Forum Replies Created

Viewing 15 replies - 316 through 330 (of 777 total)
  • dtynan

    (@dtynan)

    It looks like none of the plugin files are accessible (or, at least aren’t accessible for people coming over the internet).

    For example, this URL returns a 404 and it shouldn’t:
    http://urbanequityrealestate.com.au/wp-content/plugins/email-before-download/readme.txt

    Same for this:
    http://urbanequityrealestate.com.au/wp-content/plugins/email-before-download/checkcurl.php

    And, of course, this is needed to get the download link to work:
    http://urbanequityrealestate.com.au/wp-content/plugins/email-before-download/download.php

    Most likely you have some sort of security plugin or perhaps webserver configuration that is preventing external access to the plugin files.

    dtynan

    (@dtynan)

    I don’t know off the top of my head, but I would guess that the ebd and the ebd_left code are in two different sections of code. Since I was using ebd_left on the website where I wrote those modifications, I probably only modified the section of code associated with ebd_left and the other section of code was unmodified. Again, just a guess…

    dtynan

    (@dtynan)

    The field names for the name & email on your form need to be changed. Make the name field be “your-name” and the email field be “your-email”. So you need to edit the CF7 form you made and go to the part where the form is laid out and change your shortcodes for name and email.

    See the screenshots page for an example
    https://wordpress.org/plugins/email-before-download/screenshots/

    (Obviously you don’t need the akismet part in that example if you’re not using that, so you can remove that little bit if you want)

    dtynan

    (@dtynan)

    Thanks for going back through the support tickets and finding this item where I explained what to do.

    If you followed the above instructions then it should work as far as I know. I can’t think of anything that has changed that would break it and as far as I can recall I haven’t modified that code on that site (and it still works today).

    I’m not sure how you could have titles working but not short description unless you made a mistake somewhere along the way. Hmm. Are you sure you have something in the “Short Description” field for the files? The “Short Description” field is near the bottom (2nd to the bottom) when you edit a download in Download Monitor. There is the Title at the top, then the big box after that is the regular description field (which I’m not using), then scroll down some and you’ll see a section called “Short Description”. That is where I’m putting my text for the description. Maybe you put yours in the wrong field?

    If it’s not that then I can only guess that you made an error somewhere along the way? Maybe start at the top of this thread and go down it again and double-check that you really got everything in there correctly? If you can’t figure out then email your modified copy of email-before-download.php to dtynan88@gmail.com and I can compare it to mine to see if you missed something I guess. Make sure you update this ticket if you need to do that as I don’t usually check that email address.

    dtynan

    (@dtynan)

    It looks like php programs in your plugins directory are protected.

    For example, this gives a 403 error:
    http://mspseofactory.com/wp-content/plugins/email-before-download/checkcurl.php

    But this does not:
    http://mspseofactory.com/wp-content/plugins/email-before-download/readme.txt

    Because the link EBD uses goes to download.php in the plugin directory, obviously that has to be executable by people coming over the net. Most likely you have .htaccess file in your main wordpress directory or in wp-content or in the plugins directory that is blocking execution of php scripts by IP addresses other than 127.0.0.1. Or, it could be in your webserver config files. Assuming you are using Apache, then you will probably see a stanza with the Files directive in it and a .php extension and a deny along with it. Or, it could be a product of a security plugin.

    Note that the fact that your EBD form works means that php programs in your plugins directory will run — but only when they are run by wordpress doing something, not when they are directly accessed by someone coming over the net. That is why I suggested that it allows localhost (127.0.0.1).

    dtynan

    (@dtynan)

    Ok, I’ll check it out.

    The M&S Consulting folks do read these support items sometimes. I’m not sure if they read all of them or just some. I once emailed them about an issue, but they never responded. However, you could try that. Or you could make a new support item and put “ATTN: M&S CONSULTING” as the subject (or something like that) and explain what you want and maybe point to this item or something. On the main page for the plugin (the Description tab on this site) they’ve got a link to their website and info about $10 support an so forth so maybe take a look at that & their site & figure out what you think is the best way to get their attention….

