3.ix.v

  • added surroundings variable 'Upload Progress Mode' that defines how upload progress is calculated
  • improved progress bar calculation
  • small problems fixes in AJAX functions mentioned past Hanneke Hoogstrate http://www.blagoworks.nl/

3.nine.4

  • added choice to enable admin to alter the upload user of a file
  • lawmaking improvements and bug fixes related to file download feature
  • code improvements related to clean database role
  • added Italian translation

3.9.3

  • added option to allow loading of plugin'due south styles and scripts on the forepart-end only for specific posts/pages through wfu_before_frontpage_scripts filter
  • fixed bug where when uploading big files with identical filenames and 'maintain both' option, non all would be saved separately
  • two advanced variables were added to let the admin change the consign office separators

iii.nine.2

  • added surroundings variable to enable or disable version bank check, due to admission problems of some users to Iptanus Services server
  • added timeout pick to wfu_post_request function
  • added Spanish translation, kindly provided by Marton

3.ix.1

  • temporary ready to accost outcome with plugin's Main folio in Dashboard not loading, by disabling plugin version bank check
  • correct Safari trouble with extra spaces in success message coming from force_close_connection
  • right issues where when extension has upper-case letter letters it is rejected

3.9.0

  • a big number of extensions take been blacklisted for preventing upload of potentially dangerous files
  • the plugin will not allow inclusion, renaming or downloading of files with blacklisted extensions based on the new list
  • if no upload extensions are defined or the uploadpattern is too generic, then the plugin volition allow only specific extensions based on a white list of extensions; if the ambassador wants to include more extensions he/she must declare them explicitely
  • the use of the wildcard asterisk symbol has become stricter, asterisk will match all characters except the dot (.), and then the default . pattern will allow only one extension in the filename (and non more as happened so far).
  • added surround variable 'Wildcard Asterisk Style' for defining the style of the wildcard asterisk symbol. If information technology is 'strict' (default) and then the asterisk volition not lucifer dot (.) symbol. If it is 'loose' then the asterisk volition match any characters (including dot).
  • slight bug fixes so that wildcard syntax works correctly with foursquare brackets
  • added maximum number of uploads per specific interval in society to avert DDOS attacks
  • added environment variables related to Deprival-Of-Service attacks in order to configure the behaviour of the DOS attack checker
  • problems fix of wfu_before_file_upload filter that was not working correctly with files larger than 1MB

iii.8.5

  • added bulk actions feature in File Browser in Dashboard for admins
  • added delete and include bulk actions in File Browser
  • improvement of column sort functionality of File Browser
  • added environs variable 'Use Alternative Randomizer' in order to brand cord randomizer part piece of work for fast browsers
  • uploadedbyuser and userid fields became int to cope with large user ID numbers on some WordPress environments

three.8.4

  • dublicatespolicy attribute replaced by grammaticaly correct duplicatespolicy, however backward compatibility with the old attribute is maintained

3.8.3

  • stock-still bug of subdirectory selector that was non initializing correctly after upload
  • fixed slight widget incompatibility with customiser
  • fixed bug of drag-north-drib characteristic that was not working when singlebutton functioning was activated

iii.eight.two

  • fixed problems in wfu_after_file_loaded filter that was not working and was overriden by obsolete wfu_after_file_completed filter
  • added option in plugin's Settings in Dashboard to include additional files in plugin's database
  • added feature in Dashboard File Browser for admins to include additional files in plugin's database

iii.viii.one

  • fixed bug with indistinguishable userdata IDs in HTML when using more than one userdata occurrences

3.8.0

  • added webcam option that enables webcam capture functionality
  • added webcammode atribute to define capture mode (screenshots, video or both)
  • added audiocapture attribute to define if sound volition be captured together with video
  • added videowidth, videoheight, videoaspectratio and videoframerate attributes to constrain video dimensions and frame rate
  • added camerafacing aspect to ascertain the photographic camera source (front or dorsum)
  • added maxrecordtime attribute to define the maximum tape time of video
  • added uploadmediabutton, videoname and imagename attributes to ascertain custom webcam-related labels
  • stock-still problems that strips not-latin characters from filename when downloading files

3.7.iii

  • improved filename sanitization function
  • added Chinese translation past Yingjun Li

