Support » Plugin: IP Geo Block » how to block “add post”

  • Resolved elchavodel8

    (@elchavodel8)


    hello I have blocked “add post” to users. but when activating the plugin it creates a new link: wp-admin / post-new.php? ip-geo-block-auth-nonce = 2b542b6987 the block stops working. any solution?

    hola tengo bloqueado “añadir post” a los usuarios. pero al activar el plugin crea un nuevo link: wp-admin/post-new.php?ip-geo-block-auth-nonce=2b542b6987 el bloqueo deja de funcionar. alguna solucion?

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author tokkonopapa

    (@tokkonopapa)

    Hi @elchavodel8,

    How do you prevent users to “add post”? I think that the normal way of WordPress is to use Roles and Capabilities to control what a user can do.

    An additional query like “ip-geo-block-auth-nonce=xxxxxxxxxx” is necessary for this plugin to distinguish the requests between intended by an administrator or from outside by an attacker.

    So, if you are exactly comparing the requested link to “/wp-admin/post-new.php”, please separate the additional query string.

    If you are exactly comparing the requested link to “/wp-admin/post-new.php”, a registered user can directly throw a request (by hand or some hacking took) to post some content instead of clicking the link.

    So I recommend you to assign users a right capability and verify it using “current_user_can()“.

    Once I closed this topic, but please feel free to ask something about your concerns.

    Thank you for understanding.

    • This reply was modified 3 years, 1 month ago by tokkonopapa.
    Thread Starter elchavodel8

    (@elchavodel8)

    @tokkonopapa

    Thanks you are right I solve it by changing the capacity of the button.

    Gracias, tienes razón. Lo solucione cambiando la capacidad del botón.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘how to block “add post”’ is closed to new replies.