Creative Themes
Forum Replies Created
-
Forum: Themes and Templates
In reply to: [Blocksy] Blocksy Content BlocksHi @hellpunch,
This forum is for our free user only, as you are a pro user, please submit a ticket here and we will assist you.Thanks for understanding.
Forum: Themes and Templates
In reply to: [Blocksy] Incompatibility with th Iubenda bannerHi @anguria65,
That’s awesome, thanks for letting us know 🙂Have a nice and productive week.
Forum: Plugins
In reply to: [Blocksy Companion] sticky-header issue (if the browser size is changed)!Hello @l3l3,
I’m not sure if you saw entirely my previous message.Will you be able to contact us via email? We wanted to discuss with you about an interesting idea 🙂
Forum: Themes and Templates
In reply to: [Blocksy] Incompatibility with th Iubenda bannerHello @anguria65,
Yes, the button issue was fixed a few updates ago.Let us know in case you will have any other questions.
Cheers!
Forum: Themes and Templates
In reply to: [Blocksy] [Bug] Fonts not loadingHi @hellpunch,
Really sorry about this. Unfortunately we were hit by a rate limit from Google APIs while requesting the full list of Google Fonts. The issue now is fully fixed and everything should be working again.
Please let us know if anything happens again and we’ll be in touch as soon as possible.
Very sorry about the incident.
Hello @mnlght975,
As I can see everything works fine on my end, please see this video – https://d.pr/v/OPNnfQMaybe you have another plugin that is conflicting with this functionality?
Could you please deactivate all your plugins one by one besides Blocksy Companion and see if the issue is still reproducing?Forum: Plugins
In reply to: [Blocksy Companion] Check Out Page from “Modern Shop” themeHello @mnlght975,
The checkout functionality comes from WooCommerce not from our theme.
It would be better to contact their support team.Let us know if you have any other questions related to Blocksy.
Have a nice weekend 😉
Forum: Plugins
In reply to: [Blocksy Companion] sticky-header issue (if the browser size is changed)!@l3l3 Thanks a lot for the heads up — we will have that fixed for the next update. And good catch with spotting the way our ctEvents & “ct:header:update” event works, that’s great!
Also, do you mind pinging us at hq@creativethemes.com? We have an interesting idea you might like and would love to discuss it with you.
@l3l3 Yes, I understand but Blocksy uses the endpoint from WordPress core for the login (wp-login.php) — you can check the endpoint of the AJAX call. And since the handler for this request is not under our control — we cannot add a nonce check inside it. Only adding a hidden input in the form is useless if there’s no actual check of it on the backend.
But, again, all the WP sites have this wp-login.php endpoint open by default without any nonce checks and there’s no real security threat with that. But, there are security tools out there using which you can strengthen the security of the default login form and as a result login form from our account modal will be secured too — we really follow WP’s conventions here.
—
On the other hand, we have two additional endpoints: one for the lostpassword and another for register action (if it’s enabled) that are completely under our control. For these two we’re gonna add a nonce check for the next deploy.
Hope this makes sense.
@l3l3 actually, after having a better look at the default WordPress login/lostpassword/register forms I can say that hidden input with a nonce is not needed here. Have you actually checked the built in forms and can confirm that those have a nonce for you?
In this actual case a nonce is not needed because the user is required to provide his credentials and these serve as the “nonce” into the system. And the absence of a hidden input with a literal nonce in it is totally fine.
But, again, if you really know of any exploits of our current account modal, please contact us not through an open forum (our support form is fine) so that we can act on it ASAP.
Waiting for your reply.
@l3l3 Thanks a lot for your heads up — we’re gonna fix this right away and push an update to both Blocksy Companion (here on wp.org) and Blocksy Companion Pro.
Going forward, please use a different contact method for reporting security problems so that we can fix them efficiently. Please also be sure that we take those very seriously and act upon every bit of feedback that we receive, especially when it concerns the security of our users.
The update will be out today with the fix.
Best regards!
Forum: Themes and Templates
In reply to: [Blocksy] Column reverseHi @kervis,
About what columns are you referring? Footer columns?
Also please share your website url so we could inspect your code and provide a CSS snippet for this.Forum: Themes and Templates
In reply to: [Blocksy] [Hook] Modal hookHi @hellpunch,
Here are the answer to your questions:
1. Account modal supports the
register_formaction and you can indeed add additional fields using it. Please post here the code that you use to add the additional fields and we’ll try to understand why exactly it doesn’t show up for you.
2. If you want to change the redirect URL after the login from the account modal, please use the “blocksy:account:modal:login:redirect_to”. It defaults to the current URL from which the account was opened. For more details please look into theframework/features/header/modal/login.phpfile from Blocksy Companion plugin.
3. Fire modal with a condition. You have two options here:
a. Refer to this example on how to craft a custom link that opens the modal: https://creativethemes.com/blocksy/docs/header-builder/header-builder-elements/#account-header-element
b. Add this code in your child theme. With this code in place, open this URL: yoursite.com#account-modal (append #account-modal at the end of the URL) and the account modal will auto-open on page load.Hope this helps and please let us know if we missed any points here.
- This reply was modified 4 years, 5 months ago by Creative Themes.
Forum: Reviews
In reply to: [Blocksy Companion] Blocksy – simply the bestThank you very much for your kind words 🤗
Forum: Themes and Templates
In reply to: [Blocksy] How to add a link to my Logo in the header.Hi @thomasaj,
Yes, by default the logo is using the site url, that’s how things work.If you want to add a custom url, you can use this filter.
Hope this helps 🙂