    Meanwhile, I’ll try that mail-tester site and see what it thinks about mine (which does have valid SPF and DKIM). By the way, the trick on setting those up is to try and find a support article on your hosting provider’s website …. the way you enter the line of text for SPF and so forth is not exactly the same across providers, so if you’re using like some blog post some dude wrote then the syntax or steps may not be quite right for your provider.

    dtynan

    (@dtynan)

    I personally have never seen that happen, but I’m aware that OS X sometimes does that to zip files for various reasons.

    You should put the zip file out there as a regular link on your website and have someone who is having the problem download it and try to open it. They should open it in the same way as they did previously (which i assume was double-clicking on it in Finder or whatever). That way you can try and determine if Download Monitor and/or EBD has anything to do with it.

    My guess is that the zip file is getting created with compression that the default OS X Archive program doesn’t understand (particularly since you are using 3rd party apps to make the zip rather than making it using Archive or using the zip command from the shell [the terminal]).

    If you want to post a url to your EBD page in here I’ll be happy to take a look at it.

    dtynan

    (@dtynan)

    You must add the file using Download Monitor. You can either upload it within Download Monitor or you can add an existing file, but either way you have to “add” it in Download Monitor so you can get an ID for it. I assume in both of your tests you did actually add it and get an ID for your shortcode.

    Normally, when you add a file to Download Monitor it will put it in wp-content/uploads/dlm_uploads/someotherstuff… Sometimes that dlm_uploads folder is protected by the webserver. That may be the cause of the 403. That is permissions on the directory if I recall correctly. So, you can change those to fix it, usually. Or you can move the file somewhere else and fix the path in Download Monitor (when you are looking at the detail page of your download in Download Monitor, you will note that over on the right side there is a little note by a checkbox that says something about the dlm_uploads folder being protected and the fact that you may need to move your download somewhere else).

    You might not need to do anything other than to check (or uncheck if it’s already checked) the hide/mask url option in the EBD settings. That changes the way EBD accesses the download and may get around the 403 problem without you having to change any permissions or move any files.

    dtynan

    (@dtynan)

    It sounds like maybe you haven’t read through the descriptions of how this works. You don’t put any files or file urls or ids in the CF7 form (see screenshot page). Make sure you carefully read through the info on these pages & look closely at the screenshots:

    https://wordpress.org/plugins/email-before-download/faq/
    https://wordpress.org/plugins/email-before-download/
    https://wordpress.org/plugins/email-before-download/screenshots/

    dtynan

    (@dtynan)

    I don’t really understand what you mean.

    It can do 1 form with multiple downloads where each download has a checkbox next to it .. the user checks the ones he wants, fills in form, hits submit, then links are presented to each download (or an email is sent with the links or with attachments). That’s how it handles multiple downloads .. if that’s what you’re asking

    dtynan

    (@dtynan)

    Wow, 2.999? That’s crazy. I can’t believe it’s that high for that. I see someone opened a bug on it last year, but they only referenced one plugin that was being affected ( http://spamassassin.1065346.n5.nabble.com/Bug-7210-New-URI-WP-HACKED-2-PS-TEST-LOC-WP-matches-legitimate-CiviCRM-emails-td116699.html ). In reality, it affects a good number of plugins I’m sure ( one example – http://www.thenewsletterplugin.com/forums/topic/spamassassin-gets-crazy-uri-for-compromised-wordpress-site-possible-malware ).

    Hmmm. Well, maybe you have a good point. I can see where it would be pretty easy to get near 5 or beyond if that one is basically 3 points. Maybe M&S Consulting will need to update the plugin to try and help with this somehow….

