Runway: Cannot upload .xlsm file to Assets

No it doesn't. PDFs, images, etc. are all working fine. This is the only file type I'm having problems with.

Yes, that fixes it. Will disabling PERCH_VERIFY_UPLOADS affect form file uploads? I'm using <perch:input type="file" id="resume" accept="pdf office" label="Resume" /> in a form and I'd like to keep the security checks for uploads.

Oh, ok. This is happening on both dev and staging, so here are full diagnostics for both:

Dev:

Diagnostics report
PERCH INFORMATION

Perch Runway: 2.8.31
Production mode: Production (100)
Installed apps: content (2.8.31), assets (2.8.31), categories (2.8.31), perch_blog (5.0), perch_events (1.9.3), perch_forms (1.8.3)
DB driver: PDO
DB tables: perch2_backup_plans (0), perch2_backup_resources (0), perch2_backup_runs (0), perch2_blog_authors (3), perch2_blog_comments (0), perch2_blog_index (1335), perch2_blog_posts (47), perch2_blog_posts_to_tags (0), perch2_blog_sections (1), perch2_blog_tags (0), perch2_blogs (1), perch2_categories (43), perch2_category_counts (0), perch2_category_sets (4), perch2_collection_index (21504), perch2_collection_items (2464), perch2_collection_revisions (1135), perch2_collections (12), perch2_content_index (3077), perch2_content_items (168), perch2_content_regions (69), perch2_events (6), perch2_events_categories (0), perch2_events_to_categories (0), perch2_forms (2), perch2_forms_responses (3), perch2_navigation (0), perch2_navigation_pages (0), perch2_page_routes (72), perch2_page_templates (14), perch2_pages (44), perch2_resource_log (976), perch2_resource_tags (500), perch2_resources (338), perch2_resources_to_tags (860), perch2_settings (27), perch2_user_passwords (2), perch2_user_privileges (41), perch2_user_role_privileges (33), perch2_user_roles (2), perch2_users (3)
Users: 3
App runtimes:
<?php
    $apps_list = array(
        'content', 
        'categories',
        'perch_blog',
        'perch_events',
        'perch_forms',
    );
Scheduled tasks for perch_blog: delete_spam_comments (1440 mins)
Scheduled tasks for perch_events: update_category_counts (60 mins)
Editor plug-ins: ckeditor, markitup
H1: d41638cf9048337a3f49f3059ee96e6e
L1: efd234e6613dbe978313d452ca9e76a4
F1: 2edba60ed1f613d6dd804feb202456a2
headerColour: #f9f9f9
content_singlePageEdit: 1
helpURL:
siteURL: /
hideBranding: 1
content_collapseList: 1
lang: en-gb
update_2.8.29: done
headerScheme: light
update_runway_2.8.29: done
dashboard: 0
hide_pwd_reset: 0
content_hideNonEditableRegions: 0
content_frontend_edit: 0
logoPath: /at-admin/resources/axletech.png
latest_version: 2.8.15
on_sale_version: 2.8.31
update_runway_2.8.31: done
perch_blog_update: 5.0.1
perch_blog_post_url: /company/news/{postSlug}
perch_blog_site_name: AxleTech International
perch_blog_slug_format: %Y-%m-%d-{postTitle}
perch_blog_akismet_key:
perch_blog_max_spam_days: 0
perch_blog_comment_notify: 0
perch_events_update: 1.8
perch_events_detail_url: /events/event.php?s={eventSlug}
PERCH_DEVELOPMENT: 10
PERCH_STAGING: 50
PERCH_PRODUCTION: 100
PERCH_SCHEDULE_SECRET: FeDT7fhOJNOrxniQ
PERCH_DB_USERNAME: root
PERCH_DB_SERVER: localhost
PERCH_DB_DATABASE: dev_axletech
PERCH_SITEPATH: /var/www/public/axletech.dev
PERCH_DB_PREFIX: perch2_
PERCH_EMAIL_FROM: info@mytechtailor.com
PERCH_EMAIL_FROM_NAME: My Tech Tailor
PERCH_LOGINPATH: /at-admin
PERCH_PATH: /var/www/public/axletech.dev/at-admin
PERCH_CORE: /var/www/public/axletech.dev/at-admin/core
PERCH_RESFILEPATH: /var/www/public/axletech.dev/at-admin/resources
PERCH_RESPATH: /at-admin/resources
PERCH_HTML5: 1
PERCH_TZ: UTC
PERCH_PARANOID: 1
PERCH_VERIFY_UPLOADS:
PERCH_DEBUG:
PERCH_RUNWAY: 1
PERCH_ERROR_MODE: DIE
PERCH_DATE_LONG: %d %B %Y
PERCH_DATE_SHORT: %d %b %Y
PERCH_TIME_SHORT: %H:%M
PERCH_TIME_LONG: %H:%M:%S
PERCH_RUNWAY_ROUTED:
PERCH_STRONG_PASSWORDS:
PERCH_PREVIEW_ARG: preview
PERCH_TEMPLATE_PATH: /var/www/public/axletech.dev/at-admin/templates
PERCH_DEFAULT_DOC: index.php
PERCH_DEFAULT_EXT: .php
PERCH_PRODUCTION_MODE: 100
PERCH_RWD:
PERCH_HTML_ENTITIES:
PERCH_SSL:
PERCH_STRIPSLASHES:
PERCH_PROGRESSIVE_FLUSH: 1
PERCH_FORCE_SECURE_COOKIES: 1
PERCH_PASSWORD_MIN_LENGTH: 6
PERCH_MAX_FAILED_LOGINS: 10
PERCH_AUTH_LOCKOUT_DURATION: 1 HOUR
PERCH_AUTH_PLUGIN:
PERCH_DB_CHARSET: utf8
PERCH_DB_PORT:
PERCH_DB_SOCKET:
PERCH_SESSION_TIMEOUT_MINS: 20
HOSTING SETTINGS

