Forum Replies Created

Viewing 15 replies - 481 through 495 (of 1,410 total)
  • Plugin Contributor redsand

    (@redsand)

    The plugin is extremely secure. That file doesn’t provide an attack vector. Every visitor of your site will request that file, just like they would any JavaScript file that is called from your page. (It is essentially a JS file with additional PHP functionality.)

    If your copy of the plugin matches the version distributed on WordPress [dot] org, then it is safe. If the code doesn’t match, then you need to delete your current version and install a fresh copy.

    Just because a bot visits a particular file doesn’t mean it is insecure. Bots often crawl sites. Some are probing for security flaws. A visit to a URL on a site, whether it exists or not, doesn’t necessarily mean there is a security flaw on your site. Attackers do automated research before launching attacks. They try to determine if your site has one or more flaws that they are looking to exploit, so they may request pages that don’t exist as well.

    However, if you suspect that the files on your site have been compromised, you need to do a security audit on your site. That would not be plugin tech support issue though.

    If you are getting spam, that would be a tech support issue.

    We will be happy to help you out. You will need to take the following steps:

    1. The Troubleshooting Guide and FAQs are the place to start.

      Please take a few minutes to work through these, as they solve over 90% of issues users have. (Please be sure to follow all the steps, not just read through them.)

      Once you have gone through the Troubleshooting Guide and FAQs, if that doesn’t solve the issue, we’ll need a bit more info from you on the specifics, and we’ll need to email back and forth, so you should move on to the next step.

    2. Submit a support request at the WP-SpamShield Support Form, our main support channel for the plugin. We have an excellent diagnostic process.

    That will allow us to help you diagnose this, find out what the real issue is, and get things working right for you.
    – Scott

    Please note that the WP-SpamShield Support page is our main support venue, not the WordPress forums here, so that will always be the best way to get a quick response and resolve any tech support issues.

    Plugin Contributor redsand

    (@redsand)

    Hi Kimbert,

    Nothing to worry about there. Just minor text changes between versions. Sometimes a security plugin will detect a change in a file and it’s not in synch with the repository. That file doesn’t affect how the plugin runs. If you have any concerns, just install a fresh copy.

    – Scott

    Plugin Contributor redsand

    (@redsand)

    Hi Januz,

    You’re very welcome. Sounds good.

    Have a good one.

    – Scott

    Plugin Contributor redsand

    (@redsand)

    @fruitful

    Just a follow up… We’ve kept an eye out for contact from you but haven’t received any support requests.

    We’re still happy to help. Just us know.

    Plugin Contributor redsand

    (@redsand)

    You’re very welcome.

    Excellent…very glad to hear you’re on the latest version. 🙂

    Plugin Contributor redsand

    (@redsand)

    Hi C,

    Thank you for your interest in WP-SpamShield! I’ll be happy to answer your questions. 🙂

    WP-SpamShield will protect every type of WordPress form from spam. It’s designed to do something no other plugin can do: protect every type of third party form plugin out there, without requiring specific code for that plugin. This is part of the Miscellaneous Form Protection feature.

    It does have specific support for Contact Form 7 and Gravity Forms, but it goes much further.

    It actually does mention in the docs that it covers more than comment, trackback, and contact form spam (for example MailChimp is an email opt-in):

    Supports: Contact Form 7, Gravity Forms, Ninja Forms, JetPack Contact Forms & Comments, BuddyPress, bbPress, WooCommerce, s2Member, WP-Members, Mailchimp, Fast Secure Contact Form, Formidable Forms, almost all WordPress forms, and almost all WordPress registration forms. Automatically!

    and:

    Includes a Spam-Free Contact Form, and Anti-Spam for Contact Form 7, Gravity Forms, Ninja Forms, JetPack Contact Forms, and Most Other Forms
    Includes drop-in spam-free contact form, with easy one-click installation. Easy to use – no configuration necessary, but you can configure it if you like. (See Installation for info.) WP-SpamShield also includes automatic anti-spam protection for Contact Form 7, Gravity Forms, Ninja Forms, JetPack Contact Forms, Fast Secure Contact Forms, Formidable Forms, and more. (You don’t have to do a thing…just add your Contact Form 7, Gravity Forms, Ninja Forms, JetPack Contact Forms, or other forms to your site, and they will automatically be protected.) It will automatically protect most forms on your WordPress site from automated spam, even if they are not listed here.

