Secure file uploads
Understanding and configuring file upload settings
By default Super Forms will not display files uploaded through any of your forms inside the WordPress Media Library.
When you update to Super Forms v4.9.500+ any files that were previously uploaded will no longer be visible in the Media Library.
If you require these to be visible you will have to go to Super Forms > Settings > File Upload Settings and uncheck Do not show file uploads in the Media Library.
Enable or disable the option to not display uploaded files in the Media Library
If you want to store your files securely you will have to make sure that the files are uploaded outside the root folder of your site. To do this you can define a custom upload path relative to your site root directory.
To store files just one directory above your site root
In case your site is running inside a subdirectory in your root
Note: On some servers it isn't possible for Super Forms to create the private directory due to permissions, in that case contact your provider for a solution.
Upload folder directly inside the root of your site
Upload folder inside a subdirectory in the root of your site
The default directory that Super Forms uses out of the box is
You can optionally delete any uploaded files automatically from your server after a form submission by enabling the option Delete files from server after the form was submitted.
When this setting is enabled, any E-mails will still contain the file as an attachment (unless you defined to exclude the file from emails on the file upload element itself), but these files will no longer be stored on your server.
To automatically delete any associated files from the server after deleting a Contact Entry you can enable Delete associated files after deleting a Contact Entry.
Once you configured your Global settings and File upload settings, you should be ready to create your first form. Continue to the next article to start building!