Forum Replies Created

Viewing 15 replies - 31 through 45 (of 82 total)
  • Thread Starter anotherdave

    (@anotherdave)

    Thank you for the response Jacob, good to know. I have a client that uses WP Photo Album Plus and happy to hear they do not have to change to something else and a secure fixed version is in the works.

    Thread Starter anotherdave

    (@anotherdave)

    Hi @endzevich , I meant to reply to this and had forgotten, sorry 🙁

    Since iThemes Security is a security plugin that detects and alerts of security issues with WordPress / Themes / Plugins, there is no way to “reproduce” an invisible issue.

    Fortunately your 2.4.2 version update resolved the issue and iThemes Security detects 2.4.2 as safe & clean. Thank you! 🙂

    Thread Starter anotherdave

    (@anotherdave)

    iThemes Security finally stopped flagging this as vulnerable and started marking it clean on September 16th.

    Just wanted to chime in and say that this has started happening with CleanTalk on a large number of sites that I host and it’s creating high server loads / degraded performance.

    Thread Starter anotherdave

    (@anotherdave)

    You’re welcome, and thank you / SeedProd team for your responsiveness to this thread.

    Thread Starter anotherdave

    (@anotherdave)

    The good news is – this is definitely not a hosting / server issue, and is not (technically) a SeedProd issue.

    I did some further digging and as it turns out, this is a WordPres 5.7 issue and many WP site owners around the web are experiencing this with a variety of plugins.

    Basically any plugin that removes / modifies some of the output code that the HTTPS part of WP 5.7’s Site Health Check uses for validating will generate this false-alert.

    In addition to practically every “coming soon” or “maintenance mode” plugin , this false-alert happens in WP 5.7 with several other types of plugins, such as login protection plugins and others that “hide” some of the WP content. I’ve even seen someone report that it happens with a popular optimizer / cache plugin.

    As you can see herehttps://core.trac.wordpress.org/ticket/52783WP devs are aware and it looks like they’re going to either patch it or pull the HTTPS check in the upcoming 5.7.1

    Bottom line – those of us who know the sites we manage are definitely properly SSL secured and are hosted on well maintained / well configured servers can safely ignore this. (And @seedprod now knows what to tell any users that happen to report the same issue).

    Edited several typos… rough day lol

    • This reply was modified 5 years, 2 months ago by anotherdave.
    • This reply was modified 5 years, 2 months ago by anotherdave.
    • This reply was modified 5 years, 2 months ago by anotherdave.
    Thread Starter anotherdave

    (@anotherdave)

    @seedprod – didn’t notice you’d posted a follow-up, sorry.

    Quick FYI that might be relevant – the https problem in site health check does not happen with the legacy 5.x versions, only with the recent 6.x versions (did not start happening until right around the release of pro that includes page editor).

    I just set up a fresh clean WP site (proper manual install of course, no point & click installers) and:

    • No content added yet, just default pages / post from install
    • Only default twenty twenty-one theme
    • SeedProd FREE 6.0.11.1

    The only other plugin installed is the widely used iThemes Security Pro , as I don’t leave any WP unsecured even if it’s just for testing, but that’s a non-issue because SeedProd newest 6.x versions triggers https warning problem in WP’s Site Health Check regardless of whether iThemes is there or not, activated or deactivated. (And again, SeedProd legacy 5.x does not cause this issue).

    This is as plain-vanilla as it gets. Here’s some screenshots:

    https://www.dropbox.com/s/vixm40m8icxz06z/2_seedprod_https_site_health_issue.png?dl=0

    https://www.dropbox.com/s/je4slbzf7366i69/3_seedprod_https_site_health_issue.png?dl=0

    https://www.dropbox.com/s/2ez5j9baj0fs3w4/4_seedprod_https_site_health_issue.png?dl=0

    I use SeedProd a LOT, and this definitely only started happening in recent weeks, around the time the Pro version included the Page Editor feature. But the example above is with Free version for sake of this thread. Happens with free or pro.

