pineapplepalm
Forum Replies Created
-
Forum: Plugins
In reply to: [Post Views Counter] Unclear – frontend or backend onlystill no response – either to my support email submitted on your site or to this thread. Please respond or advise if this plugin is abandoned since support is so scarce.
Hi @amagsumov
Is this setting worth doing for ALL/most of the cleantalk plugin users (not just the OP?) [i have the paid plan too but am interested since we have the free plugin as well]
Thanks in advanced. (I don’t have the same issue as the OP but I sure would like to avoid having the issue if this is how we should make sure settings are)
Thanks
- This reply was modified 1 year ago by pineapplepalm.
No dog in this race but…. something like this happened to me a few months back. It is very likely to be a conflicting plugin. One that is not well made. In my case it was a MyCred plugin that kept forcing other plugins to deactivate and/or act oddly. It was wierd! I uninstalled it becasue it was fishy, and a week later there was a report of the CVE vulnerability in it.
I also recommend you search each plugin and the word “cve vulnerability” on google or ask GPT to tell you about vulnerabilities on your pasted lists of plugins. You might learn more there as something might be so poorly coded it strips WP code. OR is otherwise trying to prevent your code working (assuming you haven’t created code that would intefer with WPC and entered it into WPC)…
If you have some complex code in WPC you could try making the last one you added before the problem INACTIVE and see if you stabilize.
Finally, unless you have a ton of custom code or troubled your functions.php file, i would recommend turning each plugin off one by one, clearing the cache and hard reloading between to see the culprit.
I won’t see the reply (as again no puppy in this race just sharing some ideas that I hope help)
good luck my fellow site publisher
nod to Plugin dev I really love WP Code
Hi i dont have a dog in this race but something similar happened to us. What might help is ask your host to ensure your PHP version is in your htaccess at the bottom. the very last thing. then save there and refresh PHP FML if it drops there its a host issue not wordfence issue. Once you are sure it saved and your php has been restarted, and it remains in your htaccess. run a WF scan and then check your htaccess again after. Good luck. (I wont see replies as mentioned i dont have a dog in this just spotted your question before I write my own)
Forum: Plugins
In reply to: [Post Views Counter] Unclear – frontend or backend onlyPlease this is not resolved.
Forum: Plugins
In reply to: [Post Views Counter] Unclear – frontend or backend onlyI’ve tried to integrate this but one thing that is not clear is if it tracks BUDDYPRESS activity posts. Basically the pcomments and activity feed od buddypress posts in the social media (not blog) sense. These are not the same as wordpress blog posts.
So if it can cover activity posts it would be great. I need clarification on this asap please- This reply was modified 1 year ago by pineapplepalm.
Forum: Plugins
In reply to: [Post Views Counter] Unclear – frontend or backend onlyIt’s been a week, is any plugin dev planning to reply??
following with interest
Forum: Plugins
In reply to: [WP Job Manager] User Registrations Getting AttackedHi Rene @reneyoung
For people to get an account, you still need to let your site be open to allow anyone to register.
This is all a lot of theater when you should be working to prevent bots getting to your site in the first place, then misleading them (with WP Armor & Cleantalk) from filling in your forms. Please see my earlier message and put those things in place. Otherwise you will constantly have problems with bots hammering ANY FORM on your site.The issue is not the Form, it’s that bots are reaching your site in the first place.
Good luck. I’ll tap out from here.
Forum: Plugins
In reply to: [WP Job Manager] User Registrations Getting AttackedHello @reneyoung , i dont have a dog in this fight. But having read this I thought I’d give some feedback.
I don’t think this is a issue with this plugin as it is about other ways you’re being targeted.
- If you have Wordfence (My Preference) or Jetpack Protect or some other security plugin it might show where your vulnerability might be coming in. They will also have brute force login protections that you need.
- One of your other plugins might have a cross-script vulnerability which is allowing users to be created in a bid to make your site something they can hack. Make sure all of your plugins are up to date even if it doesn’t seem to be related to this issue. You can use something like Patchstack to see if there’s a patch for a vulnerable plugin (cheap annual cost) or google search “Plugin name + CVE Vulnerability” and check if any current vulnerabilities exist for your other plugins.
- Consider using additional plugins to protect your forms from bots. Cleantalk (plugin) free but has a cheap add on, and WP Armor Honeypot (plugin) free, are two we use along with Wordfence Premium and Cloudflare’s “Super bot fight mode” and other hardening to avert bots being able to get to our site and block them if they do get there.
I’m not a secuirty expert, but having handled thousands of attacks on our sites and quelled them to a whisper in the past few months, these strategies have worked for us.
Wish you the best