Accelebrate
Forum Replies Created
-
Forum: Plugins
In reply to: [Tealium] XSS Warning@des2019 apologies, there was an issue with 2.1.18 when running PHP8, I’ve released 2.1.19 to address this.
Regarding:
It will only solve the security problem if I do the upgrade AND also disable the template file editor in your wp-config file?
Disabling the template editor will also disable the plugins ability to allow admin users to add code to templates. On the assumption that if a site owner is happy for admins to have the ability to edit template code in one area of WordPress then they’re also ok for that to be true within a plugin too.
Forum: Plugins
In reply to: [Tealium] XSS Warning@des2019 excuse the change it user, the screenshot in my last message was flagged for review and now my ‘Tealium’ user seems to be blocked from responding to this thread!
I’ve released an updated version of the plugin today (v2.1.18). This update adds input sanitizing to all non-html fields that the plugin creates. The ‘Advanced Tag Code’ field isn’t sanitized for the reasons I previously mentioned, but it is now disabled if you disable the template file editor in your wp-config file.Forum: Plugins
In reply to: [Plugin: News-Ticker] Yeah but…can it loop?I had an issue with News-Ticker displaying an external RSS feed on a fresh installation of WordPress. The first two items would display as expected but the ticker would then freeze.
I updated jQuery cycle to the latest version, this didn’t seem to help, I then found that turning on the ‘continuous’ option for the news-ticker cycle made all of the items display, however this wasn’t really a fix as I didn’t really want the ticker to be continuous.
I decided to try and narrow down which of the cycle options was causing the problem (lines 55 – 63 in ticker.php), I removed them all and added them back in one by one, oddly the ticker carried on working, even once all of the options were back in situ. Maybe some sort of character encoding issue?