bournyj

Forum Replies Created

Viewing 1 replies (of 1 total)
  • Forum: Plugins
    In reply to: [Startklar Elementor Addons] anti-virus scanner detected that a malicious file had been loaded onto server
    bournyj

    (@bournyj)

    2 years ago

    Hello, It’s because there is no authentification check in upload process in version <=1.7.15.
    Add at line statklarDropZoneUploadProcess.php:21 this code (using the last version) :

    if(!isset($admin_mode) || $admin_mode!=1) return;

    The content should be :

    ....
        if (in_array('administrator', $user->roles)) {
            $admin_mode = 1;
        }
        if(!isset($admin_mode) || $admin_mode!=1) return;

        if (!isset($_FILES["file"]) && !isset($_POST["mode"])) {
            die(__("There is no file to upload.", "startklar-elmentor-forms-extwidgets"));
        }
....

Viewing 1 replies (of 1 total)