Answered

Forbidden / OK popup when uploading an image

Tom Ron

started a topic about 8 years ago

Hey,

when trying to upload an image sometimes it's working great, sometimes it says forbidden and sometimes it shows OK but do nothing.

we have tried to maximize the file upload and all this but nothing.

Any help please?

Thanks!

T

Testing Demo
said about 6 years ago

Hi,
Every time i want to upload image on custom-shirts occurs a error "Forbidden",
please check the screenshot and link for more details,

https://www.redrooaustralia.com.au/product/black-tee-2/

Screenshot 2...
(179 KB)
T

Testing Demo
said about 6 years ago

Hi,
Every time i want to upload image on custom-shirts occurs a error "Forbidden",
please assist how to solve this problem.?
please check the screenshot and link for more details,
Thank You
https://www.redrooaustralia.com.au/product/black-tee-2/

Screenshot 2...
(179 KB)
D

Dale Rogers Training Center
said almost 6 years ago

Same thing happened to our website. Johnny explained some options in a support ticket, but it ultimately was a conflict with the Wordfence plugin.

Here's what resolved our "Forbidden" messages: Wordfence > Firewall > All Firewall Options > Web Application Firewall Status and change that from Enabled and Protecting to Learning Mode. (This should allow the Wordfence Firewall to whitelist the action.) Then go in as a customer and try to upload images as they normally would.
T

Tyler Keever
said over 5 years ago

I was able to resolve this issue without having to put Wordfence into learning mode. (Learning mode can expose your site to vulnerabilities because Wordfence will whitelist and possibly not block a number of complex attacks. See the section at the bottom titled "What to Do If a Page Is Blocked After Learning Mode Is Complete" https://www.wordfence.com/help/firewall/learning-mode/ )

I did this by going into the Live Traffic view of Wordfence. I located the entry that showed my image upload being blocked ( [PAGE URL] was blocked by firewall for LFI: Local File Inclusion in POST body) and clicked the "Whitelist Param From Firewall" button. I was then able to verify that it just whitelisted the image-handler.php file of Fancy Product Designer by going to the firewall whitelist section of All Options.

Image uploads now seem to work just fine.