    We say “most” in order to not overstate things, but it basically means “all”. Every once in a while a user may report a compatibility issue with a certain plugin (which we promptly address), but even that is extremely rare, on the order of 1 out of 1000 (or even less). After using it, the question you’re more likely to ask is, “what is it NOT compatible with?” 🙂 It’s a short list. If you ever do have a compatibility issue, just let us know via our Tech Support Form, and we’ll take care of it in short order.

    You can disable Trackbacks and Pingbacks in the WP-SpamShield settings or WordPress settings. If you don’t use commenting at all, you can disable this in your WordPress settings. ( Settings -> Discussion -> Default article settings -> Allow people to post comments on new articles )

    What I’d recommend is that you install it and try it, and test it out. I’m confident you’ll be pleased.

    If you have any issues, we provide thorough documentation, a helpful Troubleshooting Guide, FAQs and Tech Support.

    If you end up deciding not to use it, it’s no problem. The plugin is a good WordPress citizen and will clean up after itself, removing all traces of itself from your site and WordPress database.

    I hope this info helps! 🙂

    – Scott

    Plugin Contributor redsand

    (@redsand)

    I think you are misunderstanding….That IS the option. That’s exactly what a JavaScript FrameBreaker does – redirect.

    So, if you want users to be redirected to your site when it gets framed, then use that option.

    What I posted in the previous thread you referenced is still correct. If you follow that advice, and check the plugin docs and FAQs, it explains it in more detail.

    Please see the FAQs:

    Q: Can I set an option to just use the JavaScript Frame Breaker (redirect) and not use the X-Frame-Options HTTP header?

    A: Yes, the option was added in version 1.1. Just check the option on the Settings page and click ‘Save Changes’.

    An additional recommendation: You mentioned that you are using WordPress 3.8. It is really, really dangerous to run a version of WordPress that old, and it makes your site extremely vulnerable to hacking. For example, WordPress 3.8 has released over 2.5 years ago and has 28 known security vulnerabilities! For your site’s security, please upgrade as soon as possible. Also, WordPress code has changed a lot since then, and many plugins don’t support versions that old anymore.

    Plugin Contributor redsand

    (@redsand)

    Can explain what the exact issue is and what you’re trying to resolve?

    Please be specific.

    Plugin Contributor redsand

    (@redsand)

    If you head over to the WP-SpamShield Support Page and submit a support request, we will be happy to help you out.

    – Scott

    Plugin Contributor redsand

    (@redsand)

    Hi simonmharding,

    I’m sorry to hear that the plugin did not provide the experience you expected.

    It’s really important for users to read through the full plugin documentation, as this is addressed there. I realize documentation is not always clear, and this is something we work to improve.

    We have the following on the front page:

    NOTE: As with any JS/CSS minification & caching plugin, it’s important to test, test, test before implementing on a production site. Because of the type of plugin it is, this plugin may not work for every site out there, but that does not mean the plugin is broken. If you have any issues, please submit a support request so we can look into it and make it as compatible as possible for everyone.

    And this in the FAQs:

    <h4>Does this plugin have any known issues?</h4>

    <p>Just one that we know of.</p>

    <p>Moving JavaScript to the footer of your page may create issues with some responsive themes that need the JS libraries to be in the head section of the code. If that’s the case then this plugin may not be right for you. Even for us, it’s right for 80% of our sites but not all of them. For the rest we use the RS Head Cleaner Lite plugin, which does everything the same, except for the JavaScript-to-Footer functionality.

    Test this plugin out on your site before deciding if it will be the right solution for you. Normally we would create an options page to let you turn the JS-to-Footer feature off, but this plugin is all about speeding up your site, and that means minimal calls to the database, so unfortunately it would defeat the purpose of this plugin if we added the ability to change that.

