PLEASE NOTE: These forums are no longer utilized and are provided as an archive for informational purposes only. All support issues will be handled via email using our support ticket system. For more detailed information on this change, please see this blog post.

File Upload

Gravity Support Forums » Plugin Support » Gravity Forms

  1. drkevinmac
    Member

    I am not sure I am missing something. When a user is given the option of uploading a file, the file is placed in a publicly accessible directory!! Are you serious????

    This is a major security flaw/product flaw.

    Posted 11 years ago on Tuesday May 29, 2012 | Permalink

  2. David Peralty

    Hi there, you can change where a file is uploaded using the following hook:
    http://www.gravityhelp.com/documentation/page/Gform_upload_path

    By default, I think the image should go to the wp-uploads directory or the directory set by you in your WordPress settings.

    Posted 11 years ago on Tuesday May 29, 2012 | Permalink

  3. vbush
    Member

    Why are my gravity forms file uploads wanting to upload at: http://www.gravity_forms.com/3-8554f7885b35385395303c725cd32bcb/2012/05/IMG_0846.jpg

    Posted 11 years ago on Tuesday May 29, 2012 | Permalink

  4. David Peralty

    vbush - I have no idea... You can't even create a domain with an underscore in it. And the folder name is really strange. Either you set it to be this way, or your installation was compromised in some way. Can you check your functions.php file to see if it has the upload_path hook in it? What version of WP and Gravity Forms are you running? How do you know they are trying to upload to that strange location?

    Posted 11 years ago on Wednesday May 30, 2012 | Permalink

  5. vbush
    Member

    Hi David,

    When we receive the form submission email notification the link to the uploaded file (photo/image) takes us to a URL that results in a Server Not Found/Problem Loading Page error. The hyperlink is: /gravity_forms/3-8554f7885b35385395303c725cd32bcb/2012/05/Scan.gif

    I can send you the email notification and Admin and FTP login.

    The media settings are set to default: wp-content/uploads (but that doesn't seem to be happening).

    I am running Gravity Forms version 1.6.4.4.1

    And WP version 3.3.2.

    I don't see anything in the functions.php theme file referencing upload_path (but I'm not an expert with this).

    Hope something I've provided is helpful.

    Thank You!

    Posted 11 years ago on Wednesday May 30, 2012 | Permalink

  6. David Peralty

    My e-mail address is peralty@rocketgenius.com and I would love to take a look at this for you.

    Posted 11 years ago on Wednesday May 30, 2012 | Permalink

  7. culture22
    Member

    Any update on this. Having the same issue.

    Posted 11 years ago on Thursday April 4, 2013 | Permalink

  8. Chris Hajer
    Key Master

    @culture22, please open a new topic for your issue. Please describe exactly what it is you are having a problem with and include a URL to the page on your site where we can test the form. Thank you.

    Posted 11 years ago on Monday April 8, 2013 | Permalink

This topic has been resolved and has been closed to new replies.