File Upload

A WordPress File Upload field allows users to easily upload files in a form. You can click to add files or drag and drop files into the field. The uploaded files are stored in your WordPress Media Library in the location specified in your WordPress settings.

Standard field options

A File Upload field has the following standard options:

• Required
• Read Only
• CSS layout classes
• Dynamic default value
• Visibility
• Label position
• Conditional logic
• Field key

Field specific options

Field icons

Field action icons allows you to duplicate, delete, and/or move a field on the form builder page. See the field action icons article for more information.

Display images

Display uploaded files in a form's confirmation message, email, or View.

Shortcode options

• File URL: Display the URL of the uploaded file(s):

  [x]

  Replace x with the ID of the file upload field.

• Show image: Display the image if the WordPress file is an image file type. Display an icon if the file is not an image.

  [x show_image=1]

  Replace x with the ID of the file upload field.

• Add link: Link to the full-sized image. This may be used in conjunction with show_image=1, show_filename=1, or any other File Upload shortcode parameters.

  [x add_link=1]

  Replace x with the ID of the file upload field.

• Open link in new tab: Open the link to the image in a new browser tab. The new_tab=1 parameter must be used in conjunction with the add_link=1 parameter.

  [x add_link=1 new_tab=1]

  Replace x with the ID of the file upload field.

• Image size: Set the image display size using either size=thumbnail, size=medium, or size=full. The default size displayed is the thumbnail. In WordPress, the default thumbnail size is a 150x150 image. Specify a different size to show a bigger image.

  [x size=full show_image=1]

  Replace x with the ID of the file upload field.

• Add a class: Add a class on the file HTML.

  [x class="something"]

  Replace x with the ID of the file upload field.

• Show filename: Display the filename of an uploaded WordPress file.

  [x show_filename=1]

  Replace x with the ID of the file upload field.

• Show attachment ID: Display the attachment ID of an uploaded file.

  [x show=id]

  Replace x with the ID of the file upload field.

• Show default image: Check for an image and add a default if there isn't one.

  [if x][x show_image="1"][/if x]
  [if x equals=""]<img src="default.png" alt="" />[/if x]

  Replace x with the ID of your file upload field. Replace default.png with the path to your default image.

WordPress gallery

Display uploaded images in a WordPress gallery using this shortcode:

[gallery ids="[x show=id sep=',']" link="file"]

Replace x with the ID of your File Upload field . Read more about the gallery shortcode and its parameters in the WordPress Codex.

Set a default value

Autopopulate the File Upload field with a file of your choosing.

Use file from media library

If you would like to set a default value in your File Upload field with a file from your WordPress media library, please follow the steps below.

1. Go to your WordPress Media → Library.
2. Select the WordPress file you want to use as your default value.
3. The media ID will be in the address bar. Copy it.
   
4. Go into edit your form and open the field options for the File Upload field.
5. Scroll down to the Advanced section. In the 'Default value' box insert the media ID of the file from step 3.
   
6. Save the form and click preview. Now when the page is visited the default file will appear in the File Upload field.

For more information on default values, visit the Default values page.

Use file from previous entry

If you would like to automatically populate a File Upload field with the most recent value submitted by the current user, follow the steps below.

1. Go into edit your form.
2. Open the field options for the File Upload field.
3. Scroll down to the Advanced section. In the 'Default value' box insert the following shortcode:

   [frm-field-value field_id="x" user_id="current" show="id"]

   Replace x with the ID of the File Upload field that you want to retrieve a value from.

4. Save the form and click preview. Now when the page is visited, the uploaded file from the user's previous entry will be shown. If the user is not logged-in, this shortcode will have no effect.

File upload classes

If you would like the File Upload field to take up less space in your form, you may use the frm_compact class.

1. Open the field options.
2. Scroll down to CSS layout classes. Insert frm_compact in the box.
   
3. Save the form and click preview. Now when the page is visited, the File Upload field will be more compact.
   

Manage uploaded files

All files that are downloaded in a Formidable form are saved to your WordPress media library. To access the uploaded files, follow the instructions below.

1. Go to your WordPress Media → Library.
2. Click the list view icon.
   
3. In the filtering menu, change 'Hide form uploads' to 'Show form uploads' if you would like to see files uploaded in your forms. Click 'Filter'.
   
4. Now all the files that have been downloaded in a Formidable form should appear here in the list view.

If you would always like to view your form uploads in the media library, see the prevent filtering of form uploads section.

File protection

Files uploaded through the file upload field can be viewed by anyone with access to a link and could be indexed by search engines. If you want to protect your uploaded files, you can enable the Protect all files uploaded in this form and Prevent search engines from indexing uploads file permission options in the General form settings.

With file protection enabled:

• Uploaded files cannot be accessed directly using the file URL.
• Prevent files from being indexed and searchable by Google and other search engines.
• Reduce the risks of file spamming.
• Files can only be reached when clicking a link directly to the file from within the site.
• Links clicked from an email will be blocked.
• Logged-in status doesn't affect this.

