Getting an Error Uploading Images with Wordpress 2.5?
April 25th, 2008 | by Walter |I’ve been looking into this a bit as I’ve been having the same problem.
It appears that the WordPress 2.5 Media Uploader triggers an Apache Web Server module called mod_security. This module does a good job at protecting our web servers from SQL injections, cross-site scripting and other input-based attacks.
Now we don’t want to turn this off completely just to upload an image here and there, right? So what we’ll do is just apply some code to the .htaccess file, which is located in your WordPress 2.5 base directory, where index.php is, to turn it off ONLY for the uploading script, so it will function properly.
Add this code to your .htaccess file just before # END WordPress:
<IfModule mod_security.c>
<Files async-upload.php>
SecFilterEngine Off
SecFilterScanPOST Off
</Files>
</IfModule>
That should do it, give it a shot and see if it works for you now. I bet it does!
