WP is reasonably secure for default use cases. In typical workflow it will call wp_check_filetype_and_ext() to verify that file uploaded is of allowed type. It can get considerably more questionable in regards to security if you customize it to work with non–default kinds of files and you might need to implement your own security checks. … Read more
How to protect specific uploaded files from being accessed by non-logged-in users in WP-multisite
I use define(‘UPLOADS’, ‘wp-content/folder’); in my config.php file right under require_once(ABSPATH.’wp-settings.php’); You can try to change the folder to something like %postname% define(‘UPLOADS’, ‘wp-content/%postname%’);
How to get the last selected media alignment setting?
Solved it! It was an issue with the Polylang plugin stopping the image from showing, I’m not quite sure why but adding a row to the wp_term_relationships table, where the object_id is the id of the attachment, and the term_taxonomy_id is the id of the language definition in the wp_term_taxonomy table fixed the issue.
Images uploaded to the media library has strange colors. However, in the edit screen the color is ok
WordPress media uploader – upload tabs not hiding
If you have a lot of uploads, using the /year/month/day/ approach is recommended in order to keep the number of files in each directory manageable. (Just today I ran into an issue where there were more files in the uploads folder [~12,000] than the FTP server was configured to include in a directory listing [~10,000]. … Read more
Can’t generate thumbnail images
I managed to solve it. The problem was in using a custom post-type with Metabox.php / MediaAccess.php (both from WPAlchemy class) Supposedly you can use custom post-types with WPAlchemy since, when instantiating a WPAlchemy_MetaBox object you can pass some optional parameters to enable that kind of costumization. Like this: $mb = $my_custom_metabox = new WPAlchemy_MetaBox(array … Read more