    If you don’t want the JS-to-Footer feature, use RS Head Cleaner Lite. It has all the same features except it won’t move JavaScript to the footer.

    Just a thought for the future: This might have been better as a support request instead of a review.

    If you would still like support, we’ll be happy to help. 🙂

    Plugin Contributor redsand

    (@redsand)

    Hi Michael,

    I’ll be happy to answer this question as well.

    As of right now, the plugin’s built-in contact form can only send to a single email address. If you would like to send to more than one, I’d recommend creating an alias/group/forward on your web domain that will forward to more than one address. Another option if you are using Gmail or other free email services is to create a rule that will send to as many email addresses as you like.

    Our favorite contact form plugin is Contact Form 7. WP-SpamShield is not trying to compete with CF7. CF7 has basically any feature you could ask for. We made a deliberate choice to keep WP-SpamShield’s form more basic in order to keep the plugin code lightweight. Our goal with the built in contact form is to create a contact form that is basic and extremely easy to implement, and rock solid against spam. (This also reduces the number of plugins needed on a site, making it more efficient.)

    However, in order to support users in having freedom to add any feature the like to their contact forms, the plugin specifically supports Contact Form 7 and Gravity Forms. It also supports literally any contact form plugin out there, including (but not limited to): Ninja Forms, JetPack Contact Forms, Fast Secure Contact Form, Formidable Forms, and almost all WordPress forms. It protects these forms automatically…you don’t have to do anything. Just install whatever contact form you like, and WP-SpamShield will protect it. (As long as you don’t disable Miscellaneous Form Protection in the WPSS Settings.)

    So, if your contact form needs exceed the built-in form’s features, all you need to do is install the contact form plugin of your choice.

    I hope this helps. Have a good one.

    – Scott

    Plugin Contributor redsand

    (@redsand)

    Hi michaelquinn,

    I’ll be happy to answer your questions.

    In general, you won’t have any problems with caching and the plugins being auto-updated through JetPack or the built-in WordPress update system. (The “
    Easy Updates Manager” plugin is also a great option for this!) It’s only if a major change is introduced by a plugin.

    Basically, don’t worry about it unless you start experiencing issues.

    The plugin detects if caching is enabled, and does account for this.

    The main reason we put that in the notes, is that a lot of people forget about the effect caching has, so this should remind them to check that and clear the cache. The fact you’re at aware of caching’s effect on the site is good, and that should serve you well.

    If it helps to know, every site we manage (include ours, client sites, and test sites) has some combination of automatic plugin/theme updates and caching installed alongside WP-SpamShield, and there are zero issues.

    Regarding caching, I would like to make one recommendation, that you update your content at regular intervals with the Preloading option, such as once daily, in order to prevent problems. (Especially if using CSS/JS minification plugins.) Preloading is key because it runs a cron job to update the site content at regular intervals, so it will be cached before users or search engine bots hit the site. It will cause a slight increase to server load for the duration of the preloading, process so you should schedule this at a slow time for your site. If you have under a couple hundred pages, doing this daily is not problem. If you have significantly more, that’s when I would extend it to 48 hours or so and make some tweaks to the settings. We don’t recommend using lengths of one week or longer as you are mentioning. We usually would recommend a limit of 48 hours max, but that is up to you. If you do this, you will likely not need to manually clear the cache very often.

    Just to give context to this recommendation, we do know a thing or two about site optimization, and I’m understating that a bit. 🙂 We do site speed optimization day in and day out for clients, and have every single one of them outperforming sites hosted on more expensive servers. For example, we even have sites on shared hosting dramatically outperforming sites hosted on VPS/dedicated/managed servers (with comparable traffic), even ones that are specifically “WordPress optimized”.

    I hope this info helps!

