Taylor Waldron asked 2 years ago
Hello,
I've been doing some research and can't seem to find anyone else writing about this problem and I'm hoping it's a simple fix on my part that I haven't thought of.
I have file upload fields in my form with protection set up so that only Administrator roles can view the files (Screenshot below).
However, when I view the entries list, some of my files are able to be viewed, while most files give me a 403 Forbidden error. When I disable the protection setting, I'm able to see all the files, so I know it has something to do with this setting and not a corrupted file upload.
Has anyone else run into this issue and/or provide a possible solution? I need to protect my files, but I also need to be able to access them from an Administrator role.
Thanks in advance for any insight anyone can provide!
Taylor Waldron answered 2 years ago
I found the answer!
After working with Formidable Support, we were able to determine that it was my security plugin that caused the issue. This would explain why it was such an obscure issue for me, but I wanted to share the solution in case anyone else happens to run into the same problem.
I'm not sure what specific setting was causing the problem, but changing the plugin entirely fixed it.
What was the plugin that was problematic, if you don't mind sharing?
Taylor Waldron
replied 2 years ago I used "All-In-One Security" to set up security protocols and I use it on many of my sites. I have a feeling the issue was linked to a specific setting within the plugin that I could have disabled to fix the problem, but I switched to SiteGround's Security plugin instead since I trust them and it was a much quicker fix.
Please login or Register to submit your answer
Do you have any code in place that puts the files someplace else other than the default location?
Thanks for your reply!
There's no code customizations to this form.
I've had this happen before on another site, but just used my work-around of temporarily disabling the setting so I could access the files I needed, then re-enabling it. Unfortunately, this is now effecting my client's experience on the site, so I'd like to figure out what is causing the problem.