File protection adds restrictions to prevent files from being accessed from another entry. It is a security measure to prevent visitors from changing the file ID in the form to access other files.

Temporary Files

To avoid spam and for better file protection, files are immediately uploaded to the server but are automatically deleted if they are not attached to any entry.

If you need to adjust the default -3 hours period before temporary files are deleted, use the frm_delete_temp_files_period hook.

Related hooks

• To improve file upload security for unprotected forms, use the frm_stop_file_switching filter and return false.
• If you would like the same files to be reused on multiple entries, use the frm_stop_file_switching filter and return true.
• To remove protection for temporary files, use the frm_protect_temporary_file hook.
• To control whether or not a protected file will check the referer on download, use the frm_check_file_referer hook.

Import files

If you would like to import files from entries on one site into entries on another site, see Import files for more information.

Show content based on file URL

If you would like to compare the File upload values in a form's confirmation message, email, or View, use conditional statements.

Troubleshooting

Upload limits

File upload size and quantity limits are set in your server's php.ini. If you have a problem uploading a file in your form, first try uploading the same file on the WordPress → Media Library. If you see the same error here, then you are facing upload limits. You (or your host) may need to increase the max_file_uploads, max_input_time, post_max_size, and/or upload_max_filesize settings in your php.ini.

In WordPress Multisite, the upload limits can be customized in 'Network Admin' → 'Settings' → 'Upload Settings'.

Server responded with 0 code

When ajax requests are fired in WordPress, 0 is returned when the request isn't processed. We have seen cases where 0 is returned by the file uploader, even though the code is there to process it.

The most likely cause is a plugin or theme conflict. Start by checking for a conflict.

If the problem continues with all other plugins disabled, there may be an issue with your server settings. In some cases, this happens when there a page is loaded with a different URL than the one set as the site URL in the WordPress Settings. To solve the problem, you will need to add a redirect rule in your .htaccess that will redirect to the correct url. This is also better for SEO.

File upload "-1" error

If you're seeing a "-1" error when trying to upload a file on your form, this problem is most often related to a plugin or theme conflict. Generally, we have seen cases where a security plugin is causing this trouble. To troubleshoot this, start by finding the source of the conflict.

Uploaded file could not be moved

If you're seeing the "Uploaded file could not be moved to" error message, this problem usually means that there is something wrong with the permissions on your site at a server level.

To troubleshoot this, start by following the steps below.

1. Try to upload the file in the WordPress → Media Library. Do you see the same error? If so, please contact your web host.
2. If the upload is successful, change the folder permissions of the uploads/formidable folder, and each of the numbered folders inside it to 755.
3. If the upload still fails and regular WordPress uploads are successful, open a ticket so our team can help investigate.

File upload "0 b" value

If you see a 0 b message when uploading a file to your form, you may have added an incorrect default value.

When setting a default value, you can either use a file from the media library or use a file from a previous entry.

Disable scaling in images

In WordPress 5.3, users are allowed to upload big image files. It will be automatically scaled down once the image height or width is above the threshold value of 2560px.

To disable the scaling, you could use the snippet below.

add_filter( 'big_image_size_threshold', '__return_false' );

File type is not permitted for security reasons

If you have already set up your site to allow extra file types like XML, it may return a "Sorry, this file type is not permitted for security reasons" error message. To fix this, go to the wp-config.php file and add the following code snippet above the line:
/* That’s all, stop editing! Happy blogging. */

define('ALLOW_UNFILTERED_UPLOADS', true);

Unsupported file type

If you're already using the code snippet to allow extra file types, but your server still doesn't recognize your file type, you may use the expected plain/text mime type.

For example, instead of using the expected mime type for a STEP file type:

$mimes['step'] = 'application/STEP';

Use the expected mime type to plain/text for application/STEP files instead.

$mimes['step'] = 'text/plain';

This isn't unique to STEP files but could apply to other file types like MP3 file uploads.

503 error

If you encounter a 503 error while uploading a file, the PHP ImageMagick module could be the issue. Disable ImageMagick and try GD on your server.

Allow all user types to upload files in multisite

By default, multisite guest users can only upload "jpg jpeg png gif" file types. If you are already using the code snippet to allow extra file types, you can use this filter to allow all multisite user types to upload other file types.

This code example adds wma to the end of that list, but you could update the actual upload_filetypes site_option value in the database.

add_filter('site_option_upload_filetypes', 'allow_multisite_users');
function allow_multisite_users( $upload_filetypes ) {
	$upload_filetypes .= ' wma'; // Replace wma with your file type
	return $upload_filetypes;
}

If you are dealing with uncommon file types that aren't supported in WordPress by default, this works in combination with the mime_types filter.

