• Resolved nightbook

    (@nightbook)


    Hello,
    We’re in love with this plugin, but have found there’s some test users or hacked in user on it which has them browsing their own blog and when I follow them it takes me out of my blog.

    Their name is Riccardo and the blog they take me to is http://www.ignoranza.net

    If they’re a test user how can I remove them, if they’ve hacked in somehow how can I disable them and block them?

    Any assistance appreciated,
    Cheers

    https://wordpress.org/plugins/collaboration/

Viewing 9 replies - 1 through 9 (of 9 total)
  • Hi Everyone,

    I’m hoping someone has an answer to nightbook’s enquiry – – since I have also got this same Riccardo dude constantly logged on as a “Creator” with the same blog links to http://www.ignoranza.net also showing up.

    Same questions from me – if they’re a test user, how can I remove them, and if they’ve hacked in somehow, how can I disable and block them?

    Any help greatly appreciated, guys!

    Cheers:

    https://wordpress.org/plugins/collaboration/

    If you require assistance then, as per the Forum Welcome, please post your own topic instead of tagging onto someone else’s topic.

    Hi Esmi,

    Thanks for this, but I think you’ve missed my point. I am simply confirming that nighbook’s post is not a one-off situation, since it is also happening on my website – may well be happening to other users of this same plugin.

    All the best 🙂

    These forums have guidelines. Please read them. As you will see, one of these guidelines – entitled Where to Post – specifically states:

    Unless you are using the same version of WordPress on the same physical server hosted by the same hosts with the same plugins, theme & configurations as the original poster, do not post in someone else’s thread. Start your own topic.

    Please abide by this.

    Hi Esmi – the guidelines also specifically state, right at the beginning:

    “Many of the questions that are posted in the forums have been posted many times before, and get the same answers each time. Before starting a new thread, please try searching the forums for an answer.”

    I think I’ll stick with that, since it is pretty obvious that I do NOT have a new thread to create, I have exactly the same issue as Nightbook – when someone answers his questions, I shall be very grateful because it is exactly the same issue.

    Absolutely no point whatsoever in making a new thread to ask the same question.

    I am abiding by the guidelines.

    Thread Starter nightbook

    (@nightbook)

    Thanks @bearwolf, glad to hear I’m not alone there.
    @esmi, I think you’re splitting hairs unnecessarily here, @bearwolf is obviously just confirming this isn’t an isolated issue which is very useful information to anyone who’s actually going to be able to help us. No need for another topic when he’s just giving my post a +1 to raise it’s importance and so he’ll also be notified once someone answers our question.
    Greatly appreciated @bearwolf, hopefully someone with more information on our related issue will be able to shed some insight.
    All the best,
    Cheers

    Hi All,

    I had the same problem with user Riccardo. I think I’ve solved it. It’s actually a mistake in the code (i.e.: not malicious).

    The togetherjs-min.js code has a definition for “TogetherJSConfig_findRoom”. If you edit the file togetherjs.php (part of the plugin zip file) you see the author uses
    $site_id = get_current_blog_id();
    to assign the current blog_id (which btw is pre-3.8 call) to variable site_id (Line 433 in code). If you look further down (starting on line 475) he injects the necessary javascript into the header of the page and on line 481 uses
    var TogetherJSConfig_findRoom = "site_' . $site_id . '";
    to assign the participant to a room.

    The problem is that site_id is usually 1, so TogetherJSConfig_findRoom variable gets assigned the string “site_1” which basically lands everyone who uses (installs and activates) the plugin in the same room.

    Riccardo is just some guy who’s installed the plugin, activated it and left it in collaborate mode.

    I changed the above code from
    var TogetherJSConfig_findRoom = "site_' . $site_id . '";
    to
    var TogetherJSConfig_findRoom = "demosite_' . $site_id . '";
    and I can confirm that Riccardo is not there.

    I would suggest that the plugin author give us the facility to choose the prefix we want to use instead of hardcoding it in the code (since $site_id will always resolve to 1) or use the hostname of the installation instead of the string “site_” in the above initialization.

    Hope this helps……

    TTYL
    Many

    Thread Starter nightbook

    (@nightbook)

    Thanks @nerdlogger,

    Appreciate the assist, that worked perfectly.
    Would be nice to see that as a option for the plugin here:
    http://whalecontentstudio.com/wp-admin/options-general.php?page=togetherjs

    Hopefully this gets picked up before the next plugin update so I don’t have to reapply it.

    All the best,
    Cheers

Viewing 9 replies - 1 through 9 (of 9 total)
  • The topic ‘Where's this Riccardo User Coming from?’ is closed to new replies.