• Resolved avviano

    (@avviano)


    I am running into multiple issues with uploading profile images in the backend of the free ARMember plugin for WordPress.

    I already reported one bug earlier, but now I’m facing a new and very frustrating one:

    Error message:
    “The file could not be uploaded due to security reason as it contains malicious code.”

    I can guarantee that the image does not contain any malicious code. It’s a standard JPG file with stripped metadata.

    This is making the whole profile image upload feature extremely unreliable. Sometimes cropping doesn’t work, sometimes I cannot remove, delete, or edit images, and now uploads fail with this “malicious code” message. In over 20 years as a web designer, I have never once seen WordPress or any plugin flag a clean JPG as containing malicious code.

    At this point, I really don’t understand why such a basic feature remains so buggy. A simple image upload function is something most developers can implement in half an hour. Why is this still a problem after so much time?

    Can you please clarify:
    1.) What exactly triggers this “malicious code” detection?
    2.) Is there a known fix or workaround?
    3.) How are we expected to reliably maintain a membership site with ARMember if even basic profile image handling fails?

    Please advise on how to resolve this, as this is a critical issue for using your plugin in production.

    • This topic was modified 3 months, 1 week ago by avviano.
Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Support dimplemodi

    (@dimplemodi)

    Hello,

    I understand your concern and please note that, ARMember Lite version check the file content for the security reason. ARMember checks the php, script and iframe are not added in the file content so kindly search those text in the file source and after that, you come to know that why that particular file is not being uploaded.

    Please check accordingly and let me know if there is anything else.

    Thanks

    Thread Starter avviano

    (@avviano)

    I’m afraid I did not understand what you are saying?

    How does this help me? I need to be able to upload images. Why a security check? It is my website, that I am hosting on my webhoster. Why does ARMember check and block my own images?

    Plugin Support dimplemodi

    (@dimplemodi)

    Hello,

    When any file or image is being uploaded, ARMember checks the file source many times. The file or image source contains some PHP Script that allows the malware to enter and change things on the customer’s website. Therefore, to prevent this and to ensure ARMember that the customer site remains secure.

    Kindly check the image source once and check whether any PHP, Script, or iframe is added to it, if yes, then that file contains malicious code.

    Also, try to upload a different image, which will upload properly if there is no malicious source found.

    Please check accordingly and let me know if there is anything else.

    Thanks

Viewing 3 replies - 1 through 3 (of 3 total)

You must be logged in to reply to this topic.