redsand
Forum Replies Created
-
Forum: Reviews
In reply to: [RS Head Cleaner Plus] good but…Hey P7Zob3_5gD3aG19! š
Glad you like the plugin! š It definitely does combine the JS & CSS. Please read the full plugin documentation for more info on exactly how this works, and we’ll be happy to answer any questions. It has intelligent handling of certain scripts. It will not activate any of the optimization features if you are logged in. (Which is fairly standard behavior for this type of plugin.) If you are having any issues, please submit a support request at our WordPress Plugin Support Page so we can look into it for you. š
– Scott
Forum: Plugins
In reply to: [RS Head Cleaner Lite] 503 ErrorHey rockstaremperor,
I’m sorry to hear you’re having this issue, but I’ll be happy to help.
That’s an odd issue to have. There may be a configuration issue on your server.
Would you mind taking a moment to fill out a support request at our WordPress plugin Support Page? We’ll need to get a little more info, and email back and forth with you as we look into this. Thank you.
– Scott
Forum: Plugins
In reply to: [WP-SpamShield] .htaccess ExpiresActive not allowed hereYou’re very welcome! š
Outstanding. Glad you got it figured out. Let us know if we can help with anything else! š
Forum: Plugins
In reply to: [WP-SpamShield] jQuery dependency broken when jQuery is in footer :(You’re very welcome. Have a good one. š
– Scott
Forum: Plugins
In reply to: [WP-SpamShield] WP-Spamshield only required on pages with contact forms?You’re very welcome. š
Forum: Plugins
In reply to: [WP-SpamShield] .htaccess ExpiresActive not allowed hereHi micsu,
I’ll be happy to answer your question.
That’s happening because your server isn’t configured correctly. It needs to either allow
ExpiresActive, or disable the Apachemod_expiresmodule.The code in the plugin is already set correctly.
The plugin tests to see if the
mod_expiresmodule is installed, and it’s testing true…in other words…it’s installed on your server. That’s why that line of code in the.htaccesswithExpiresActive Onis being run. (If the module wasn’t active, then it wouldn’t run.) Yet your server is set to not allow it. So, your server admin should either allowExpiresActive, or disable the Apachemod_expiresmodule.You’ll need to contact your admin and have them make that change. Once they do things will function as they should, and you won’t see the error anymore. š
If you have any further questions, feel free to get in touch with us at the WP-SpamShield Support Form and we’ll be happy to help you out.
– Scott
Forum: Plugins
In reply to: [WP-SpamShield] WP-Spamshield only required on pages with contact forms?You’re very welcome. I understand.
Keep in mind that those scores were developed as a guide to help site owners improve the page load times.
The actual scores themselves mean nothing, if not tied to site performance.
So the goal is improved page load time, not improved score. The higher score can lead to a better page load time, but not necessarily. There are plenty of sites that have high scores and terrible load times.
There are a number of speed issues that automated evaluations like these cannot properly address (such as database issues, PHP errors, page caching, and other backend issues).
They are giving you a list of things that typically slow down a site. This is general advice and not every item will be applicable to every site.
You can follow all their advice and still have a slow site if you have other undiagnosed issues on your site, yet they could give you a high score. Conversely, you can ignore some of their advice and improve your actual speed more than if you follow it exactly.
When you’re talking about page load speed affecting SEO, Google and friends will be more concerned with the actual load speed of a site than the scores. Again the scores are meant as a guide to help site owners…they are not for Google. Even with that said, the speed factor is still a much smaller part SEO algorithms than the basics of building links to your site and developing interesting & relevant content.
Speed improvements should be prioritized first and foremost for site users, not search engines…you lose customers/clients with a slow site. (Amazon did studies on this.) On the other side, a fast site provides a much better experience for users, and they will love you.
Hope that helps!
– Scott
Forum: Plugins
In reply to: [WP-SpamShield] WP-Spamshield only required on pages with contact forms?Hi ac1643,
I’ll be happy to answer your question.
No, you would not be correct in thinking that WP-SpamShield only needs to load on contact form pages. It cannot be removed from other pages for a number of reasons. It protects a lot more than contact form pages (please see documentation for full list of features). Also, remember that it is not just simple JavaScript…There are two layers of protection, so in addition to the JavaScript, it has an algorithmic layer. Things won’t function correctly if you stop it from loading as it’s designed to.