PHP: 5.6.14-1+deb.sury.org~trusty+1
Zend: 2.6.0
OS: Linux
SAPI: apache2handler
Safe mode: not detected
MySQL client: mysqlnd 5.0.11-dev - 20120503 - $Id: 3c688b6bbc30d36af3ac34fdd4b7b5b787fe5555 $
MySQL server: 5.5.46-0ubuntu0.14.04.2
Free disk space: 161.47 GB
Extensions: Core, date, ereg, libxml, openssl, pcre, zlib, bcmath, bz2, calendar, ctype, dba, dom, hash, fileinfo, filter, ftp, gettext, SPL, iconv, mbstring, session, posix, Reflection, standard, shmop, SimpleXML, soap, sockets, Phar, exif, sysvmsg, sysvsem, sysvshm, tokenizer, wddx, xml, xmlreader, xmlwriter, zip, apache2handler, mysqlnd, PDO, curl, gd, imagick, intl, json, mcrypt, memcache, memcached, mongo, mysql, mysqli, pdo_mysql, pdo_pgsql, pdo_sqlite, pgsql, readline, redis, sqlite3, mhash, Zend OPcache
GD: Yes
ImageMagick: Yes
PHP max upload size: 100M
PHP max form post size: 100M
PHP memory limit: 128M
Total max uploadable file size: 100M
Resource folder writeable: Yes
Session timeout: 24 minutes
Native JSON: Yes
Filter functions: Yes
Transliteration functions: Yes
HTTP_HOST: axletech.dev
HTTP_CONNECTION: keep-alive
HTTP_UPGRADE_INSECURE_REQUESTS: 1
HTTP_USER_AGENT: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
HTTP_ACCEPT: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
HTTP_REFERER: https://axletech.dev/at-admin/core/settings/diagnostics/
HTTP_ACCEPT_ENCODING: gzip, deflate, sdch
HTTP_ACCEPT_LANGUAGE: en-US,en;q=0.8
HTTP_COOKIE: PHPSESSID=tc8vc2n7i5nhl0gpkbrs2boc55
PATH: /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
SERVER_SIGNATURE: <address>Apache/2.4.16 (Ubuntu) Server at axletech.dev Port 80</address>
SERVER_SOFTWARE: Apache/2.4.16 (Ubuntu)
SERVER_NAME: axletech.dev
SERVER_ADDR: 192.168.33.10
SERVER_PORT: 80
REMOTE_ADDR: 192.168.33.1
DOCUMENT_ROOT: /var/www/public/axletech.dev
REQUEST_SCHEME: http
CONTEXT_DOCUMENT_ROOT: /var/www/public/axletech.dev
SERVER_ADMIN: webmaster@localhost
SCRIPT_FILENAME: /var/www/public/axletech.dev/at-admin/core/settings/diagnostics/index.php
REMOTE_PORT: 2617
GATEWAY_INTERFACE: CGI/1.1
SERVER_PROTOCOL: HTTP/1.1
REQUEST_METHOD: GET
QUERY_STRING: extended
REQUEST_URI: /at-admin/core/settings/diagnostics/?extended
SCRIPT_NAME: /at-admin/core/settings/diagnostics/index.php
PHP_SELF: /at-admin/core/settings/diagnostics/index.php
REQUEST_TIME_FLOAT: 1474448249.358
REQUEST_TIME: 1474448249