3.7.2

  • added option to cancel upload
  • setting added so that upload does not neglect when site_url and home_url are dissimilar
  • added attribute requiredlabel in uploader's shortcode that defines the required keyword
  • required keyword tin now be styled separately from the user field label
  • add together user fields in Media together with file
  • setting added so that userdata fields are shown in Media Library or not
  • added Dutch translation by Ruben Heynderycx

3.vii.1

  • internal code modifications and slight bug corrections

three.7.0

  • significant code modifications to make the plugin pluggable, invisible to users
  • addition of before and after upload filters
  • correction of minor issues in Shortcode Composer of File Viewer

3.6.1

  • Iptanus Services server for getting version info and other utilities is now secure (https)
  • fixed bug with wfu_path_abs2rel function when ABSPATH is only a slash
  • additional fixes and new features in Professional version

3.6.0

  • French translation improved
  • correction of small issues at wfu_functions.php
  • code improvements in upload algorithm
  • wp_check_filetype_and_ext check moved afterwards completion of file
  • added wfu_after_file_complete filter that runs right after is fully uploaded
  • improved appearance of plugin'southward surface area in Dashboard

3.v.0

  • textdomain changed to wp-file-upload to support the translation characteristic of wordpress.org
  • added choice in Maintenance Actions of plugin's area in Dashboard to consign uploaded file data
  • added pagination of non-admin logged user's Uploaded Files Browser
  • added pagination of forepart-end File List Viewer
  • added pagination of user permissions table in plugin's Settings
  • added pagination of Log Viewer
  • corrected bug in View Log that was not working when pressing on the link
  • improvements to View Log feature
  • improvements to file download function to avoid corruption of downloaded file due to set_time_limit office that may generate warnings
  • added wfu_before_frontpage_scripts filter that executes correct before frontpage scripts and styles are loaded
  • added functionality to avoid incompatibilities with NextGen Gallery plugin

3.4.1

  • plugin'south security improved to reject files that contain .php.js or similar extensions

iii.4.0

  • added fitmode attribute to make the plugin responsive
  • added widget "WordPress File Upload Form", and then that the uploader can be installed in a sidebar
  • changes to Shortcode Composer so that it can edit plugin instances existing in sidebars as widgets
  • changes to Uploader Instances in plugin's surface area in Dashboard to show besides instances existing inside sidebars
  • added the ability to define dimensions (width and height) for the whole plugin
  • dimensioning of plugin'south elements improved when fitmode is set to "responsive"
  • filter and non-object warnings of front-finish file browser, actualization when DEBUG mode is ON, removed
  • problems fixed to front-end file browser to hide Shortcode Composer button for not-admin users
  • logic inverse to forepart-end file browser to allow users to download files uploaded past other users
  • code changed to front-end file browser to show a bulletin when a user attempts to delete a file that was not uploaded past him/her

3.3.i

  • bug corrected that was breaking plugin functioning for php versions prior to five.3
  • added a "Maintenance Actions" section in plugin's Dashboard folio
  • added option in plugin's "Maintenance Actions" to completely clean the database log

3.3.0

  • userdatalabel attribute changed to allow many field types
  • added the following user data field types: simple text, multiline text, number, email, confirmation e-mail, password, confirmation countersign, checkbox, radiobutton, date, fourth dimension, datetime, listbox and dropdown list
  • added several options to configure the new user information fields: label text (to define the label of the field), label position (to ascertain the position of the label in relation to the field), required choice (to define if the field needs to exist filled before file upload), do-not-autocomplete option (to preclude the browsers for completing the field automatically), validate option (to perform validity checks of the field before file upload depending on its type), default text (to define a default value), group id (to group fields together such every bit multiple radio buttons), format text (to define field formatting depending on the field type), typehook selection (to enable field validation during typing inside the field), hint position (to define the position of the message that will be shown to prompt the user that a required field is empty or is not validated) as well as an option to define additional data depending on the field type (e.g. ascertain listing of items of a listbox or dropdown list)
  • Shortcode Composer changed to support the new user data fields and options
  • placement attribute can accept more than ane instances of userdata
  • fixed problems not showing engagement selector of date fields in Shortcode Composer when working with Firefox or IE browsers
  • in some cases required userdata input field will turn red if non populated
  • shortcode_exists and wp_slash fixes for working earlier 3.6 WordPress version
  • minor problems fixes

three.two.one

  • removed 'grade-field' class from admin table tr elements
  • corrected bug that was causing problems in uploadrole and uploaduser attributes when a username or function contained uppercase messages
  • uploadrole and uploaduser attributes logic modified; guests are allowed only if 'guests' word is included in the attribute
  • modifications to the download functionality script to be more robust
  • corrected bug that was not showing options below a line item of admin tables in Internet Explorer
  • several feature additions and bug fixes in Professional version

