Viewing 15 replies - 31 through 45 (of 49 total)
  • Plugin Author osexcel

    (@osexcel)

    Hi Saxammo

    It seems that once the message is sent to the ticket system, our server firewall reports a false alert. I am checking the log now. Will revert asap.

    Plugin Author osexcel

    (@osexcel)

    To Kamiill

    Re: still have a little problem, I want to make OSE Viruss Scanner – take the Initialise Database. Of course loads without problems but inadvertently up-close window I click on the close and nothing loaded to check!

    –I will double check your issue, but for this one:

    Re:look – https://fbcdn-sphotos-h-a.akamaihd.net/hphotos-ak-frc1/v/1232474_507868339288769_700742620_n.jpg?oh=9a4c29e26275eeb34a09878f2438f189&oe=5231F89C&__gda__=1379082521_f9ff757bf8489a09b90f16f80bf56425

    — Could you please tell me why is related to OSE Firewall?

    Plugin Author osexcel

    (@osexcel)

    Hi saxamo

    Issue fixed, we found that there is a security rule triggering the false alert, we fixed it and you should be able to re-create the ticket from now on.

    Ok, I have also made this upgrade from the 1.6 version to your newest 2.0.2 release.

    I am unsure of these issues, but I will address the ones I can notice, and see if anyone else has had them.

    1: Variables management page: button says “load wordpress default variables”, when clicked it comes up with this message: “Please confirm that you would like to load the Joomla whitelisted variable rules”.

    1A: variables page also shows a “0” ID variable, with NA listed… is this needed? garbage?

    2:Virus Scanner Panel: no progression bar during scan? says virus scanning in progress but nothing moving? lack of working indication status…. oversight?

    3: virus scan config page: the option for File Extensions when upgraded show slashes in teh fields like this:

    \\htm\\,\\html\\,\\shtm\\,

    is that correct? or should they be like this:
    htm,html,shtm,shtml,css,js,php,php3,php4,php5,inc,phtml,jpg,jpeg,gif,png,bmp,c,sh,pl,perl,cgi,txt

    3A: scan file size box is incorrect sizing, not editable, blank. The box exists, but is nothing there, can’t click on it at all, not accepting input.

    4: Admin Email Panel: shows a 0 ID, which cannot be deleted.
    4A: cannot link to anything using the add linkage. it clicks, but shows no admin user in the drop down. can try entering name, will not save

    5: DATABASE SIZE
    This is a big one in my book. Seems my DB has quandrupled in size by updating the plugin. Going from 500k to 2 megs is not a lot in the grand scheme but when comparing the two sql files I noticed this type of issue.

    I understand adding to the DB, but are you really storing non-changing updates and drop table commands in the db itself? should these not be part of the programmatic structure within the php code?

    There is a massive section of sql code all related to this plugin (seen in part below, would not save post with all of it)

    --
    -- Table structure for table <code>kxxp1w39s_ose_app_admin</code>
    --
    
    DROP TABLE IF EXISTS <code>kxxp1w39s_ose_app_admin</code>;
    /*!40101 SET @saved_cs_client     = @@character_set_client */;
    /*!40101 SET character_set_client = utf8 */;
    CREATE TABLE <code>kxxp1w39s_ose_app_admin</code> (
      <code>id</code> int(11) NOT NULL AUTO_INCREMENT,
      <code>user_id</code> varchar(45) NOT NULL,
      PRIMARY KEY (<code>id</code>)
    ) ENGINE=InnoDB DEFAULT CHARSET=utf8;
    /*!40101 SET character_set_client = @saved_cs_client */;
    
    --
    -- Dumping data for table <code>kxxp1w39s_ose_app_admin</code>
    --
    
    LOCK TABLES <code>kxxp1w39s_ose_app_admin</code> WRITE;
    /*!40000 ALTER TABLE <code>kxxp1w39s_ose_app_admin</code> DISABLE KEYS */;
    /*!40000 ALTER TABLE <code>kxxp1w39s_ose_app_admin</code> ENABLE KEYS */;
    UNLOCK TABLES;
    
    --
    -- Temporary table structure for view <code>kxxp1w39s_ose_app_adminemailmap</code>
    --
    
