deltafactory
Forum Replies Created
-
Regarding retries, what is the motivation for hooking the Turnstile validation process to
wpforms_process_beforeinstead ofwpforms_process?The problem still occurs. The testing procedure creates at least 10 form validation errors prior to a successful submission that should verify Turnstile. Could the number of retries or time to completion be a factor?
Edit: Possibly related FAQs about verification calls. https://developers.cloudflare.com/turnstile/frequently-asked-questions/#can-a-turnstile-token-be-used-twice
- This reply was modified 3 years, 7 months ago by deltafactory.
Forum: Plugins
In reply to: [Redirection] Regex Redirect on urls with and without end slashI’m rusty on my regex but I think the .* might be grabbing more than you expect. Instead of .* you may want [^/]+ which grabs at least one character that’s *not* a slash.
Take a look at regexr.com – it’s a wonderful tool to mock up patterns and see how the matching engines work. Something like this seemed closer to what I think you want. (You’ll need to add \ before the slashes when using this tool and remove them before entering into Redirection.)
/course-schedule/([^/]+)/([^/]+)/?
Forum: Plugins
In reply to: [Redirection] Import of .htaccess rules removes $ from match pattern?@johnny5 was hoping you could weigh in on this. Thanks in advance.
Hi Peter – thanks for the detailed response. I think I buried my original question so let me try again with examples:
Does WordFence account for whether the upload would have actually been successfully stored on the site before logging the block?
Example 1: A bot blindly sending HTTP POSTs with a file upload payload targets /index.php. On the target site in question no vulnerable plugin is installed and so the payload is discarded (harmlessly?).
Example 2: A valid authentication cookie is stolen and used to upload to the media library. The upload fails due to a WP nonce verification check.
Example 3: A site with an authentication validation error is targeted with a malicious script. An upload is attempted but WordFence detects the pattern and blocks it.
In situations 1 and 2 the target WordPress installations would be unaffected even without the presence of WordFence because existing checks prevented delivery of the payload. Would WordFence have caught and logged these attempts as detailed above?
Situation 3 is exactly why we use WordFence and would have done its job.
What I am trying to clarify is whether *any* attempt is caught, or only the ones that “almost succeeded” to some extent. This would help me assess whether “some bot is trying…” or “some bot would have succeeded if not for WordFence…”
I was unable to test before you moved the file to the trash. Also, we are using the premium version and wouldn’t want to downgrade.
We’ll wait for the next release of the plugin. Thanks for fixing it so quickly!
Forum: Plugins
In reply to: [Clone Posts] Fatal Error on ActivationI just came here to report this bug as well. To provide additional info, a trailing comma in the function call arguments became a legitimate syntax in PHP 7.3 but caused a fatal error in earlier versions.
Forum: Plugins
In reply to: [Simple Custom Post Order] JQuery deprecation@janisi It’s because the readme file’s
Stable Tag:still says 2.5.0 instead of 2.5.1
/cc @visi19- This reply was modified 5 years, 10 months ago by deltafactory.
Forum: Plugins
In reply to: [Download Monitor] PHP errorAdding these lines to your wp-config.php *might* work – untested, use at your own risk:
ini_set('display_errors','Off');This assumes that no other plugins are re-enabling logging.
There are other ways to do it through a php.ini file but that varies across hosts. The line above will have the same result and should be easy for you to disable by FTP if something goes wrong.
Forum: Plugins
In reply to: [Download Monitor] PHP errorIf you have error logging disabled (a good idea on a production site) then the Notice won’t show, nor will it change site behavior.
Forum: Plugins
In reply to: [Download Monitor] PHP errorNot knowing all of the possible values from
get_theme_support()line 236 may be incorrect:if ( is_array( $current_support[0] ) ) {might need to become:
if ( is_array( $current_support ) ) {Forum: Plugins
In reply to: [Download Monitor] PHP errorIs there a timeline for this to be fixed? DreamPress is rolling out automatic (forced?) upgrades to PHP 7.4 starting next week so this will start to become an issue as hosts deprecate earlier versions.
Forum: Plugins
In reply to: [CDN Enabler] css errorI’m guessing that your CORS headers are not setup correctly for the CSS asset in question. Some JS on the page is trying to access it but failing the CORS check.
If the problem is still happening, a real URL would allow someone to help troubleshoot.
Thanks again for fixing this.
Forum: Plugins
In reply to: [Print, PDF & Email by PrintFriendly] Error – contextual helpThe update fixed the problem – thanks!