fullworks
Forum Replies Created
-
Forum: Reviews
In reply to: [Display Eventbrite Events] Great pluginThanks for your feedback
Thanks – my change worked 🙂 in your revised 1.5.7 file – I know it only appears when debug is on or the error logs – but thanks for making that tweak.
Forum: Plugins
In reply to: [Display Eventbrite Events] Cannot change no of eventsHi,
I haven’t heard back from you so not sure if you resolved this, but I will assume so for the time being.
Alan
Forum: Plugins
In reply to: [Stop User Enumeration] Disable /?author= for logged in usersHi Ray,
yes that is by design at the moment, as in logged in user are not restricted. The original intent of the program was to restrict hackers ( and the assumption if a hacker is logged in then you have bigger problems ).
Blanket restriction of author access does break some features in admin ( like sorting posts by author ) however I understand your request is related to making a site GDPR compliant and that having logged in users, especially non admin being able to enumerate users is not desirable.
I will consider this and see if I can have a solution in a near future release.
Alan
Forum: Plugins
In reply to: [Get Directions Map] directions wont showHi so sorry I missed this … can you paste the exact shortcode so I can check it please?
Forum: Plugins
In reply to: [Stop User Enumeration] GDPR compliance Questions (Stop User Enumeration)I’ll close this now. Thanks.
Forum: Plugins
In reply to: [Stop User Enumeration] GDPR compliance Questions (Stop User Enumeration)“The reason is the EU GDPR and whether the plugin is compliant with it.”
I would add, that the plugin does not have to comply, it is the data controller ( yourself ) that needs to comply – I’m sure that is just a language thing, but thought it is worth clarifying.
Forum: Plugins
In reply to: [Stop User Enumeration] GDPR compliance Questions (Stop User Enumeration)“Does the plugin store any personal data in the wordpress data or others?”
The plugin sends IP addresses to the system log if the option is selected. IP address is deemed personal data, although it is not attached to any personal identifiers. I would suggest for you as data controller the lawful basis for processing is legitimate interest – security of your system.
If the WP administrator elects to on activation, the plugin sends plugin usage information only, including the administrators email to Freemius.com. I would suggest for you, as data controller, your lawful basis is ‘consent’ as the administrator needs to consent. No other personal data of other users is sent.
“Does the plugin send any data to third party servers?”
See above
“Does the plugin use cookies?”
No
“Does the plugin use google webfonts?”
No
Forum: Plugins
In reply to: [Display Eventbrite Events] Cannot change no of eventsIf the events are all in the same account it should work. This is not an issue that I have ever encountered and it seems to work fine on many many sites including my test & demo sites. First thing if I were you is to look at your server logs to see if there are any errors, also double check things like your events are actually public & published not invite only etc.
Sorry, but my hands on support is limited for the free version, so that is about all I can suggest. Let me know if you find something.
Forum: Plugins
In reply to: [Display Eventbrite Events] Cannot change no of eventsHi, when were the events added? I ask as the Eventbrite API plugin that this plugin relies on caches events for 1 day by default, and so it could be you will need to wait until the cache refreshes.
Forum: Plugins
In reply to: [Stop User Enumeration] Someone Got a Username After I Activated This PluginNo matter what the number it will work – if it works with 1 it is ok for all others.
Yes indeed, the plugin only stops enumeration attempts, however if your theme or other plugins expose usernames publicly, that is something that this plugin is not designed to stop and in your case probably where the potential hackers are finding your admin user name.
Best regards, Alan
Forum: Plugins
In reply to: [Stop User Enumeration] Someone Got a Username After I Activated This PluginNo problem email received, obviously I don’t normally give free support for free plugins via my professional site that is why the box is there.
Forum: Plugins
In reply to: [Stop User Enumeration] Someone Got a Username After I Activated This Plugin1. no you have typed something incorrect
the message starts ‘forbidden – number in author name not allowed = 1’
e.g.
https://(replace this with your domain name)/?author=12. yes use the contact form on https://fullworks.net
Forum: Plugins
In reply to: [Stop User Enumeration] Someone Got a Username After I Activated This Plugin1. Did I set up this plugin incorrectly? (How can I tell?) I left everything at the default settings as suggested…
When NOT logged in – go to http(s)://<yourdomian.com>/?author=1
If you got a forbidden page then the plugin is working.
2. Do I need to use the Fullworks Firewall Plugin on this website? (If so, please link to instructions to set that up.…
No you don’t need to use the firewall – but if you do the setup is automatic.
If you share your URL I can check if there is anything obvious. Please note that this plugin stops user enumeration – but that doesn’t mean you have not exposed your user name in other ways – but I can advise on that if I had your URL.
Forum: Plugins
In reply to: [Stop User Enumeration] Must I Use Fullworks Firewall?That is correct.