Staging:

Diagnostics report
PERCH INFORMATION

Perch Runway: 2.8.31
Production mode: Production (100)
Installed apps: content (2.8.31), assets (2.8.31), categories (2.8.31), perch_blog (5.0), perch_events (1.9.3), perch_forms (1.8.3)
DB driver: PDO
DB tables: perch2_backup_plans (0), perch2_backup_resources (0), perch2_backup_runs (0), perch2_blog_authors (3), perch2_blog_comments (0), perch2_blog_index (1335), perch2_blog_posts (47), perch2_blog_posts_to_tags (0), perch2_blog_sections (1), perch2_blog_tags (0), perch2_blogs (1), perch2_categories (43), perch2_category_counts (0), perch2_category_sets (4), perch2_collection_index (21504), perch2_collection_items (2464), perch2_collection_revisions (1135), perch2_collections (12), perch2_content_index (3077), perch2_content_items (168), perch2_content_regions (69), perch2_events (6), perch2_events_categories (0), perch2_events_to_categories (0), perch2_forms (2), perch2_forms_responses (3), perch2_navigation (0), perch2_navigation_pages (0), perch2_page_routes (72), perch2_page_templates (14), perch2_pages (44), perch2_resource_log (976), perch2_resource_tags (500), perch2_resources (337), perch2_resources_to_tags (860), perch2_settings (27), perch2_user_passwords (2), perch2_user_privileges (41), perch2_user_role_privileges (33), perch2_user_roles (2), perch2_users (3)
Users: 3
App runtimes:
<?php
    $apps_list = array(
        'content', 
        'categories',
        'perch_blog',
        'perch_events',
        'perch_forms',
    );
Scheduled tasks for perch_blog: delete_spam_comments (1440 mins)
Scheduled tasks for perch_events: update_category_counts (60 mins)
Editor plug-ins: ckeditor, markitup
H1: f6be142e24e6375685510dd523d3a7ec
L1: efd234e6613dbe978313d452ca9e76a4
F1: 2edba60ed1f613d6dd804feb202456a2
headerColour: #f9f9f9
content_singlePageEdit: 1
helpURL:
siteURL: /
hideBranding: 1
content_collapseList: 1
lang: en-gb
update_2.8.29: done
headerScheme: light
update_runway_2.8.29: done
dashboard: 0
hide_pwd_reset: 0
content_hideNonEditableRegions: 0
content_frontend_edit: 0
logoPath: /at-admin/resources/axletech.png
latest_version: 2.8.15
on_sale_version: 2.8.31
update_runway_2.8.31: done
perch_blog_update: 5.0.1
perch_blog_post_url: /company/news/{postSlug}
perch_blog_site_name: AxleTech International
perch_blog_slug_format: %Y-%m-%d-{postTitle}
perch_blog_akismet_key:
perch_blog_max_spam_days: 0
perch_blog_comment_notify: 0
perch_events_update: 1.8
perch_events_detail_url: /events/event.php?s={eventSlug}
PERCH_DEVELOPMENT: 10
PERCH_STAGING: 50
PERCH_PRODUCTION: 100
PERCH_SCHEDULE_SECRET: FeDT7fhOJNOrxniQ
PERCH_DB_USERNAME: mttstage_axletec
PERCH_DB_SERVER: localhost
PERCH_DB_DATABASE: mttstage_axletech
PERCH_SITEPATH:
PERCH_DB_PREFIX: perch2_
PERCH_EMAIL_FROM: info@mytechtailor.com
PERCH_EMAIL_FROM_NAME: My Tech Tailor
PERCH_LOGINPATH: /at-admin
PERCH_PATH: /home/mttstage/public_html/axletech/at-admin
PERCH_CORE: /home/mttstage/public_html/axletech/at-admin/core
PERCH_RESFILEPATH: /home/mttstage/public_html/axletech/at-admin/resources
PERCH_RESPATH: /at-admin/resources
PERCH_HTML5: 1
PERCH_TZ: UTC
PERCH_PARANOID: 1
PERCH_DEBUG:
PERCH_RUNWAY: 1
PERCH_ERROR_MODE: DIE
PERCH_DATE_LONG: %d %B %Y
PERCH_DATE_SHORT: %d %b %Y
PERCH_TIME_SHORT: %H:%M
PERCH_TIME_LONG: %H:%M:%S
PERCH_RUNWAY_ROUTED:
PERCH_STRONG_PASSWORDS:
PERCH_PREVIEW_ARG: preview
PERCH_TEMPLATE_PATH: /home/mttstage/public_html/axletech/at-admin/templates
PERCH_DEFAULT_DOC: index.php
PERCH_DEFAULT_EXT: .php
PERCH_PRODUCTION_MODE: 100
PERCH_RWD:
PERCH_HTML_ENTITIES:
PERCH_SSL:
PERCH_STRIPSLASHES:
PERCH_PROGRESSIVE_FLUSH: 1
PERCH_FORCE_SECURE_COOKIES: 1
PERCH_PASSWORD_MIN_LENGTH: 6
PERCH_MAX_FAILED_LOGINS: 10
PERCH_AUTH_LOCKOUT_DURATION: 1 HOUR
PERCH_VERIFY_UPLOADS: 1
PERCH_AUTH_PLUGIN:
PERCH_DB_CHARSET: utf8
PERCH_DB_PORT:
PERCH_DB_SOCKET:
PERCH_SESSION_TIMEOUT_MINS: 20
HOSTING SETTINGS