However, you don’t need to worry about site speed with WP-SpamShield. The plugin is extremely well-optimized already, and no further optimizations need to be made to it. I do realize that not all plugin authors keep site speed optimization in mind…but we definitely do.
Keep in mind that just because a script comes up on a list of scripts from an automated analysis tool labeled as “render-blocking”, that doesn’t necessarily mean it is actually slowing down your site.
Installing WP-SpamShield actually helps speed up a site on the whole.
We cover all the specifics in depth in two FAQs – please give these a read:
- Q: Iām trying to optimize my site for speed, and Google PageSpeed and/or Yahoo YSlow are telling me I should move the
wp-spamshield/js/jscripts.phpfile to the footer. Should I be concerned about this script slowing down my page? - Q: Will WP-SpamShield slow down my site, and is there anything I can do to optimize my site for it?
This will answer your questions in detail. š
Let us know if we can help with anything else.
– Scott
Forum: Plugins
In reply to: [WP-SpamShield] How to remove some of the additional reg. fieldsYou’re welcome!
Although I’m not going to be able to respond to each individual point you brought up, please know that we have read all of it and will take it into account. We appreciate you taking the time to share your thoughts.
Let us know if we can help with anything else.
– Scott
Forum: Plugins
In reply to: [WP-SpamShield] jQuery dependency broken when jQuery is in footer :(Hi Mick,
You’re very welcome! š
I’m sorry to hear about the issue you’re having and I’ll be happy to help.
If you haven’t had a chance to yet, please take a few minutes to work through the Troubleshooting Guide and FAQs, as these solve over 90% of issues users have.
Please take special note of Troubleshooting Step 15 as it relates specifically jquery and moving it to the footer.
From the Troubleshooting Guide:
Make sure that you have not moved jQuery to the footer. WP-SpamShield depends on this…
There is a possibility you could get it working by using Compatibility Mode. (No guarantees though.)
A few things regarding this:
- You’ll need to make sure that your site is actually loading jQuery.
- You’ll need to check your dependencies and script enqueue priorities.
- When you enqueue it in the footer, you really need to know what you’re doing.
Keep in mind that many scripts depend on jQuery. It’s risky to put it in the footer, and we don’t usually recommend it because most people can’t pull it off without breaking some code. It’s one of those things that really only people who know they can pull it off should do it, at least on a production site.
I understand you’re probably going for performance improvements. Site speed optimization is one of the things we do day in and day out for clients, so we know a bit about this. If you do what you can to reduce code bloat, losslessly optimize your images, use CSS sprites, properly leverage browser caching, use a minification/concatenation plugin and a page caching plugin, and use other good optimization practices, jQuery won’t be your bottleneck…so you may want to consider putting it back in the header. We’ve got some sites loading in .6 seconds with jQuery in the header. Just my two cents on that.
Hope that helps!
Keep in mind that we said Compatibility Mode may help those who make mods and move jQuery to the footer. No guarantees. When you make mods like that, the debugging is up to you. š
– Scott
Forum: Plugins
In reply to: [ScrapeBreaker] RedirectionHi lachfoodies,
I’m glad to hear! You are very welcome!
Yes, you just need to set that in the plugin settings. This is covered in detail in the plugin documentation: http://www.redsandmarketing.com/plugins/scrapebreaker/
Scroll down to the FAQs section:
“Can I set an option to just use the JavaScript Frame Breaker (redirect) and not use the X-Frame-Options HTTP header?”
Have a good one! š
– Scott
Forum: Plugins
In reply to: [WP-SpamShield] How to remove some of the additional reg. fieldsHi marikamitsos,
You are very welcome! I’ll be happy to answer your question.
I understand your concerns completely, and please know that before we add each feature we always weigh the pros and cons thoroughly, along with doing a lot of research and testing, and getting extensive feedback. We don’t just look at one small sector or demographic…we look at the broad base of WordPress users, and try to determine what will do the most good, on the whole.
I’m glad you read my previous response on another user’s question about why we add those fields. I’m going to reiterate some of those points so the second half of my response makes sense.
The First Name, Last Name, and Display Name fields are an essential part of the registration spam protection that the plugin provides.
These are the same fields that are included in the
wp-admin/user-edit.phpandwp-admin/profile.phppages of your WordPress Dashboard.I’m not sure why you want to turn these off. If you’re really serious about having real human users register on your site, you would want them to fill these out anyway, especially because the user would need to fill these out before actually using any features of your WordPress site, such as commenting, writing posts, etc.