    DROP TABLE IF EXISTS <code>kxxp1w39s_ose_app_adminemailmap</code>;
    /*!50001 DROP VIEW IF EXISTS <code>kxxp1w39s_ose_app_adminemailmap</code>*/;
    SET @saved_cs_client     = @@character_set_client;
    SET character_set_client = utf8;
    /*!50001 CREATE TABLE <code>kxxp1w39s_ose_app_adminemailmap</code> (
     <code>name</code> tinyint NOT NULL,
      <code>email</code> tinyint NOT NULL,
      <code>id</code> tinyint NOT NULL,
      <code>user_id</code> tinyint NOT NULL,
      <code>email_id</code> tinyint NOT NULL,
      <code>subject</code> tinyint NOT NULL,
      <code>app</code> tinyint NOT NULL
    ) ENGINE=MyISAM */;
    SET character_set_client = @saved_cs_client;

    Also, Please note the plugin size wth. No offense.

    But the plugin folder went from 1m of files, to 30 megs of files. Perhaps you guys don’t care about bloated file sizes. But I do.

    I think you guys need to be working some overtime.

    Plugin Author osexcel

    (@osexcel)

    HI shadowood

    We will try to address the issues asap, and reduce the file size as much as possible, the framework is a bit big though, and we will try our best to reduce the size.

    Thank you for the report, will try our best to get them all resolved asap.

    ProWeb Team

    Plugin Author osexcel

    (@osexcel)

    HI Shadowood

    For the Db issue, it is mainly because we added a table called geoip, that is used to detect the country of the ip address. We definitely can utilize the DB from a remote server, but that may slow down your website speed in the anti-hacker scanning function, so we added those data into the db, which increased the db size.

    Hope this makes sense and helps. 🙂

    Osexcel,

    Fully appreciate trying to keep aspects faster. However, this was a sql section of 1.5 megs (in total) just from this update.

    No offense, many of us here are programmers, myself included. That is a considerable amount to place within the DB. Especially when only core data need be in the DB, and the sql strings can be done programmatically in the php.

    I have little issue with storing the data for the queries, but find it odd to store anything more then absolutely necessary in the DB.

    If no one has a copy, I suggest “Database Design for Mere Mortals” from Amazon.

    I am sure that you guys are top notch programmers. As a developer myself though I do understand that sometimes things are pushed out too early because they work, not because they are clean and efficient.

    The other issues I mentioned prevent me from knowing for sure if the plugin is truly working for me. The old version notified me several times daily and since I cannot get notifications with this version I have little choice but to revert back to earlier release.

    As to the framework. What changes did you have to make to include such a clunky framework??? That’s where I am a little confused.

    It is one thing to add a little space in the DB or even double the size of the plugin, but that one plugin doubled the entire size of the blog. This is a 30x factor increase in overall size…

    Assuming the functionality remained mostly the same, and adding geo functionality, most of that size becomes the UI which should be quite unacceptable IMHO.

    I truly *liked* your firewall. Had it on over a dozen blogs and was planning on dozens more, but now that is on hold.

    Plugin Author osexcel

    (@osexcel)

    Hi shadowood

    Thank you for the constructive advises. The reason we implement the framework is to implement an MVC structure for the plugin, as you may find that in the old version, the structure is not in MVC which is not efficient to modify and improve in the long run, but you are right that the framework is clunky, we are thinking to making lighter now.

    I think we can do the following improvements to reduce the size:

    1. Try to remove unnecessary files in the framework
    2. Remove the GeoIP SQL files
    3. Utilize the remote GeoIP function to update an IP’s location ONLY in the backend. This way, it does not affect the network connection speed in the frontend and can reduce the file and db size a lot

    For the alert function, in this new version, you will need to add your email into the notification list, please access Configuraiton –> Admin-Email Mapping to add your account into the alert email list. Then you will receive the alert emails. The reason we do this is, in the previous version, many users report that they are receiving hundreds of alert emails, so we add the mapping function to let you choose which type of email to receive.

    Please feel free to give any comments. Your comments are very much appreciated since it will help the plugin to work better and better! 🙂

    Osexcel,

    Glad I could at least help get the creative juices flowing in the right direction. Those sound like some pretty good steps in the right direction.

    I will look over this version some more, but until I can at least solve these issues on my test server I will not upgrade to this versoin on a production site.

