Comments on: WordPress upload file type security restrictions

By: Long-term Memory » Blog Archive » Modifying WordPress security guidlines

Tue, 05 Jan 2010 17:42:18 +0000

[...] bit of googling got me to Kristof Coomans’ blogpost which pointed me to the PJW Mime Config plugin. This plugin allows you to add custom file [...]

By: Louis Hearn

Louis Hearn — Thu, 09 Aug 2007 11:58:59 +0000

Depending on the type of file you want to make available, you can also provide it as a ZIP file for download.

WordPress wouldn’t let me upload Photoshop actions or setting files, but once they were in a ZIP file they uploaded, displayed in “Browse All” and downloaded fine.

Obviously this is not a solution for things like videos that you want to display directly on your page, but for something like a Thunderbird extension it ought to do the trick.

By: mstormo

mstormo — Wed, 28 Feb 2007 15:20:39 +0000

Or you could add something like the following in your wp-config.php file:

function add_some_mimes($mimes) {
$ourMimes = array(
‘xpi’ => ‘application/x-xpinstall’,
);
return array_merge($mimes,$ourMimes);
}
add_filter(‘upload_mimes’,'add_some_mimes’);

By: Darren

Darren — Wed, 14 Feb 2007 10:27:27 +0000

Very true. I just try and stay away from alot of plugins. I find some plugins are huge and have alot of files, which I don’t like, but I can see the problem there. Although it isn’t too hard to just go back in and add them again after an upgrade. Cheers!

By: Kristof

Kristof — Wed, 14 Feb 2007 06:58:42 +0000

Hi Darren

Thanks for the tip.

This is a possible fix, but it doesn’t make upgrading easier. You will have to backup your changes and apply them again after upgrading.

To my opinion, the pjw-mime-config is a more robust solution.

By: Darren

Darren — Wed, 14 Feb 2007 05:12:46 +0000

You could add mime types to the functions.php file in wp-includes directory at about line (1069). You wouldn’t need php skills to do this either, pretty much copy and paste the code for the other mime types listed then change the copied type to the type you like. You can find good resources for mime types on w3schools or mozdev.