PHP: 5.6.24
Zend: 2.6.0
OS: Linux
SAPI: litespeed
Safe mode: not detected
MySQL client: mysqlnd 5.0.11-dev - 20120503 - $Id: 76b08b24596e12d4553bd41fc93cccd5bac2fe7a $
MySQL server: 5.5.50-cll
Free disk space: 53.09 GB
Extensions: Core, date, ereg, libxml, openssl, pcre, sqlite3, zlib, bcmath, bz2, calendar, ctype, curl, dom, hash, fileinfo, filter, ftp, gd, gettext, SPL, iconv, session, intl, json, mbstring, mcrypt, standard, mysql, mysqli, mysqlnd, Phar, posix, pspell, Reflection, imap, SimpleXML, soap, sockets, exif, tidy, tokenizer, wddx, xml, xmlreader, xmlrpc, xmlwriter, xsl, zip, litespeed, PDO, pdo_sqlite, pdo_mysql, memcache, SourceGuardian, ionCube Loader, Zend Guard Loader
GD: Yes
ImageMagick: No
PHP max upload size: 64M
PHP max form post size: 64M
PHP memory limit: 128M
Total max uploadable file size: 64M
Resource folder writeable: Yes
Session timeout: 24 minutes
Native JSON: Yes
Filter functions: Yes
Transliteration functions: Yes
HTTP_ACCEPT: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
HTTP_ACCEPT_ENCODING: gzip, deflate, sdch
HTTP_ACCEPT_LANGUAGE: en-US,en;q=0.8
HTTP_CONNECTION: keep-alive
HTTP_COOKIE: _ga=GA1.2.201566127.1456648114; PHPSESSID=de83980156e6b6d82b21e27eeb39dcc6
HTTP_HOST: axletech.staging.mytechtailor.com
HTTP_REFERER: https://axletech.staging.mytechtailor.com/at-admin/core/settings/diagnostics/
HTTP_USER_AGENT: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
HTTP_UPGRADE_INSECURE_REQUESTS: 1
DOCUMENT_ROOT: /home/mttstage/public_html/axletech
REMOTE_ADDR: 24.11.229.203
REMOTE_PORT: 2622
SERVER_ADDR: 208.75.148.200
SERVER_NAME: axletech.staging.mytechtailor.com
SERVER_ADMIN: webmaster@axletech.staging.mytechtailor.com
SERVER_PORT: 80
REQUEST_URI: /at-admin/core/settings/diagnostics/?extended
SCRIPT_FILENAME: /home/mttstage/public_html/axletech/at-admin/core/settings/diagnostics/index.php
QUERY_STRING: extended
SCRIPT_URI: https://axletech.staging.mytechtailor.com/at-admin/core/settings/diagnostics/
SCRIPT_URL: /at-admin/core/settings/diagnostics/
SCRIPT_NAME: /at-admin/core/settings/diagnostics/index.php
SERVER_PROTOCOL: HTTP/1.1
SERVER_SOFTWARE: LiteSpeed
REQUEST_METHOD: GET
PHP_SELF: /at-admin/core/settings/diagnostics/index.php
REQUEST_TIME_FLOAT: 1474448490.62
REQUEST_TIME: 1474448490
argc: 1

Just what I looked up. How can I see what the server is reporting?