3.two.0

  • added selection in plugin'southward settings to relax CSS rules so that plugin inherits theme styling
  • modifications in html and css of editable subfolders characteristic to wait meliorate
  • modifications in html and css of prompt message when a required userdata field is empty
  • PLUGINDIR was replaced past WP_PLUGIN_DIR then that the plugin can work for websites where the contents dir is other than wp-content
  • stock-still problems that was not assuasive Shortcode Composer to launch when the shortcode was likewise big
  • fixed bug that was causing front end-terminate file list non to piece of work properly when no instance of the plugin existed in the same folio / postal service

three.one.two

  • important bug detected and fixed that was stripping slashes from post or page content when updating the shortcode using the shortcode composer

3.1.1

  • the previous version bankrupt the piece of cake cosmos of shortcodes through the plugin's settings in Dashboard and it has been corrected, together with some improvements

three.i.0

  • an important feature (forepart-end file browser) has been added in professional version three.i.0
  • added port number support for uploads using ftp mode
  • corrected bug that was not showing correctly in file browser files that were uploaded using ftp mode
  • eliminated confirmbox alert showing in page when website'south DEBUG mode is ON
  • eliminated alert: "Invalid statement supplied for foreach() in …plugins/wordpress-file-upload-pro/lib/wfu_admin.php on line 384"
  • eliminated warning: "Notice: Undefined index: postmethod in /var/www/wordpress/wp-content/plugins/wordpress-file-upload-pro/lib/wfu_functions.php on line 1348"
  • eliminated warnings in plugin's settings in Dashboard

3.0.0

  • major version number has avant-garde because an important feature has been added in Pro version (logged users can browse their uploaded files through their Dashboard)
  • several code modifications in file browser to brand the plugin more secure confronting hacking, some functionalities in file browser have slightly changed
  • new file browser cannot edit files that were not uploaded with the plugin and information technology cannot edit or create folders
  • upload path cannot exist exterior the wordpress installation root
  • files with extension php, js, pht, php3, php4, php5, phtml, htm, html and htaccess are forbidden for security reasons

2.seven.6

  • added functionality in Dashboard to add the plugin to a page automatically
  • fixed issues that was not showing the Shortcode Composer because the plugin could non find the plugin instance when the shortcode was nested in other shortcodes

2.seven.five

  • added German and Greek translation

ii.7.4

  • added Serbian translation thank you to Andrijana Nikolic from http://webhostinggeeks.com/
  • problems fix with %blogid%, %pageid% and %pagetitle% that where not implemented in notification emails
  • in single button operation selected files are removed in case that a subfolder has not been previously selected or a required user field has not been populated
  • bug fixed in single file operation that allowed selection of multiple files through elevate-and-drop
  • bug fixed with files over 1MB that got corrupted when maintaining files with aforementioned filename
  • dummy (examination) Shortcode Composer push button removed from the plugin's Settings as it is no longer useful
  • added support for empty (null size) files
  • many lawmaking optimizations and security enhancements
  • stock-still javascript errors in IE8 that were breaking upload functioning
  • code improvements to avert display of session warnings
  • added %username% in redirect link
  • added choice in plugin's Settings in Dashboard to select culling Postal service Upload method, in club to resolve errors like "http:// wrapper is disabled in the server configuration past allow_url_fopen" or "Call to undefined function curl_init()"
  • added filter action wfu_after_upload, where the admin can ascertain boosted javascript code to be executed on user's browser subsequently each file is finished

ii.vii.3

  • important bug fix in Pro version
  • added wfu_before_email_notification filter
  • corrected bug not showing correctly special characters (double quotes and braces) in email notifications

