jeppeb
Forum Replies Created
-
Forum: Reviews
In reply to: [stats4wp] Crashes my siteGreat, thanks.
Forum: Plugins
In reply to: [ActivityPub] Blog is not found on MastodonI understand the risk, and I do agree that it is not the best solution. I am trying to convince the site-admin that their blocking of ?author=ID is not in any way meaningful (I have been reading a lot overnight to understand what it is, and your position is clearly the strongest). If I don’t succeed, I think this solution will be the only way out. Anyways, I think others in similar positions will profit from such a solution as well.
So, thank you for providing me with such an option.
Forum: Plugins
In reply to: [ActivityPub] Blog is not found on MastodonI am in contact with the admins of the site. It seems that Yoast is blocking ?author=0. The admin says:
Yoast blocks ?author=0 for security reasons – they block a so-called “Author Enumeration Attack,” which is a technique where attackers can systematically discover usernames on a WordPress site by using author endpoints. Yoast SEO Premium does not have a specific setting in the WordPress admin interface to disable author enumeration protection (blocking the ?author= parameter). Therefore, it must be done with code … The question is whether it’s even a good idea, as it poses a security risk. I don’t know ActivityPub, but it seems that the ActivityPub plugin already uses the /author/username endpoint instead of the ?author=0 parameter.
What is your comment to it being a security risk to allow ?author=0 ?
Do you know how to make Yoast allow access to ?author=0
Is it possible to create a setting that makes it possible to change the method in ActivityPub so it access a user-slug? I could try to look into it myself if it does not demand complete re-write. In that case, could you point to where to look and edit?
Thanks for all your help. I hope it might be usable for others as well (as I understand it, Yoast is used by many).
Forum: Plugins
In reply to: [ActivityPub] Blog is not found on MastodonThese are the plugins I have – I don’t think any of them are security plugins?:
ActivityPub
Carbon Fields
EWWW Image OptimizerAktiver (not active)
Gravity FormsIndstillinger
GTM4WP – A Google Tag Manager (GTM) plugin for WordPress
Peytz Nyhedsbrev
Peytz Picture
Peytzmail Gravity Forms Integration
Proxy Cache Purge
Redirection
Redis Object Cache
Safe SVG
custom – Blocks
SparkPost
Yoast SEO
Yoast SEO PremiumForum: Plugins
In reply to: [ActivityPub] Blog is not found on MastodonReturning to this after some time. Problem: domain.tlr/?author=0 returns error 403, access denied.
I have searched for similar problems – but it doesn’t seem to be normal to get 403 on author-id-page.
I have Yoast installed, but there, author-archives is not disabled.
I think I need to contact the people responsible for the website – but I would like to be able to tell them the probable cause so I can just ask them to solve it. Hope you can help me?
Can the 403 be setup in their .htaccess-file? Or where should they look?
Thank you once again! I am using activitypub on my personal website, and it is such a gamechanger to be in contact with the fediverse this way.
Forum: Plugins
In reply to: [ActivityPub] Blog is not found on MastodonI cannot access the author profiles using ?author=0 – is it possible to make ActivityPub use the slug-based URL (/author/username)?
Forum: Plugins
In reply to: [ActivityPub] Blog is not found on MastodonIt works at my end (the link includes the blog user name before the URL – but still it worked for me).
– can you please check again?
Hi @imtiazrayhan ,
I thought I could check out the code and see if I could do it myself, and I think I managed to do it correctly, so I have made a pull request for you. I hope you will accept it.
I will also try to add an option to give slides a visibility time range (I am using slides (changed from “slide anything” to your package yesterday) to show upcoming events in our local community, and I would like not to have to remember to take them down when the events are over).
Cheers,
Jeppe
That worked, thank you so much for your help!
Thanks! Unfortunately it didn’t make any difference… any ideas what to try then?
Forum: Plugins
In reply to: [Newsletters] Ajax error when subscribingIt seems like the problem is back. My colleague installed a new theme – maybe the error lies there. But anyway, I hope you will look into it.
I get this message in the console:
POSThttps://horneland.dk/wp-admin/admin-ajax.php?action=wpmlsubscribe&security=e87ed2febd[HTTP/2 403 Forbidden 334ms]
The theme we are using, is Neve: https://themeisle.com/themes/neve/
Forum: Plugins
In reply to: [Newsletters] Ajax error when subscribingClosing. It seems to be connected to the theme I am using.