https://legacy.forums.gravityhelp.com/topic/file-upload-field-security-issue Gravity Support Forums Topic: File Upload Field Security Issue en-US Mon, 20 Apr 2026 06:33:57 +0000 http://bbpress.org/?v=1.0.1 q https://legacy.forums.gravityhelp.com/search.php https://legacy.forums.gravityhelp.com/topic/file-upload-field-security-issue#post-57628 Thu, 03 May 2012 13:49:59 +0000 David Peralty 57628@https://legacy.forums.gravityhelp.com/ <p>Glad you got it figured out. </p> https://legacy.forums.gravityhelp.com/topic/file-upload-field-security-issue#post-57627 Thu, 03 May 2012 13:47:55 +0000 friesens 57627@https://legacy.forums.gravityhelp.com/ <p>OK - found the issue. I updated PHP version when I updated the Gravity forms last month. The upload_tmp_dir had reverted back to the wrong path. Uploads are sent to temp and then moved to the correct folder. The move operation moves the permissions from the temp folder, instead of inheriting the parent folder permissions. Here is a wordpress post talking about this:</p> <p><a href="http://wordpress.org/support/topic/iis-image-upload-view-issues" rel="nofollow">http://wordpress.org/support/topic/iis-image-upload-view-issues</a></p> <p>Thanks for now. </p> https://legacy.forums.gravityhelp.com/topic/file-upload-field-security-issue#post-57621 Thu, 03 May 2012 13:02:11 +0000 David Peralty 57621@https://legacy.forums.gravityhelp.com/ <p>While I'm no server expert, I can say that Gravity Forms does not force or create any permissions relating to files. I am assuming you set both file and folder permissions and I'm assuming you have the WordPress user in the IUSRS group? </p> https://legacy.forums.gravityhelp.com/topic/file-upload-field-security-issue#post-57580 Thu, 03 May 2012 09:50:41 +0000 friesens 57580@https://legacy.forums.gravityhelp.com/ <p>We have form that uses the file upload field to upload doc/docx/pdf files. When someone uploads a new file, we can not access the uploaded file from the entries screen in Gravity Forms. We get a 500 - Internal Server error. Upon checking the file system permissions for the uploaded files, the files are not inheriting all the folder permissions specified. When using process monitor, I see the IIS APPOOL\WordPress user is trying to access the uploaded file, with an access denied. The IIS_IUSRS group has read/execute/list folder contents/read permission on the uploads folder - but the file did not inherit this permission. This seems to have started when we applied the gravity forms 1.6.3.3.2 update as uploads prior to this update do not have the incorrect permissions. I have also applied the most recent update version 1.6.4.1.1 and it has the same issue. How can I correct this? </p>