    I look forward to more details.

    Do you mind if I ask another question? What prompted the considerable change in format from the old 1.6.4 to the new version? Was MVC and GeoIP the only reasons?

    Plugin Author osexcel

    (@osexcel)

    Hi Shadowood

    We have resolved some of the issues, but we have some questions regarding part of the issues raised, could you please see my comments below and give us some more information

    1A: variables page also shows a “0” ID variable, with NA listed… is this needed? garbage?

    — Yes, otherwise the javascript library we are using will show that it keeps loading the page.

    2:Virus Scanner Panel: no progression bar during scan? says virus scanning in progress but nothing moving? lack of working indication status…. oversight?

    — fixed, we will release a new version soon,

    3: virus scan config page: the option for File Extensions when upgraded show slashes in teh fields like this:

    \\htm\\,\\html\\,\\shtm\\,

    is that correct? or should they be like this:
    htm,html,shtm,shtml,css,js,php,php3,php4,php5,inc,phtml,jpg,jpeg,gif,png,bmp,c,sh,pl,perl,cgi,txt

    — Could you please check the database table ‘wp_ose_secConfig’,and give us the value stored in the database for the value that matches the key with ‘file_ext’?

    3A: scan file size box is incorrect sizing, not editable, blank. The box exists, but is nothing there, can’t click on it at all, not accepting input.

    — fixed

    4A: cannot link to anything using the add linkage. it clicks, but shows no admin user in the drop down. can try entering name, will not save

    — Could you please tell us the wordpress version? As we tried it in version 3.6 in our local server, the administrator user shows up.

    Plugin Author osexcel

    (@osexcel)

    Hi Shadowood

    We have resolved some of the issues, but we have some questions regarding part of the issues raised, could you please see my comments below and give us some more information

    1A: variables page also shows a “0” ID variable, with NA listed… is this needed? garbage?

    — Yes, otherwise the javascript library we are using will show that it keeps loading the page.

    2:Virus Scanner Panel: no progression bar during scan? says virus scanning in progress but nothing moving? lack of working indication status…. oversight?

    — fixed, we will release a new version soon,

    3: virus scan config page: the option for File Extensions when upgraded show slashes in teh fields like this:

    \\htm\\,\\html\\,\\shtm\\,

    is that correct? or should they be like this:
    htm,html,shtm,shtml,css,js,php,php3,php4,php5,inc,phtml,jpg,jpeg,gif,png,bmp,c,sh,pl,perl,cgi,txt

    — Could you please check the database table ‘wp_ose_secConfig’,and give us the value stored in the database for the value that matches the key with ‘file_ext’?

    3A: scan file size box is incorrect sizing, not editable, blank. The box exists, but is nothing there, can’t click on it at all, not accepting input.

    — fixed

    4A: cannot link to anything using the add linkage. it clicks, but shows no admin user in the drop down. can try entering name, will not save

    — Could you please tell us the wordpress version? As we tried it in version 3.6 in our local server, the administrator user shows up.

    Thank you for your information in advance!

    Plugin Author osexcel

    (@osexcel)

    BTW, Re:
    Do you mind if I ask another question? What prompted the considerable change in format from the old 1.6.4 to the new version? Was MVC and GeoIP the only reasons?

    — The main reason are
    a) using MVC structure
    b) the framework we used: YiiFramework has better performance over others
    http://www.yiiframework.com/performance/

    This is the reason we choose this framework. We had found a solution to reduce the plugin from 22m to 12m, and reduce the database size as well, will try to get the job done asap and release this new version.

    Plugin Author osexcel

    (@osexcel)

    To Shadowood

    Please upgrade to 2.1.0, please see the change logs here for the improvements:

    http://wordpress.org/plugins/ose-firewall/changelog/

    Best wishes
    Helix

    OSExcel,

    I am sorry I haven’t gotten back, been pretty busy.

    At presnt I cannot check that DB table you are asking about, I will reload it on a test site and see if I can recheck the db tables, (or I can send you a copy of the DB backup containing your sections).

    I also found several other issues for which I am concerned. I will write them up and add them here as well.

    Thanks.

Viewing 15 replies - 31 through 45 (of 49 total)
  • The topic ‘I have made updates to the plug and I have a problem’ is closed to new replies.