Unsafe Mimetypes

December 17, 2014

Unsafe Mimetypes Plugin

Unsafe Mimetypes allows a WordPress admin to decide which file formats can be uploaded to the media library

Unsafe Mimetypes allows users to define extra media types not allowed by the standard WordPress installation. Users will often encounter the message ‘Sorry, this file type is not permitted for security reasons.’

This plugin allows the site admin to upload and distribute files other than the basic set WordPress allows by default. This plugin allows the user to define a list of extensions they wish to allow. Administrators can choose to allow only Administrators or all Media Uploaders to be able to add the defined types to the library.

Note: This plugin does not permit the user to change the maximum upload size, which may be needed for large multimedia files.

Translation

Currently, the interface offers English and Spanish versions. Spanish translation by Mariana.

Installation

  1. unpack the zip file to your /wp-content/plugins/ directory
  2. Activate the plugin through the ‘Plugins’ menu in WordPress

Screenshots

  1. This is the error message you will see from the media manager when trying to upload many non-standard filetypes.

    This is the error message you will see from the media manager when trying to upload many non-standard filetypes.

  2. This is the admin interface where you can define a list of file extensions you wish to add to the whitelist. If you trust your editors you can also choose to grant the same permissions to them also.

    This is the admin interface where you can define a list of file extensions you wish to add to the whitelist. If you trust your editors you can also choose to grant the same permissions to them also.

  3. If you want, you can allow your editor permission to upload the default types, while allowing your admins greater power by ticking the 'allow default types' box, and giving the extra permissions to admin only.

    If you want, you can allow your editor permission to upload the default types, while allowing your admins greater power by ticking the 'allow default types' box, and giving the extra permissions to admin only.

FAQ

Once I’ve added a filetype to the whitelist, can I then use the WordPress media manager to include uploaded files in my Post/Page?

Yes. This is the expected usage. The author uses it to distribute .wav and .flac audio files, as part of a post.

Is is safe to allow users to upload `php` files?

Never do this unless you’re using it to upload your own php files, you’re admin, and you know the risks involved.

Changelog

0.1.4

  • Fixed a deployment issue

0.1.3

  • Fixed a versioning issue #4
  • Tested and supported with WP4.1
  • Fixed development URL: https://github.com/ldrumm/wordpress-unsafe-mimetypes

0.1.2

  • refixed sickiness issue, when creating new installations.
  • corrected issue with translation.
  • improved settings update logic

0.1.1

  • fixed stickiness of admin/editor permissions in admin interface (report:jswagner)
  • added option to allow the builtin allowed types (all uploaders)(report:jswagner)
  • small cleanups in readme.txt
  • added extra screenshot.

0.1.0

  • First public release.

Details

  • Version: 0.1.4
  • Active installations: 200
  • WordPress Version: 3.0.1
  • Tested up to: 4.1.41

Ratings


5 Stars
4 Stars
3 Stars
2 Stars
1 Stars