We use cookies to improve your experience. No personal information is gathered and we don't serve ads. Cookies Policy.

ExpressionEngine Logo ExpressionEngine
Features Pricing Support Find A Developer
Partners Upgrades
Blog Add-Ons Learn
Docs Forums University
Log In or Sign Up
Log In Sign Up
ExpressionEngine Logo
Features Pro new Support Find A Developer
Partners Upgrades
Blog Add-Ons Learn
Docs Forums University Blog
  • Home
  • Forums

The file could not be written to disk.

News and General

deswork's avatar
deswork
93 posts
8 years ago
deswork's avatar deswork

Hi,

A client is having problems uploading PDFs to the server via a file field. They get the error message “The file could not be written to disk.”

I asked them to send me the PDF so I could test and I can upload to the server.

The client is in “Site Admin” member group and I’m in “Super Admin”.

If I disable Apply XSS filtering in the security & privacy section then the client can upload to the server. This is not Ideal.

Could someone please suggest what I need to do to fix this in ExpressionEngine 3.5.4

Thanks.

       
JT Thompson's avatar
JT Thompson
745 posts
8 years ago
JT Thompson's avatar JT Thompson

XSS filtering is a double edge sword, it is going to catch things that are valid sometimes - there is just no way to code around it. If this is just a one-off for you I’d do it manually and move along - if it’s a constant issue you may need to turn off XSS filtering for the backend.

       
Derek Jones's avatar
Derek Jones
7,561 posts
8 years ago
Derek Jones's avatar Derek Jones

If these are trusted users, you can whitelist them from XSS checks—either the member(s) individually, or an entire group, which sounds like it might be more appropriate in this case based on the group name. See the xss_clean_member_group_exception config override.

       
deswork's avatar
deswork
93 posts
8 years ago
deswork's avatar deswork

Thanks Derek.

       

Reply

Sign In To Reply

ExpressionEngine Home Features Pro Contact Version Support
Learn Docs University Forums
Resources Support Add-Ons Partners Blog
Privacy Terms Trademark Use License

Packet Tide owns and develops ExpressionEngine. © Packet Tide, All Rights Reserved.