With the Upload field, visitors can attach documents, images or archives to a submission — résumés for a job application, photos for a support request, signed PDFs for an order. This guide explains how to add the field, where files are stored, how they reach you, and how to keep the upload folder tidy.
The Upload field is part of WPZOOM Forms PRO.
Table of Contents
Make sure the form uses Email + Database or Database Only under Notifications → How to handle submissions if you want the files kept on your site (see Receiving the files).
| Option | What it does |
|---|---|
| Label | Shown above the field, e.g. “Attach your CV”. |
| Accepted File Types | Comma-separated list of extensions visitors may choose. Default: jpg, jpeg, png, gif, tiff, pdf, doc, docx, zip, rar. Trim it to what you really need (pdf, doc, docx for documents). |
| Max File Size (MB) | From 1 to 50 MB, default 5. The accepted list and size are shown under the field (“Accepted: jpg, png… · Max 5 MB”). |
| Allow Multiple Files | Lets the visitor pick several files at once. |
| Required | The visitor must attach at least one file. |
| Help text, Width, Advanced tab | As for every field — see the Form Fields Reference. |
The accepted types and size are checked in the visitor’s browser before the form is sent. Your server’s own PHP limits still apply as the hard ceiling — see Server limits.
Files are not added to the WordPress Media Library. They are written to a dedicated, private folder inside your uploads directory:
wp-content/uploads/wpzoom_forms/-///
.htaccess in the folder (Apache/LiteSpeed) that disables PHP execution for anything uploaded and asks search engines not to index the files, plus an empty index.html to prevent directory listing.cv.pdf, cv-1.pdf, …).You can see the folder location, whether it is writable, whether the security .htaccess exists, and the total number/size of uploaded files under WPZOOM Forms → System Status → Upload Directory:
On Nginx servers
.htaccesshas no effect. Ask your host to block PHP execution inwp-content/uploads/wpzoom_forms/(most managed hosts already block PHP in the uploads folder).
In the notification email — uploaded files are attached to the notification email for every submission, and listed by name in the message body. If attachments make your emails too large for your mail provider, lower Max File Size or switch to reviewing files in the dashboard.
In Submissions — open WPZOOM Forms → Submissions and click the entry. An Attached Files section lists each file with its type and size; click a file name to open or download it.
Confirmation email (PRO) — the copy sent to the visitor does not include the attachments.
“File too large” or the upload silently fails
The PHP settings upload_max_filesize and post_max_size are the hard limit for any upload. Check them under WPZOOM Forms → System Status (PHP Max Upload Size, PHP Post Max Size) and keep Max File Size (MB) below them — remember that several files in one submission count towards post_max_size together. Ask your host to raise the limits if needed.
“Upload Folder Writable: No” in System Status
WordPress cannot write to wp-content/uploads/wpzoom_forms/. Fix the folder permissions (the same as your regular uploads folder) or ask your host.
The file type I need is refused Add its extension to Accepted File Types. WordPress itself also restricts some types for security; if a type is still refused, your host or a security plugin may be blocking it.
Email arrives without the attachment Many mail services cap messages at 10–25 MB. Reduce Max File Size, or rely on the file links in Submissions. If emails are not arriving at all, follow How to Fix WPZOOM Forms Not Sending Emails.
Privacy (GDPR) Uploaded files may contain personal data. Add a GDPR consent field to the form, delete submissions you no longer need (their files go with them), and mention the retention period in your privacy policy.
What’s Next?