WordPress 2.5 problems with image and file upload
I’m just going through my testing phase, as I always do with a new version of WordPress, and got all excited about the Ajax media insertion tools with progress bars. However, my test installation of WordPress wouldn’t allow me to upload any files - it just displayed ‘error’! After a bit of head-scratching and research on the Internet, I did find a solution though!
Over of the D Technology Weblog I read the following: “Basically, this problem is due to the mod_security. The new image uploader has been rejected by mod_security. So, you had to modify the .htaccess file to disable the mod_security.”
I hope this helps a few people out - it certainly worked on my server! The amendment to the .htaccess file that worked on my server was:
<ifmodule mod_security.c>
<files async-upload.php>
SecFilterEngine Off
SecFilterScanPOST Off
</files>
</ifmodule>
22/005/08 IMPORTANT UPDATE TO THIS POST - Since writing this post I have been looking into this issue a little further. The guidance given above represents a security risk to your WordPress site. Turning off mod_security for this file is being shown on a-lot of websites as a solution to this problem, which I imagine a-lot of hackers and malicious people have already picked up on. This could become a security exploit and therefore is not recommended.
Reated links and posts
Comments
Comment from CMS Builder
Time: July 14, 2008, 9:45 am
Richard… nothing surprises me with IE, apart from how poor it is, and Vista… don’t even get me started on that nightmare!! However, I’m predominantly using FireFox 2 on Mac OSX 10.4 and experiencing this problem.
Not much further information, although a good work-around I’m using is the No Flash Upload - this does the job pretty well.
I read that WordPress 2.6 is going to have an internal option to turn off the Flash upload.
Comment from Richard
Time: July 14, 2008, 10:45 pm
The turn off option sounds like sensible thinking, sounds like WordPress. 
And no I won’t get you going about Vista. Least said soonest forgotten.
Comment from Richard
Time: July 13, 2008, 11:43 pm
I read somewhere that this problem was caused by a bug in IE7 (no kidding). I’d experienced this issue, but when I changed to Ubuntu OS (got sick of Vista very quickly) and using FF3 - surprise, surprise, no issues.
Hope this helps. I guess installing FF3 might be easier than trying to resolve IE7 issues.
Have you discovered anything else since you posted?