2.7.ii

  • important problems fix in Pro version, very slight changes in gratuitous version

2.7.1

  • fixed bug with faulty plugin instances actualization when Woocommerce plugin is also installed
  • Upload of javascript (.js) files is not allowed for avoiding security issues
  • fixed issues with medialink and postlink attributes that were not working correctly
  • when medialink or postlink is activated, the files volition be uploaded to the upload binder of WP website
  • when medialink or postlink is activated, subfolders volition exist deactivated
  • added selection in subfolders to enable the list to populate automatically
  • added option in subfolders the user to be able to type the subfolder
  • wfu_before_file_check filter tin modify the target path (not only the file name)

2.seven.0

  • corrected bug when deleting plugin case from the Dashboard
  • corrected bug not finding "loading_icon.gif"

2.vi.0

  • full redesign of the upload algorithm to become more than robust
  • added improved server-side handling of large files
  • plugin shortcodes tin can be edited using the Shortcode Composer
  • added visual editor push on the plugin to enable administrators to change the plugin settings hands
  • corrected bug causing sometimes database overloads
  • slight improvements of subfolder option
  • improvements to avoid code breaking in ajax calls when there are php warnings or echo from WordPress environs or other plugins
  • improvements and bug fixes in uploader when classic (no AJAX) upload is selected
  • eliminated php warnings in shortcode composer
  • corrected bug that was not correctly downloading files from the plugin'south File Browser
  • added amend security when downloading files from the plugin's File Browser
  • fixed bug not correctly showing the user that uploaded a file in the plugin'southward File Browser
  • use of curl to perform server http requests was replaced by native php because some web servers do not accept CURL installed
  • corrected bug in shortcode composer where userdata fields were not shown in variables drop down
  • added characteristic that prevents page closing if an upload is on progress
  • added forcefilename attribute to avert filename sanitization
  • added ftppassivemode aspect for enabling FTP passive mode when FTP method is used for uploading
  • added ftpfilepermissions attribute for defining the permissions of the uploaded file, when using FTP method
  • javascript and css files are minified for faster loading

2.five.five

  • fixed serious bug non uploading files when captcha is enabled
  • fixed bug not redirecting files when email notification is enabled

2.5.4

  • mitigated issue with "Session failed" errors appearing randomly in websites
  • fixed bug non applying %filename% variable within redirect link
  • fixed bug non applying new filename, which has been modified with wfu_before_file_upload filter, in email notifications and redirects
  • stock-still bug where when 2 large files were uploaded at the same time and 1 failed due to failed chunk, so the progress bar would non go to 100% and the file would not be shown every bit cancelled

2.five.3

  • fixed bug non allowing redirection to piece of work
  • stock-still bug that was including failed files in email notifications on sure occasions
  • default value for uploadrole changed to "all"

two.5.2

  • fixed of import bug in free version not correctly showing bulletin later on failed upload

2.v.1

  • fixed important issues in costless version giving the same name to all uploaded files
  • fixed bug in free version not clearing completely the plugin enshroud from previous file upload

2.v.0

  • major redesign of upload algorithm to address upload issues with Safari for Mac and Firefox
  • files are first checked past server before actually uploaded, in order to avert uploading of big files that are invalid
  • modifications to progress bar lawmaking to brand progress bar smoother
  • restrict upload of .php files for security reasons
  • fixed bug not showing correctly userdata fields inside email notifications when using ampersand or other special characters in userdata fields

ii.4.6

  • variables %blogid%, %pageid% and %pagetitle% added in email notifications and field of study and %dq% in field of study
  • corrected problems that was breaking Shortcode Composer when using more than ten attributes
  • corrected bug that was rejecting file uploads when uploadpattern attribute independent bare spaces
  • several lawmaking corrections in order to eliminate PHP warning letters when DEBUG way is on
  • several code corrections in social club to eliminate warning messages in Javascript