    Which website are you using to test your spamassassin score? (I want to try my email and see how it looks and I want to use the same one you’re using, if possible)

    So, let’s see…. to make it get rid of the URI_WP_HACKED, the outgoing email will have to use a different URL that spamassassin doesn’t care about. Looks like that will require php changes to email-before-download.php. Currently, it makes the URL by concatenating the WP_PLUGIN_URL constant with /email-before-download/download.php. That would have to be changed. I guess you could hack in a variable a top of the program to give the URL fragment and then replace WP_PLUGIN_URL with that variable. WP_PLUGIN_URL occurs several times — you’d really only need to change the ones that have that download.php addition on the end and ignore the others (like the checkcurl.php and export.php and so forth). That would give you a hacked-in fix for the outgoing email. Then, as you said, you’d need a mod_rewrite statement in your htaccess or webserver config to make the browser go over to the correct wp-content path. That gives you a hacked in fix for now. M&S Consulting would probably want to add a setting in the Settings page to let the user specify what the new url fragment was and, of course, some explanation of what needs to happen. Kinda ugly.

    The bottom answer after the “UPDATE:” line of http://wordpress.stackexchange.com/questions/210244/send-an-email-that-contains-a-html-and-plain-text-part gives an example of using wp_mail to send a multipart mime (text and html) email (though that example would need to be modified slightly to include $attachments and tested to make sure it works [since attachments are multipart mime also]). So, it looks doable, but would require some code changes. Just above the “UPDATE:” line is an example of trying to hook into phpmailer_init and setting AltBody (which would make it send multipart mime with the text version being in AltBody). However, in that example it looks like it’s going to do it for every email sent by wp_mail(), so probably not a good solution (at least not without extra code to try and limit to modifying the outgoing email only when sent by EBD).

    So, all in all, a good bit of work for both of them it looks like. You could code try paying the $10 to M&S Consulting and suggest this stuff to them — they might do it since it looks like those 2 items push emails near the spam threshold. The URI_WP_HACKED looks fairly new, so it’s possible folks out there are having some of their outgoing emails ending up as spam and no one has noticed yet and reported it.

    Let me know which spamassassin testing site you’re using…

    dtynan

    (@dtynan)

    As long as you set the From: to something valid then you shouldn’t have any trouble with the email not landing in the Inbox.

    Most people use Postman SMTP to make sure the From: of the email gets set to what they want. You can also use the Custom Sender for Email Before Download plugin which will get you a couple of fields to set the From: (watchout that it may get wiped out if/when you resave the settings for EBD [you might have to put it back in there, if so]).

    As long as the From: is good and you use the default template, then it will always land in the Inbox. If you use your own template (ie you put something in 9.1 or 9.2 in the EBD settings) then who knows…

    All that said, I’ll go ahead and comment on the SpamAssassin items you listed:
    1. The whole point of EBD is to make it run the EBD php program in order to get a download file, rather than directly downloading the file itself. Since your plugin is in wp-content that’s where it runs it from. I would imagine with a lot of work you could probably make it run from somewhere else, but that seems like total overkill just to get rid of one negative spamassassin marker (considering it tests like 3000 things).

    2. I doubt the authors of the plugin (M&S Consulting) would add that, since it’s not really needed, but you never know… The point of the email to the user is either to give them a clickable link to the download or to attach the download file (or both). Thus, not much reason to give a text version except to try and get rid of that one spamassassin msg.

    3. You can put the html code in there yourself, as you suggested. Should work.

    4. I think that warning is because the To: of the email is probably just an email address (which is taken from the form on your webpage that the website visitor filled in). Spamassassin gives that warning because you didn’t do the extra stuff that you can do in the To: field where you put the guy’s name in quotes and the email address in angle brackets. Again, not really important…

    dtynan

    (@dtynan)

    Check redirect to file

    dtynan

    (@dtynan)

    No. They would be in support items on this forum. But, many would be old and the URL provided by the person may not work anymore (especially if it was a test page). But, if you wanted to you could troll back through items on here clicking on the URLs people provide and try to find one that has a popup that works. Probably take quite a while..

    dtynan

    (@dtynan)

    I have seen several different people make the form appear in a popup window. I don’t know which of the various popup window plugins they used to accomplish this, but I would imagine you can just try a couple until you find one that works well.

Viewing 15 replies - 316 through 330 (of 777 total)