Forum Replies Created

Viewing 15 replies - 136 through 150 (of 689 total)
  • Thread Starter manstraw

    (@manstraw)

    well, I have one of those ‘not sure why it’s now working’ situations. this morning, I went to my code, and cleaned it up. I basically cleared out the junk, and properly formatted it with proper indents and such so I can make sense of it. I had a lot of test items commented out and such, so I removed those, otherwise, I didn’t think I changed the code. However, it now works. It seems fine to have the get_permalink inside the add_filter hook function.

    I can only assume I had a typo before that I missed or something. I don’t have the old version anymore to check against. I appreciate the help Otto, and for the benefit of others, I’ll post the ‘proof of concept’ code here (it’s short).

    function cptc_registration_form($content)
    {

    if(isset($_POST['submitted'])) {
    $form = "I think something was submitted";
    }
    else
    {
    $permalink = get_permalink();

    $form = '
    <form name="example" action="' . get_permalink() . '" method="post">
    Text: <input type="text" name="text" />
    <input type="hidden" name="submitted" />
    <input type="submit" value="Go!" />
    <form>
    ';
    }

    return str_replace('<!--cptc registration form-->', $form, $content);

    }

    add_filter('the_content', 'cptc_registration_form');

    Forum: Fixing WordPress
    In reply to: Is my blog secure?

    So everyone shares the same password? And I guess you can easily change it in the future, requiring people to find out the new password from you, right?

    How confidential is this information? What would happen is someone read it that you didn’t authorize?

    Thread Starter manstraw

    (@manstraw)

    Thanks for that fairly detailed response Otto. I’m not really familiar enough with the order things load. I expect you would say something like this though. I’ve poked through another plugin that does something similar, and saw them do more or less what I’m doing. But as the plugin is considerably more complicated, I’ve obviously missed something key they’ve also done.

    I’ve tried the call inside a function that add_filter calls. I still get an undefined function error. I’ll read through what you said tomorrow and give this another go then.

    Thanks again.

    Forum: Fixing WordPress
    In reply to: Is my blog secure?

    I should state that it’s my impression that he’s using a separate password system. But I don’t *know* that. So, like, what Brian just said there is well put.

    it’s recommend you obscure your email address. the spambots just looove reading this site. (mods, that’s why I set modlook) -[got them manstraw 😉 – spencerp]

    well, good thing you had a fresh backup. changing the charset shouldn’t do that. I’m curious to know what happened there, but it’s understandable you don’t want to try and reproduce it! ) anyway, glad you’re sorted.

    It would be really good if you can figure out what they’ve done. Do you have your apache logs? It should reveal some details.

    Also, it might not have been wordpress that they got in through. It could have been an insecure plugin, or some other add on, or perhaps it was some other way entirely. I’d really like to know. If I was you, I would not consider my site secure at all until I determined what happened, and was sure there are no ‘droppings’ left behind by your hacker friend.

    yeah, it would be a bit of work to configure that up just so, but then you’d have the ability to do that easily for additional categories in the future. I might do this on a wordpress site I’m just starting. If I do, I’ll come back here and post the code. it would also need the right css to finish it up.

    Forum: Fixing WordPress
    In reply to: Is my blog secure?

    you responded while I typed the above post, so I guess you answered a lot of what i was asking.

    If you’ve educated people on RSS, have you provided them with a proper RSS reader? One that handles http authenication would be good in this case. You can keep your rss in my opinion.

    Are you concerned about corporate spy types?

    Or are you just worried about stopping the casual viewer stumbling into the page?

    There are gizmo’s that can be pointed in the direction of a crt computer monitor a hundred yards away, and it will display everything on that screen. If it really needs to be kept safe, use a pencil. You can spend a long time securing your data and never fully protect it.

    Forum: Fixing WordPress
    In reply to: Is my blog secure?

    although I agree with everything brian just said, we’re talking about read access to a web page, and not access to any other part of a server. unless the pages contain corporate secrets, or otherwise confidential information, I don’t consider your situation as ‘risky’, and would be very comfortable with my suggestion regarding reading rss (assuming you even want that). and of course, you would be the best judge of that want and it the risk level. if you’re in control of the passwords (which you are), people can’t be tempted to use their regular password. that’s about the only real risk otherwise, that someone would sniff a password that is also used to access a more sensitive area of the server.

    so what is your situation? how sensitive is this info? do you need to worry about people eavesdropping your people connected via wifi? do you need to encrypt the page? should you firewall the site so that only intranet people can access it?

    as much as security is ‘the new black’, I find a lot of people overreact to this concern. I guess I’m suggesting you rate your security concern level, and act accordingly. more gold means more locks sorta thing.

    you’ve got more than one duplicated field. you might have duplicated tables or fields within tables inside your database. I would use phpmyadmin to have a look at the tables see what’s there. compare it to a virgin installation. if it’s borked, I would make backups, see if I can repair the database (dropping redundant tables etc.) and then do a complete reinstall. this could be messy. I think it needs someone with much more knowledge of wordpress than I have to properly advise.

    Forum: Fixing WordPress
    In reply to: spam

    I recommend you install one of the spam fighting plugins. You could start here http://codex.wordpress.org/User:Matt/2.0_Plugin_Compatibility

    Something you could do is make parent child relationships. Make Rubrieken and Musiek the main categories, and then make all of your other categories children of Rubrieken.

    I suggest you start reading here http://codex.wordpress.org/Template_Tags/the_category and come back if you have specific questions.

    If you don’t want to do it that way, I think your manual hyperlink is just fine, considering your particular needs. Unless you can use the wordpress admin interface to make changes, the underly code doesn’t matter so much in my opinion.

    Forum: Fixing WordPress
    In reply to: Is my blog secure?

    people wanting to read your rss will need to add a user/pass. if their rss program doesn’t otherwise have an option for that, they can add the user pass in the uri. as in h ttp://user:pass@intranet.site.com

    a lot of themes do something like that, including the wordpress classic theme that comes with the default wordpress installation. may I suggest you look at that theme’s file to see how it’s done?

Viewing 15 replies - 136 through 150 (of 689 total)