2.iv.v

  • correction of bug when using userfields inside notifyrecipients

2.4.four

  • intermediate update to make the plugin more allowed to hackers

2.four.3

  • correction of issues to let uploadpath to receive userdata every bit parameter

ii.4.two

  • intermediate update to address some vulnerability bug

ii.4.1

  • added filters and actions before and afterward each file upload – check beneath Filters/Deportment section for instructions how to utilise them
  • added storage of file info, including user data, in database
  • added logging of file actions in database – admins tin can view the log from the Dashboard
  • admins can automatically update the database to reflect the current status of files from the Dashboard
  • file browser improvements then that more information about each file (including any user data) are shown
  • file browser improvements so that files can be downloaded
  • filelist improvements to display correctly long filenames (Pro version)
  • filelist improvements to distinguish successful uploads from failed uploads (Pro version)
  • improvements of chunked uploads so that files that are not immune to be uploaded are cancelled faster (Pro version)
  • corrected wrong check of file size limit for chunked files (Pro version)
  • added postlink attribute so that uploaded files are linked to the electric current page (or post) as attachments
  • added subfolderlabel attribute to define the characterization of the subfolder pick feature
  • several improvements to subfolder selection feature
  • default value added to subfolder selection feature
  • definition of the subfoldertree attribute in the Shortcode Composer is at present done visually
  • %userid% variable added inside uploadpath attribute
  • userdata variables added within uploadpath and notifyrecipients attributes
  • uploadfolder_label added to dimension items
  • user fields feature improvements
  • user fields label and input box dimensions are customizable
  • captcha prompt characterization dimensions are customizable (Pro version)
  • added gallery aspect to allow the uploaded files to exist shown as epitome gallery below the plugin (Pro version)
  • added galleryoptions attribute to define options of the image gallery (Pro version)
  • added css attribute and a delicate css editor inside Shortcode Composer to allow better styling of the plugin using custom css (Pro version)
  • email feature improved in conjunction with redirection
  • improved interoperability with WP-Filebase plugin
  • improved functionality of complimentary text attributes (like notifymessage or css) by allowing double-quotes and brackets inside the text (using special variables), that were previously breaking the plugin

2.three.1

  • added option to restore default value for each aspect in Shortcode Composer
  • added back up for multilingual characters
  • correction of bug in Shortcode Composer that was not allowing attributes with singular and plural grade to exist saved
  • correction of issues that was not changing errormessage attribute in some cases

2.2.three

  • correction of issues that was freezing the Shortcode Composer in some cases
  • correction of issues with successmessage attribute

2.2.ii

  • serious bug fixed that was breaking operation of Shortcode Composer and File Browser when the WordPress website is in a subdirectory

2.2.1

  • added file browser in Dashboard for admins
  • added attribute medialink to permit uploaded files to be shown in Media
  • serious bug fixed that was breaking the plugin because of preg_replace_callback role
  • corrected fault in get-go attempt to upload file when captcha is enabled

2.ane.3

  • variables %pagetitle% and %pageid% added in uploadpath.
  • issues fixes when working with IE8.
  • Shortcode Composer saves selected options
  • Easier handling of userdata variables in Shortcode Composer
  • correction of bug that allowed debugdata to be shown in not-admin users
  • reset.css removed from plugin every bit information technology was causing breaks in theme's css
  • correction of bug with WPFilebase Manager plugin

2.one.2

  • Several bug fixes and code reconstruction.
  • Code modifications so that the plugin can operate even when DEBUG mode is ON.
  • New aspect debugmode added to allow better debugging of the plugin when in that location are errors.

2.1.1

  • Bug fixes with cleaved images when WordPress website is in a subdirectory.
  • Replacement of glob office because is not allowed past some servers.

2.0.2

  • Bug fixes in Dashboard Settings Shortcode Composer.
  • Correction of important bug that was breaking page in some cases.
  • Minor improvements of user data fields and notification email attributes.

two.0.1

This is the initial release of WordPress File Upload. Since this plugin is the successor of Inline Upload, the whole changelog since the creation of the afterward is included.

  • Proper noun of the plugin inverse to WordPress File Upload.
  • Plugin has been completely restructured to allow additional features.
  • A new more than advanced message box has been included showing data in a more structured manner.
  • Fault detection and reporting has been improved.
  • An assistants page has been created in the Dashboard Settings, containing a Shortcode Composer.
  • Some more than options related to configuration of message showing upload results have been added.
  • Several bug fixes.

i.7.14

  • Userdata aspect inverse to allow the creation of more than fields and required ones.
  • Spanish translation added thanks to Maria Ramos of WebHostingHub.

