Uploading files in Wordpress issues

Andreas

Hey guys

Does anyone have any issues uploading file in Wordpress.
I am testing some backup/restore plugins, and 2 of them WPvivid and All in one, are not letting me upload files.

WPvivid progess bar shows its starts, gets to 12%, then goes down to 7% and back up to 12% and then a pop up with an error error, error code: -200, HTTP Error.

Then in All in one, nothing happens at all. just says at 0%.

I can upload the files in file manager and restore that way.

But I find it odd that i can not do it in the plugins.

I just trid to upload file in the media library and got error Unexpected response from the server.

The file is 128MB
I added the values in php editor
upload_max_filesize 500M
post_max_size 500M

briansmith84

I've done All-In-One a few times with no issue

Andreas

OK this is getting interesting.

I went to a website I had installed and tried to upload files using wp vivid and all in one and it worked.
So I deleted the account.
Created it, installed WP
tried to upload files...fails.

So current sites it works, but new sites it does not.

Andreas

OK found the issue. MOD security was blocking it. when i disabled it, it started to work.
So I an issue with it. I am currently using cpguard for MOD security so I am going to reach out to them.

Andreas

OK cpguard got back to me and said its not there WAF doing the blocking, but rules in place from Enhance.

Anyone else here user MOD security and cpguard?

manu

@Andreas Yes WAF in Enhance is blocking uploads and also blocking publishing / updating posts and pages too.

Andreas

manu

Publishing I have not tried or heard yet from my clients.
But to get around the uploads I did this..

In cp. went to server and clicked on Settings.
Scrolled down to ModSecurity and clicked on Edit configuration.

On Line 38 I have SecRequestBodyLimit 13107200
I changed that to SecRequestBodyLimit 5000000000
That made upload size from 13MB to 5GB

On line 138 I comment out the rule id:'200004
This was the rule that was causing causing my issue to upload

Then to disable all default OWASP modsec rules, I commented out # all the #SecRule REQUEST with an id:xxxxxx
Im using cpguard. If you are using the default OWASP rules then I would not comment the rest of the line.

Then click save.
By doing this here, you do not need to restart webserver as it does it for you.
If you do it from command line then you need to restart your webserver.
docker restart apache if you are using apache

Now I can upload files.

fyi, i did not figure this all out. This was from the great support from @opsshield and @Adam