Title: upload security
Last modified: March 7, 2019

---

# upload security

 *  Resolved [wpdev123456](https://wordpress.org/support/users/wpdev123456/)
 * (@wpdev123456)
 * [7 years, 3 months ago](https://wordpress.org/support/topic/upload-security/)
 * Hello,
 * I have a upload php program resided in the theme folder. However, I do not have
   the permission to access this upload php file because I have disable PHP in themes
   for security reasons.
 * What is the best way to resolve this? Should I enable PHP in themes? Most of 
   the security plugins disable PHP in themes.
 * Thanks.

Viewing 4 replies - 1 through 4 (of 4 total)

 *  Moderator [James Huff](https://wordpress.org/support/users/macmanx/)
 * (@macmanx)
 * [7 years, 3 months ago](https://wordpress.org/support/topic/upload-security/#post-11288116)
 * I guess my first question would be _why_ does that theme have an upload file?
 *  Thread Starter [wpdev123456](https://wordpress.org/support/users/wpdev123456/)
 * (@wpdev123456)
 * [7 years, 3 months ago](https://wordpress.org/support/topic/upload-security/#post-11289079)
 * Well we let some users to upload attachments such as word document, pdf etc. 
   when a work order is created. The upload program we created deployed in the theme
   folder. We disabled execution in the upload folder, where uploaded files resided.
   If there is a need to upload document in WordPress, should we disable PHP in 
   themes? Is this a security risks?
 * What is the best practice in deploy such program in the theme folder? I am sure
   others might have resolved this already. Thanks.
 *  Moderator [James Huff](https://wordpress.org/support/users/macmanx/)
 * (@macmanx)
 * [7 years, 3 months ago](https://wordpress.org/support/topic/upload-security/#post-11289208)
 * In general, security things disable upload execution in the themes folder because
   things generally don’t upload into the themes folder.
 * If you know why the upload file is there and what it’s doing, there’s no reason
   to block it.
 *  Thread Starter [wpdev123456](https://wordpress.org/support/users/wpdev123456/)
 * (@wpdev123456)
 * [7 years, 3 months ago](https://wordpress.org/support/topic/upload-security/#post-11291503)
 * Thanks James.

Viewing 4 replies - 1 through 4 (of 4 total)

The topic ‘upload security’ is closed to new replies.

 * In: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/)
 * 4 replies
 * 2 participants
 * Last reply from: [wpdev123456](https://wordpress.org/support/users/wpdev123456/)
 * Last activity: [7 years, 3 months ago](https://wordpress.org/support/topic/upload-security/#post-11291503)
 * Status: resolved

## Topics

### Topics with no replies

### Non-support topics

### Resolved topics

### Unresolved topics

### All topics