1.7.thirteen

  • Added notifyheaders attribute, in guild to allow improve control of notification email sent (due east.one thousand. allow to ship HTML email).

1.7.12

  • Added userdata attribute, in order to allow users to ship additional text data along with the uploaded file.

1.7.11

  • Added single button operation (file will be automatically uploaded when selected without pressing Upload Push).

i.7.x

  • Fixed bug with functionality of aspect filebaselink for new versions of WP-Filebase plugin.

1.7.9

  • Fixed problem with functionality of aspect filebaselink for new versions of WP-Filebase plugin.

1.7.8

  • More than 1 roles tin now be divers in attribute uploadrole, separated by comma (,).

1.7.7

  • Variable %filename% now works as well in redirectlink.

1.vii.6

  • Changes in ftp functionality, added useftpdomain attribute so that it tin work with external ftp domains also.
  • Comeback of classic upload (used in IE or when setting forceclassic to true) messaging functionality.
  • Minor bug fixes.

ane.seven.5

  • Source modified so that it tin piece of work with WordPress sites that are non installed in root.
  • Added variable %blogid% for utilise with multi-site installations.
  • Bug fixes related to showing of messages.

1.vii.4

  • Replacement of json2.js with another version.

one.7.three

  • CSS style changes to resolve conflicts with diverse theme CSS styles.

1.7.2

  • Added variable %useremail% used in notifyrecipients, notifysubject and notifymessage attributes.

1.7.1

  • Added capability to upload files outside wp-content folder.
  • Improved error reporting.

1.7

  • Complete restructuring of plugin HTML code, in order to make information technology more than configurable and customizable.
  • Appearance of letters has been improved.
  • Added option to put the plugin in testmode.
  • Added option to configure the colors of success and neglect letters.
  • Added option to alter the dimensions of the individual objects of the plugin.
  • Added option to alter the placement of the individual objects of the plugin.
  • Improved error reporting.
  • Added localization for error letters.
  • Pocket-size issues fixes.

1.half dozen.3

  • Issues fixes to correct incompatibilities of the new ajax functionality when uploadrole is set to "all".

1.6.2

  • Issues fixes to correct incompatibilities of the new ajax functionality with redirectlink, filebaselink and adminmessages.

1.half-dozen.1

  • Correction of serious issues that prevented the normal operation of the plugin when the browser of the user supports HTML5 functionality.
  • Tags added to the plugin WordPress page.

1.6

  • Major lifting of the whole lawmaking.
  • Added ajax functionality and so that file is uploaded without page reload (works in browsers supporting HTML5).
  • Added upload progress bar (works in browsers supporting HTML5).
  • Added option to let user to select if wants to employ the former form upload functionality.
  • File will not be saved again if user presses the Refresh button (or F5) of the folio.
  • Translation strings updated.
  • Issues fixes for issues when in that location are more than i instances of the plugin in a single page.

i.5

  • Added option to notify user virtually upload directory.
  • Added option to allow user to select a subfolder to upload the file.

one.iv.one

  • css corrections for bug fixes.

1.iv

  • Added option to attach uploaded file to notification email.
  • Added choice to customize message on successful upload (variables %filename% and %filepath% tin can be used).
  • Added option to customize color of bulletin on successful upload.
  • "C:\fakepath\" problem resolved.
  • warning message about function create_directory() resolved.
  • css enhancements for compatibility with more than themes.

one.3

  • Boosted variables added (%filename% and %filepath%).
  • All variables tin can be used within message subject field and message text.
  • Added pick to make up one's mind how to treat duplicates (overwrite existing file, leave existing file, leave both).
  • Added option to determine how to rename the uploaded file, when another file already exists in the target directory.
  • Added option to create directories and upload files using ftp admission, in lodge to overcome file possessor and Rubber MODE restrictions.
  • Added the capability to redirect to some other spider web page when a file is uploaded successfully.
  • Added the option to show to administrators additional messages about upload errors.
  • Bug fixes related to interoperability with WP_Filebase

1.2

  • Added notification by email when a file is uploaded.
  • Added the ability to upload to a variable folder, based on the name of the user currently logged in.

1.i

Added the selection to allow anyone to upload files, past setting the aspect uploadrole to "all".

1.0

Initial version.