I've switched on debug. I go to Assets > Add asset, click to upload, upload the .xlsm, the progress meter completes and the file drop area closes, but then the new asset is nowhere to be found and the debug message doesn't change or show any information about the file. Here is debug after trying to upload the file:

Debug Message
[1] SELECT u.*, r.* FROM perch2_users u, perch2_user_roles r WHERE u.roleID=r.roleID AND u.userEnabled=1 AND u.userID=1 AND u.userHash='c7e1b0fe11fa73c40496264fdb715171' LIMIT 1
UPDATE perch2_users SET userHash='918c22119989bb569568bc99301a4be7' WHERE userID='1'
[41] SELECT p.privKey FROM perch2_user_privileges p
[27] SELECT * FROM (SELECT DISTINCT settingID, settingValue, userID FROM perch2_settings WHERE userID=1 OR userID=0 ORDER BY userID DESC) AS settings GROUP BY settingID, settingValue, userID
[nil] SELECT collectionID, collectionKey, collectionEditRoles FROM perch2_collections WHERE collectionInAppMenu=1 ORDER BY collectionOrder ASC
[30] SELECT SQL_CALC_FOUND_ROWS DISTINCT r1.*, r2.resourceFile AS thumb, r2.resourceWidth AS thumbWidth, r2.resourceHeight AS thumbHeight, r2.resourceDensity AS thumbDensity FROM perch2_resources r1 LEFT OUTER JOIN perch2_resources r2 ON r2.resourceParentID=r1.resourceID AND r2.resourceKey='thumb' AND r2.resourceAWOL!=1 WHERE r1.resourceKey='orig' AND r1.resourceAWOL=0 ORDER BY r1.resourceUpdated DESC, r1.resourceID DESC LIMIT 0, 30
[145] SELECT FOUND_ROWS() AS `count`
[5] SELECT DISTINCT resourceType FROM perch2_resources WHERE resourceAWOL=0 AND resourceType !="" ORDER BY resourceType ASC
[7] SELECT DISTINCT resourceBucket FROM perch2_resources WHERE resourceAWOL=0 AND resourceType !=""
Queries: 10
Memory: 2.5891

I disabled javascript, uploaded the file and got this message:

Debug Message
[1] SELECT u.*, r.* FROM perch2_users u, perch2_user_roles r WHERE u.roleID=r.roleID AND u.userEnabled=1 AND u.userID=1 AND u.userHash='e171de461a09851141c61004ab0ec982' LIMIT 1
UPDATE perch2_users SET userHash='a4070d315afddf4bd2971d47cab6d90b' WHERE userID='1'
[41] SELECT p.privKey FROM perch2_user_privileges p
[27] SELECT * FROM (SELECT DISTINCT settingID, settingValue, userID FROM perch2_settings WHERE userID=1 OR userID=0 ORDER BY userID DESC) AS settings GROUP BY settingID, settingValue, userID
[nil] SELECT collectionID, collectionKey, collectionEditRoles FROM perch2_collections WHERE collectionInAppMenu=1 ORDER BY collectionOrder ASC
Array
(
    [0] => Mime type did not match: application/vnd.openxmlformats-officedocument.spreadsheetml.sheet
    [1] => Failed file type check
)
[7] SELECT DISTINCT resourceBucket FROM perch2_resources WHERE resourceAWOL=0 AND resourceType !=""
Queries: 7
Memory: 3.2963

I added application/vnd.openxmlformats-officedocument.spreadsheetml.sheet to filetypes.ini in the [office] section, but I'm still getting the same error when I try to upload the file.

Just noticed application/vnd.openxmlformats-officedocument.spreadsheetml.sheet is already in filetypes.ini by default...

.xlsx is regular Excel and .xlsm is Excel with macros, so I suspect they should both be mapped to that mime type.

Uploading .xlsm is a requirement for my client, so I'm in a pinch. Will disabling PERCH_VERIFY_UPLOADS affect form file uploads, as in <perch:input type="file" id="resume" accept="pdf office" label="Resume" />? I only need to be able to upload these files via admin for now. Is this something that can be fixed in the next version of Runway?

Thanks Drew. Several other sites confirm that the MIME type for .xlsm should be application/vnd.ms-excel.sheet.macroenabled.12 which is what you have in perch/core/data/mime.types, so I'm thinking this might be a problem with the way the client is saving the file in Excel.