Title: Block Executable File Uploads Not Working
Last modified: August 31, 2016

---

# Block Executable File Uploads Not Working

 *  Resolved [Music365](https://wordpress.org/support/users/clairporium/)
 * (@clairporium)
 * [10 years, 4 months ago](https://wordpress.org/support/topic/block-executable-file-uploads-not-working/)
 * Hi Paul,
 * I’ve had the Firewall set to Block Executable File Uploads for a number of months
   now, but today I had some “Email without subject…” notices with an attachment
   in my Inbox, so I knew right away that someone had successfully uploaded php 
   files. I checked via my cPanel and there were three different php files that 
   had been uploaded. Therefore, the plugin is obviously not blocking executable
   file uploads, even though I have it set to do so.
 * Please help.
 * Thanks
 * [https://wordpress.org/plugins/wp-simple-firewall/](https://wordpress.org/plugins/wp-simple-firewall/)

Viewing 7 replies - 1 through 7 (of 7 total)

 *  Plugin Author [Paul](https://wordpress.org/support/users/paultgoodchild/)
 * (@paultgoodchild)
 * [10 years, 4 months ago](https://wordpress.org/support/topic/block-executable-file-uploads-not-working/#post-6943545)
 * You need to trace where and how these files were submitted to your site.
 * If WordPress was used to upload these files, then the firewall would have blocked
   it. You need to ensure that other channel – FTP, cPanel etc. are not compromised
   as files can be uploaded that way. Further more, files may be placed on your 
   site via other compromised plugins/themes directly, bypassing the WordPress load.
 * The plugin can block many avenues as long as it’s WordPress that loads, and not
   direct file access. It cannot block direct file upload via other php files on
   the server.
 *  Thread Starter [Music365](https://wordpress.org/support/users/clairporium/)
 * (@clairporium)
 * [10 years, 4 months ago](https://wordpress.org/support/topic/block-executable-file-uploads-not-working/#post-6943588)
 * Thank you for the response and explanation.
 * I actually just received yet another Email without subject coming from the site.
   Both the From and To emails are mine, so it’s as if I emailed the attached php
   file to myself. The file ends up in my uploads folder.
 * I can’t seem to figure out how this is happening. Any thoughts/ideas/suggestions?
 *  Plugin Author [Paul](https://wordpress.org/support/users/paultgoodchild/)
 * (@paultgoodchild)
 * [10 years, 4 months ago](https://wordpress.org/support/topic/block-executable-file-uploads-not-working/#post-6943591)
 * Reinstall your core wordpress files, and reinstall your original plugin files.
   I’m honestly not sure what your issue is, but I would start cleaning out your
   site and ensuring you know what all files are there and why… it’s possible you
   have a compromised file in there with a hack. I honestly don’t know though.
 * Area all your plugins, themes and WordPress up-to-date?
 *  Thread Starter [Music365](https://wordpress.org/support/users/clairporium/)
 * (@clairporium)
 * [10 years, 4 months ago](https://wordpress.org/support/topic/block-executable-file-uploads-not-working/#post-6943595)
 * I’m not seeing any updates required for anything, but I’ll try doing a reinstall
   as you suggested.
 *  Plugin Author [Paul](https://wordpress.org/support/users/paultgoodchild/)
 * (@paultgoodchild)
 * [10 years, 4 months ago](https://wordpress.org/support/topic/block-executable-file-uploads-not-working/#post-6943778)
 * Were you able to make any progress with this?
 *  Thread Starter [Music365](https://wordpress.org/support/users/clairporium/)
 * (@clairporium)
 * [10 years, 4 months ago](https://wordpress.org/support/topic/block-executable-file-uploads-not-working/#post-6943803)
 * Thanks for following up. I’m having the site looked at in depth, and then will
   go from there. For now, I removed the php files and did a clean install of WordPress.
   Things have been quiet so far.
 *  Plugin Author [Paul](https://wordpress.org/support/users/paultgoodchild/)
 * (@paultgoodchild)
 * [10 years, 4 months ago](https://wordpress.org/support/topic/block-executable-file-uploads-not-working/#post-6943804)
 * Ok, keep me posted sure.
    Thanks.

Viewing 7 replies - 1 through 7 (of 7 total)

The topic ‘Block Executable File Uploads Not Working’ is closed to new replies.

 * ![](https://ps.w.org/wp-simple-firewall/assets/icon-256x256.png?rev=3054572)
 * [Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning](https://wordpress.org/plugins/wp-simple-firewall/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/wp-simple-firewall/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/wp-simple-firewall/)
 * [Active Topics](https://wordpress.org/support/plugin/wp-simple-firewall/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/wp-simple-firewall/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/wp-simple-firewall/reviews/)

## Tags

 * [php files](https://wordpress.org/support/topic-tag/php-files/)

 * 7 replies
 * 2 participants
 * Last reply from: [Paul](https://wordpress.org/support/users/paultgoodchild/)
 * Last activity: [10 years, 4 months ago](https://wordpress.org/support/topic/block-executable-file-uploads-not-working/#post-6943804)
 * Status: resolved