Support

Hello,

can you please try to disable Admin Tools plugin? After that, can you upload plugins again?

That's a bit strange, let me connect to your site to double check. Can you please point me I have made this ticket private so that only you and me can see the information posted here.

Please provide me with the following information:

1. The URL to your site's administrator login page
2. Administrator username and password (Network Administrator for WordPress Multisite installations)
3. FTP connection information

Please allow up to one business day (GMT+2 timezone) for me to log in to your site and debug this issue. When I'm done I will post back. Once the issue is fixed, you can revoke my access e.g. by changing the Super Administrator and FTP passwords.

IMPORTANT INFORMATION
In order for me to help you fast and accurately, please provide the information by copying the form below, paste it into your reply and fill in the information:

----- Access Information Form -- START -----
WordPress Administrator access

• URL to site's administrator page (e.g. http://www.example.com/wp-admin?foobar):
• Administrator username:
• Administrator password:

FTP connection information

• FTP methods supported (e.g. FTP, FTPS, SFTP):
• FTP Hostname:
• FTP Username:
• FTP Password:
• FTP Port (if other than 21 for FTP and 22 for SFTP, ask your host):

----- Access Information Form -- END -----

Please make sure that you have tested the Administrator connection using a different browser or machine than the one you are using daily. Double check that logging in is possible and that the user has Administrator privileges or, if it's a WordPress multisite installation, Network Administrator privileges. Make sure that your site does not block whole countries or IP ranges which would make it impossible for me to log in / connect by FTP. Finally, please do make sure that the FTP connection works and that logging in to it I have access to your site's files.

Kindly note that your site connection information and your site content is handled in strict confidence. Not only we are a reputable development company, we are also bound by law (EU GDPR) to do so. After you file your reply, the connection information to your site will be stored in an encrypted, hidden storage area on our site and will be automatically deleted when this ticket is closed. Finally keep in mind that the people providing support to you are the same developers who wrote the software you're using on your site. to a plugin that I can try to install?

Thank you very much for the report. This is, indeed, a bug. Admin Tools has a feature called UploadShield which will inspect the incoming data and if anything resembles a PHP file, the request will be blocked.

The logic behind that is to block malicious users to upload PHP files, but there are legitimate use cases, like when you want to install a plugin by uploading it.

For the moment, a simple workaround is to disable the Upload Scanner in the WAF Configuration page, in the meantime we will work on the issue.

Thanks again for reporting it!