Forum Replies Created

Viewing 15 replies - 136 through 150 (of 1,269 total)
  • Plugin Author mvied

    (@mvied)

    I’m considering adding checks for popular E-commerce plugins to avoid conflicts. At the very least I would like to add a warning to the Dashboard to alert the user of the conflict.

    Plugin Author mvied

    (@mvied)

    The plugin is looking for wp-pass.php. I’ll get a fix out in the next version. Thanks.

    Plugin Author mvied

    (@mvied)

    Check your web server’s error logs. You’re hitting some kind of PHP error, but output buffering is preventing it from displaying. It’s likely that PHP’s memory limit is too low, but check the logs to confirm.

    Plugin Author mvied

    (@mvied)

    The proxy setting is for bad proxies that don’t properly set the X-Forwarded headers. That is all. You would know if this was the case because nothing would work properly without that setting on Yes.

    I don’t know what you’re talking about with “cleaning up” but you’re probably experiencing redirect caching issues in Google Chrome, not your server.

    You’ve already identified the code that determines if the site a subdomain or not. The subdomain check is done upon installation/activation and when the settings are saved. The code simply isn’t working in your setup for one reason or another.

    After researching this issue, I came to the conclusion that the best way to handle these situations is to manually set the cookie domain in the wp-config.php. Change it to ‘.yourdomain.com’ to get a site-wide cookie set.

    I am currently working on improving this part of the code and will eventually remove the need for cURL requests to validate the cookie domain.

    Plugin Author mvied

    (@mvied)

    This is really outside the scope of this plugin.

    You should know that email is never secure, by nature. You have no idea who will read that email or if the email you’re sending the data to is the correct email. Therefore, it is absolutely recommended that you do not send credit card details in an email or save them on your web server. Both are extremely unsafe and you can be held directly liable for any damages incurred to the card holder. Any server that stores credit card information must be PCI compliant and follow strict rules and regulations. It will be impossible for you to achieve that, I promise. That is why all websites use a payment gateway to accept payments. Nobody stores credit card information. I recommend that you research this subject more before you get yourself in trouble.

    Plugin Author mvied

    (@mvied)

    You didn’t actually say what’s happening, just that it’s ‘not compatible.’ That doesn’t help me. I’m assuming you’re getting redirect loops because WordPress HTTPS has Force SSL Exclusively enabled and Jigoshop’s settings are forcing everything to be secure. This causes WordPress HTTPS to always redirect to HTTP and Jigoshop to always redirect to HTTPS. Disable Force SSL Exclusively or add ‘/’ as a URL Filter to secure all of your pages.

    Plugin Author mvied

    (@mvied)

    Yes, that’s fine. It’s no different than using a Shared SSL which typically contain a folder path in addition to a different host/domain.

    Plugin Author mvied

    (@mvied)

    The whole point of the caching plugin is so that you don’t have to load WordPress every time a page is hit if there have been no changes to that page. Therefore, the plugin does not even run when a page is being pulled from the cache.

    You’re going to have to use rules in your .htaccess to force pages to HTTPS.

    Plugin Author mvied

    (@mvied)

    The problem isn’t determining if domain A is a subdomain of domain B. The problem is determining what the common domain is between the two domains so that you can then use that common domain as the domain for the cookie. The only reason the subdomain check is done is so the plugin knows to create the extra cookies when logging in. If the plugin can not determine the base domain, it doesn’t work anyway. Using simple string comparisons, you can never say for sure what the base domain is.

    Plugin Author mvied

    (@mvied)

    Determining if two domains truly share a common domain by only using string comparisons is not possible. When comparing two domains, it’s likely that pieces of the domains will match. It’s impossible to determine if that commonality is really a shared domain without knowing all possible top-level and second-level domains. That would require maintaining arrays of top-level and corresponding second-level domains in the code to check against. Due to the rapid change of domain name rules, it would be quite tedious to do that. For example, .uk has many, varying second-level domains.

    Plugin Author mvied

    (@mvied)

    I created the ‘force_ssl’ filter so that a developer can override any functionality of the plugin in regards to forcing pages to/from HTTPS.

    function http_feed_force_ssl( $force_ssl, $post_id = 0, $url = '' ) {
        if ( strpos($url, '/feed/') !== false ) {
            $force_ssl = false;
        }
        return $force_ssl;
    }
    
    add_filter('force_ssl', 'http_feed_force_ssl', 10, 3);
    Plugin Author mvied

    (@mvied)

    You can use the feed_link filter built in to WordPress. You can place this in your theme’s functions.php or in a custom plugin if you want the ability to turn it on and off.

    function http_feed( $url ) {
        return str_replace('https://', 'http://', $url);
    }
    
    add_filter('feed_link', 'http_feed', 10);
    Plugin Author mvied

    (@mvied)

    I’m sorry, but I believe the descriptions of the settings on the screen to be sufficient. If you would ask specific questions, I could clarify. Through your questions I could better understand what is unclear about what I have in place and maybe change it to make it clearer? In the latest update I did add a little meat to the Installation guide to cover some basic use cases and common issues.

    Plugin Author mvied

    (@mvied)

    If you’re using a subdomain, you should be logged into both using a domain-wide cookie. Enable debug mode and check your browsers console for the debug output. Look for a line that says “Subdomain: Yes/No”. If it says no, try re-saving the WordPress HTTPS settings and see if it changes. If it says Yes, there’s a bug of some kind.

    Plugin Author mvied

    (@mvied)

    What works when it’s disabled? Force SSL Exclusively, saving the settings or both?

Viewing 15 replies - 136 through 150 (of 1,269 total)