    PHP 7.4 , mySQL 5.7, Apache 2.4 , Linux / cPanel (release tier 94.0.x and 92.x)

    Hope this helps get to the bottom of why only the most recent SP 6.x releases trigger https warning in WP Site Health Check.

    Thanks for the response, much appreciated.

    Thread Starter anotherdave

    (@anotherdave)

    Thanks for the reply and the good news! Huge relief to know that Pro users will soon have the option to disable the Edit button. Glad to know you’re investigating the issue with SeedProd (both paid and free versions) triggering “problem with HTTPS” in Site Health Check. When those two issues are addressed SeedProd will be the #1 “coming soon” plugin again in my opinion.

    I did not experience the issue when looking at page you linked to – the widget images looked aligned nicely, and no scroll bar appears at bottom. So, I’m sure you probably thought of this already but just in case – any chance you have your browser zoom set to higher than 100% ? At 100% or lower it looks fine, but when I set my browser zoom to 110% , only then did the bottom scroll bar appear.

    Forum: Plugins
    In reply to: [EventCalendar] Timezone

    Just to chime-in:

    Had a client contact me today who was getting “PHP default timezone is invalid wordpress” alert in WordPress site health check, on a very basic site not even using the Event Calendar and other 10web plugins that came with his theme.

    Did the usual basic troubleshooting, disabling plugins one at a time and refreshing to find the culprit.

    As soon as I disabled the 10web Event Calendar WD the problem was gone.

    Event Calendar version 1.1.40

    Thankfully the client doesn’t need 10web’s plugins, especially Event Calendar, so for us it’s not an issue. Simply removed the 10web plugins. But for users who depend on them, this is likely still an issue.

    Before I chime-in too, it’s important for site owners to realize that the PHP “post_max_size” setting is NOT referring to your “Posts” in WordPress. It is referring to the maximum allowed size of anything being uploaded to the server through any give PHP session – regardless of whatever type of media (photos, plugins, themes, form data, etc…) is being uploaded to the server, and it is NOT WordPress specific. These settings in PHP dictate the limits and resources for any / all PHP scripts being run on the server no matter if you’re using WordPress or any other such PHP-driven content management system.

    SO…

    As a couple of others have mentioned in this thread (and perhaps taking it a bit further), and I can confirm as someone who has been working in tech support for shared hosting for a while, the WordPress site health check warning that says:

    “Mismatched “post_max_size” and “upload_max_filesize” values.”

    Is something that WordPress devs seriously need to address, because every server administrators knows that the “post_max_size” directive in PHP should always be set smaller than the “upload_max_filesize” , and NOT equal. (Especially in shared hosting environment).

    It’s creating a false alarm and preventing site owners from seeing a perfect “Great Job” score, and as we can also see in this thread – has end-users adjusting things in manner they should not. For example some examples / reasons why:

    – On many hosts using a modern server environment, the PHP values / limits / parameters are set “globally” for the whole server and users should not attempt to override them.

    – Also, on many hosts using a modern server environment, paths related to PHP sessions and settings for PHP resource limits are handled within global settings at the root level of the server and via technologies such as PHP-FPM.

    Therefore; attempts to override the global PHP settings that your host already has in place can result in a variety of unexpected results. If a user attempts to override these settings via .htaccess , there’s a strong chance that either the site will not function correctly or that the overrides are simply ignored. And in some cases your host might have security modules in place that will actually detect the override attempts as something “bad” and could end up triggering a security rule, which in turn could prevent important parts of your code from carrying-out their functions (and in some cases even make a site inoperable).

    Bottom Line is this:

    1. The “post_max_size” setting in PHP should always be at least a little higher than the “upload_max_filesize”

    2. The “memory_limit” setting in PHP should always be larger than both of those. (Although this point doesn’t really come into play when speaking in regard to the “Mismatched “post_max_size” and “upload_max_filesize” values” warning, unless it is truly a “bug” within the new WP health check, since “memory_limit” is not part of the warning).