    – Scott

    Plugin Contributor redsand

    (@redsand)

    Hi remake,

    I’ll be happy to help. I hope you are doing well. 🙂

    If you wouldn’t mind, please double-check the settings: go into your WP-SpamShield settings, and confirm that your Minimum Comment Length setting is set to 2 and not 15?

    Please remember that if you are using a page cache plugin (or a minification plugin with built-in caching), and you change any settings in your site, plugins or themes (or install/uninstall plugins/themes), you will likely need to clear the plugin cache(s) (and any server caches) and clear your browser cache after any of these changes in order for them to be reflected on your site. There is a helpful WordPress [dot] org article about this: I Make Changes and Nothing Happens

    After seeing your support post here on the forum, we ran several tests and can confirm that everything is working as it should…in v1.9.8.8 the plugin is properly obeying the minimum comment length setting.

    We did make some improvements to the plugin in the recent version, so it is conceivable in some rare cases that if the Minimum Comment Length was previously set to 2, it could be reset to the default setting of 15 when upgrading to 1.9.8.8. If this did happen, it would be a one-time occurrence, and if you set it to 2 again and save the settings, you would be good to go after that. It is also possible that there is something else interfering.

    If you double-check the settings as I mentioned above, and clear your plugin cache(s) and browser cache, and still have the issue, we recommend that you take the following steps:

    1. The Troubleshooting Guide and FAQs are the place to start.
      Please take a few minutes to work through these, as they solve over 90% of issues users have. (Please be sure to follow all the steps, not just read through them.)

      Once you have gone through the Troubleshooting Guide and FAQs, if that doesn’t solve the issue, we’ll need a bit more info from you on the specifics, and we’ll need to email back and forth, so you should move on to the next step.

    2. Submit a support request at the WP-SpamShield Support Form, our main support channel for the plugin. We have an excellent diagnostic process.

    Following these steps will allow us to help you diagnose this, figure out what the root issue is, and get things working right for you.

    – Scott

    Please note that the WP-SpamShield Support page is our main support venue, not the WordPress forums here, so that will always be the best way to get a quick response and resolve any tech support issues.

    Plugin Contributor redsand

    (@redsand)

    Hi Fruitful Code,

    We’ll be happy to help.

    To get in touch with us, please go to the WP-SpamShield Support Page. Once we receive your support request, we’ll be in touch to coordinate. It will ask you to review the FAQs and Troubleshooting Guide before submitting, and this should end up being helpful, as it will give you a better idea of technical aspects of WP-SpamShield. (We have similarly studied your plugin in the past before adding it to our known conflicts page a while ago.) The main advice we have is to just make sure your plugin follows the WordPress login/registration coding standards very tightly. If your plugin uses the same process as the WordPress login/registration pages, things should automatically work. This will also help you be more compatible with any other registration anti-spam and/or login protection plugins. Also, there are some hooks in WP-SpamShield that we added for developers, and we can give you specific info on how to implement depending on what you need. (You may not need them at all though.) We’ll be happy to go more detail via email once we hear from you. It would be great to get our plugins to work together.

    – Scott

    Forum: Plugins
    In reply to: [Maintenance] WP-SpamShield

    @fruitful Code

    You’re very welcome. We’re happy to help.

    To get in touch with us, please go to the WP-SpamShield Support Page. Once we receive your support request, we’ll be in touch to coordinate. It will ask you to review the FAQs and Troubleshooting Guide before submitting, and this should end up being helpful, as it will give you a better idea of technical aspects of WP-SpamShield. (We have similarly studied your plugin in the past before adding it to our known conflicts page a while ago.) The main advice we have is to just make sure your plugin follows the WordPress login/registration coding standards very tightly. If your plugin uses the same process as the WordPress login/registration pages, things should automatically work. This will also help you be more compatible with any other registration anti-spam and/or login protection plugins. Also, there are some hooks in WP-SpamShield that we added for developers, and we can give you specific info on how to implement depending on what you need. (You may not need them at all though.) We’ll be happy to go more detail via email once we hear from you. It would be great to get our plugins to work together.

    – Scott

Viewing 15 replies - 481 through 495 (of 1,410 total)