Related customizations

Allow extra file types

If you would like to allow file types than are not allowed in WordPress by default, you'll need some custom code.

add_filter('upload_mimes','restrict_mime');
function restrict_mime($mimes) {
    $mimes['mp4'] = 'video/mp4';
    $mimes['csv'] = 'text/csv'; //allow csv files
    $mimes['avi'] = 'video/x-msvideo'; //add avi
    $mimes['mov'] = 'video/quicktime'; //add mov
    $mimes['epub'] = 'application/epub+zip'; //add epub
    $mimes['ai'] = 'application/postscript'; //add ai
    $mimes['eps'] = 'application/postscript'; //add eps
    $mimes['xml'] = 'application/xml'; //add xml

    return $mimes;
}

This is a WordPress filter (not Formidable). You can find more information on this filter in the WordPress codex.

Prevent filtering of form uploads

If you would like to prevent the filtering of files that have been uploaded through formidable forms in your WordPress media library, insert the following code in the 'Code Snippets' plugin or a child theme’s functions.php file.

add_action( 'pre_get_posts', 'frm_remove_media_filtering', 1 );
function frm_remove_media_filtering () { 
    remove_action( 'pre_get_posts', 'FrmProFileField::filter_media_library', 99 );
}

Disable dropzone

Disable the ajax uploader and revert to a standard uploader with the code below.

add_filter( 'frm_load_dropzone', '__return_false' );

If you want to turn off dropzone on one page, use the frm_load_dropzone hook.

Block dropzone action

To disallow uploads that happen before the entry is created, use the code snippet below to block the dropzone action.

add_action('wp_ajax_nopriv_frm_submit_dropzone', 'block_dropzone_uploads', 1 );
add_action('wp_ajax_frm_submit_dropzone', 'block_dropzone_uploads', 1 );
function block_dropzone_uploads() {
    $target_field_id = 996; // change 996 to the file upload field ID
    $field_id = FrmAppHelper::get_param('field_id', '', 'post', 'absint' );
    if ( $target_field_id === $field_id ) {
        wp_die( 0 );
    }
}

Change the upload field label

The default Drop a file here or click to upload message can be changed with a bit of javascript. Click here to see an example.

Translate the upload text

Translation options for the default Drop a file here or click to upload text are included in the PO file inside the plugin. See how to translate Formidable for more information.

Add front-end file download

If you would like to add front-end file download for uploaded files, see how to offer a protected file and download file on submit for more information.

Handle file download errors

You could handle a redirect with a snippet like this. Note that this may be overwriting over die handler behaviour from another plugin.

function custom_die_handler( $message, $title = '', $args = array() ) {
     if ( 403 === $args['response'] ) {
          wp_redirect( 'http://example.com/403/' ); // change this URL.
          die();
     }
     _default_wp_die_handler( $message, $title, $args );
}
add_filter(
     'wp_die_handler',
     function() {
          return 'custom_die_handler';
     }
);

Modify kses rules

By default, WordPress kses function prevents base64 images from being displayed. To modify the kses rules in a form submission, use the code snippet below.

add_filter('kses_allowed_protocols', 'modify_kses_rules');
function modify_kses_rules($protocols) {
    $protocols[] = 'data';
	
    return $protocols;
}

Related developer hooks

• Customize the location of your uploaded files using the frm_upload_folder hook.
• Automatically delete WordPress files after the entry is created (and after the email notification is sent) with the frm_after_create_entry hook.
• Remove attachments from notifications with the frm_notification_attachment hook.
• Format multiple files differently than the default HTML with the frmpro_fields_replace_shortcodes hook.
• Use Base64 file info with the frmpro_fields_replace_shortcodes hook.
• Create a custom field that stores the file URL with the frm_new_post hook.
• Add image meta with the frm_after_create_entry hook.
• Only show first file from a multiple-image upload with the frmpro_fields_replace_shortcodes hook.
• Link thumbnail to full size images from a multiple-image upload with the frmpro_fields_replace_shortcodes hook.
• Move and rename file uploads with the frm_after_create_entry hook.
• Disable file URLs for an uploaded file even when file protection is turned off with the frm_field_input_html hook.

Related Articles

• How to Display Form Submissions in an Image Carousel
  Read More

  How to Create a WordPress Image Upload Form (A 3 Step Guide)
  Read More

  How to Set Up a Google Drive File Upload Form in WordPress
  Read More
• How to Upload Files to Dropbox from Your WordPress Forms
  Read More

  7 Best Multi-Purpose WordPress File Upload Plugins
  Read More

  How to Create the Ultimate WordPress File Upload Form
  Read More
• 4 Ways to Protect WordPress Media Files
  Read More

  How To Download a File After Form Submission in WordPress
  Read More

  How to Create a WordPress Contact Form with File Uploads
  Read More
• How to Add Multiple File Uploads to Your WordPress Forms
  Read More

  Client-Side Image Resizing for Faster Form Submission
  Read More

  How to Let Users Submit Photos on Your WordPress Site
  Read More