    Here are a couple of common / correct examples of how those PHP settings / values should be, along with some further explanation:

    On a good well-configured shared host you might see values like this:

    post_max_size = 70M
    upload_max_filesize = 64M
    memory limit = 256M

    In that example above, the server / PHP is basically saying “the PHP script is allowed sustained maximum use of 256 megabytes of server RAM, the largest single upload size allowed via the PHP script is 64 megabytes, and the largest chunk of data (for lack of a better way to word it) that can be inputted via the PHP script is 70 megabytes.

    On a lower-end server you might see something like:

    post_max_size = 50M
    upload_max_filesize = 30M
    memory limit = 128M

    And on a server with original “default” configuration you might see something as limiting as this:

    post_max_size = 8M
    upload_max_filesize = 2M
    memory limit = 64M

    Obviously those last two examples are not optimal for WordPress, because by default WordPress wants 256M of RAM available to it, and many WordPress users are uploading files sized 25M or larger, within sessions that posting upwards of 30M of data at once.

    So… (and based on a number of very busy / very content-rich WP sites that I help manage) out of the three examples above, this one would be optimal and typically work very well for most modern WP sites:

    post_max_size = 70M
    upload_max_filesize = 64M
    memory_limit = 256M

    (In some cases I’ve seen people set memory_limit to 512M , which is fine if you’re on high-end hosting or if you have your own dedicated server etc… , but is not necessary for normal WordPress function).

    It is very well documented in places like the official PHP docs and the official cPanel docs, that “post_max_size” should be set higher than “upload_max_filesize” in the PHP config for correct operation. If the opposite were done, then users would run into timeouts and broken sessions, and it is widely assumed that if they were set “equal” that the same issue is likely to occur, since pushing the limit of an upload to use the same amount of memory as the full data session can also cause the session / operation to timeout and get “stuck”.

    I truly hope that the great minds / developers at WordPress will “fix” this erroneous warning from the site health check feature, as it is alarming users (in many cases for absolutely no valid reason) and in the cases of WP sites that I help manage / host, is the ONLY thing that is prevent a perfect “Great Job!” thumbs-up result in the site health check.

    I also truly hope that this post helped someone else!

    Thread Starter anotherdave

    (@anotherdave)

    Thank you for the response and pointing me in the right direction for pre-sales questions, Fotis!

    Thread Starter anotherdave

    (@anotherdave)

    Thank you for the reply Max.

    Just a couple more questions on this same topic:

    – What other external cloud services would you recommend for streaming instead of Google Drive?

    – Is it possible to prevent site visitors from discovering the link to download the audio files? (Hoping to not give the music away for free, but just use something like this plugin to present samples of the music to promote the purchase of CD’s).

    Thread Starter anotherdave

    (@anotherdave)

    Thank you again for your reply!

    I checked Html5 Audio Player and from the demo it seems to only show single track player, not a “jukebox” interface for a a full album with album cover image. The Compact audio player, same thing. With CP Media Player, it provides a somewhat clunky jukebox interface, and still does not appear to have ability to limit tracks to just a sample instead of whole track, and seems focused on digital download purchase. We’re looking for something that shows a nice playlist with ability to add alum cover image and limit listening to just 30 seconds of each track.

    My apologies if I’m overlooking something, but I’m not seeing the features in them that I mentioned in my firs post.

    Thanks for your patience.

    Thread Starter anotherdave

    (@anotherdave)

    Thank you for replying @bizanimesh !

    I’ve been looking at those (and others) and unless I’m just missing it, I don’t see where they have the ability to:

    – Just play a short sample / preview of the song track (unless selling digital downloads, but my client is selling physical CD’s and not downloads)

    – Load / play the MP3 file from a cloud service such as Google Drive (not a big requirement, but certainly would help)

    I’ll take another look at all 3 of those again to see what I might have missed, if anything.

    Thank you again for your response!

Viewing 15 replies - 31 through 45 (of 82 total)