bigflannel

I should have updated this post. My apologies.

WebFactory worked with me by email and we worked it out was a restriction on my API key within the Google Cloud Console. You can amend, add, remove etc. restrictions (by domain or other means) in:

https://console.cloud.google.com/apis/credentials

Or when you have navigated into the console go to APIs overview, then click on credentials on the left which should list your keys on the right. You can edit them and see what restrictions apply if any.

I couldn’t work out what key was what … so I created a new key for the domain I was working on and restricted it to that domain.

Hope this helps and thanks WebFactory.

Regards
Mike

I have fixed the issue. Yay. Less than six months I think …

I found these pages:

https://www.rayheffer.com/building-secure-wordpress-server-lamp-centos-7-selinux/
https://francispereira.com/deploying-wordpress-with-selinux-enabled/

In the end I changed all files and folders in my www directory to:

httpd_sys_rw_content_t

using:

$ semanage fcontext -a -t httpd_sys_rw_content_t “/var/www(/.*)?”‘

and then:

$ restorecon -Rv /var/www

and both the core and themes and plugins update now from wp-admin.

I am not sure how secure applying the above setting to an entire web root folder is, but it is a development server so I am happy for the moment. If anyone has thoughts let me know.

Regards
Mike

• This reply was modified 7 years, 11 months ago by bigflannel.

Hi Keith

I looked at the beta download on WordPress … In my testing it is use of the touch event (document.addEventListener(“touchstart”,kpg_nrci_cm, false);) that creates problems for iOS, not the css. I use this code:

jQuery(document).ready(function() {
  jQuery('img').css('-webkit-user-select', 'none').css('-webkit-touch-callout', 'none'); 
  document.addEventListener('mousedown', bf.disableEvent);
  document.addEventListener('contextmenu', bf.disableEvent);
  document.addEventListener('copy', bf.disableEvent);
  document.addEventListener('cut', bf.disableEvent);
  bf.windowLoseFocus();
}

bf.disableEvent = function(event){
	console.log('bf.disableEvent');
    if (event.target.tagName == "IMG") {
    	event.cancelBubble = true;
    	if(event.preventDefault != undefined) {
    		event.preventDefault();
    	}
    	if(event.stopPropagation != undefined) {
    		event.stopPropagation();
    	}
    	return false;
    }
}
bf.windowLoseFocus = function() {
	console.log('bf.windowLoseFocus');
	function onBlur() {
		jQuery('main img, aside img').addClass('image-lose-focus');
	};
	function onFocus(){
		jQuery('main img, aside img').removeClass('image-lose-focus');
	};
	if (/*@cc_on!@*/false) { // check for Internet Explorer
		document.onfocusin = onFocus;
		document.onfocusout = onBlur;
	} else {
		window.onfocus = onFocus;
		window.onblur = onBlur;
	}
}

I’m using it on a site that already uses jQuery, so I use jQuery’s ‘jQuery(document).ready’ but you don’t have to use jQuery.

I’m not sure if this helps …

The code above also includes a little additional obfustication, images are made transparent when the browser loses focus which happens when someone uses the screengrab app to take a screengrab. It’s NOT bulletproof in anyway, but none of this is and it possibly all helps.

Regards
Mike

Hi a2hostinglk

I am using the WordPress admin site update functionality to update the core and the plugins.

It works for the plugins and for an image upload, WordPress can write to the webroot, but it doesn’t work for core …

Regards
Mike

Thank you Steve.

Much appreciated.

Regards
Mike