Having new users fill these fields out when registering (as opposed to later on) is a proven method of helping to make sure only legitimate human users register on your site, and is one of several methods this plugin uses to prevent human registration spam. (Automated bot registrations are all stopped automatically by different methods.)
You mentioned:
The only reason being that we have a special “set of customers”.
Little students. Kids (some with special needs)
Their ages range from 10 to 16. They get quite confused and easily discouraged from singing up.I can understand the special needs children having some issues, but the 10-16 year olds? Kids that age are quite intelligent and savvy, and should have no problem signing up on a website. Kids that age are using smart phones, complex video games, websites, and writing code.
With the special needs kids…I’m not sure I would leave them to sign up by themselves on website anyhow, since they do have special needs. It seems like someone should guide them through the signup process (with or without the modifications you requested), or there should be some extra guidance on the site to help move them along, such as graphical explanations, or even short video clips.
I mean since they have not even signed up and are completely unfamiliar with the terms, it is quite puzzling for them to grasp the difference between “Username”, “First Name” and especially “Display Name”. The last one throws them completely off the scale. Even their teachers.
The terms you’re mentioning are WordPress terms, not ones we made up. If you go into your WordPress admin and look at the user profile pages, these are the fields that fill in those values. That’s where all those field names come from. Sooner or later people are going to have to learn these terms…that’s just part of learning new skills…learning new terms. WordPress powers about 25% of all websites, so even though some terms may not be familiar to people at the beginning, it’s just something they will need to become familiar with as part of using the Internet. (If it’s an issue regarding a specific language, then this would be rectified as soon as we get a translation in that language.)
Barring special needs or language translation issues, I’m not sure I can see people legitimately having trouble telling the difference between “Username” and “First Name”. Many video games have sites where kids (well below 10) can sign up and they all have a “Username” required to access their account. “First Name”…I don’t see that being an issue, because everyone knows their own first name. “Display Name”…I could see being confusing to people new to WordPress, but then again, that is just a matter of educating your site users.
To me the real issue is that if you have users that have special needs or learning disabilities, I wouldn’t leave them to navigate WordPress by themselves without some kind of help or guidance in the first place. That’s really up to the site owner to create the necessary modifications for their target audience, to make sure they get where they need to go without trouble.
So, this doesn’t really seem like a plugin issue to me. It seems to be more of an overall usability issue for the site’s specific target audience. I say this…because even if we made the changes you requested, I’m pretty confident it’s not going to make the situation any easier for those truly having trouble registering for your site.
I do have some recommendations that I think would go a long way towards making things more user-friendly for your target audience.
Maybe have someone show the kids how to sign up, and guide them through the process. Some changes should probably be made to the login page to provide some guidance in case no one is around to show them. There are some plugins that let you modify your login page. I would add some guidance on how to use the registration page and possibly even create a short how-to video if it’s going to be an issue. As an alternative, you can also modify your theme (through the use of a child theme) to add said modifications to your login page.
Within the plugin settings, there is an option already to “Disable Registration Spam Shield.” This will disable the registration anti-spam protection and remove those 3 fields. (Anti-spam will still remain active for comments, pingbacks, trackbacks, and contact forms.)
As far as creating an option to simply remove those fields, we can’t justify doing that, as I’ve mentioned above, it would weaken the anti-spam protection. One of the things that sets WP-SpamShield apart from other anti-spam plugins is its rock-solid anti-spam protection. If you want weak anti-spam protection, there’s already plenty of other plugins that provide that. š <–I’m hoping you see that as humorous and light-hearted, not snarky. š
So, I apologize for the long response, but I figured it needed a bit more explanation than the previous post. I hope this helps shed a little more light on it.
Keep up the good work with the youngsters. š
– Scott
Forum: Reviews
In reply to: [WP-SpamShield] Does not workHi MatthewEbel,
I’m sorry to hear about the issue you’re having.
However, I have to ask, why would you post a negative review without even submitting a support request first?
The plugin absolutely does work. We do an extraordinary amount of testing to ensure compatibility, and it is tested to work perfectly with BuddyPress.
It is important for all plugin users to read the documentation. We have put together some very helpful and thorough troubleshooting documentation. Please take a few minutes to work through the Troubleshooting Guide and FAQs, as these solve over 90% of issues users have.
Please take special note of Troubleshooting Step 9 and FAQ #9 as they relate specifically to the issue you are dealing with, and will give you the steps to proceed forward.
From the Troubleshooting Guide:
If this message comes up consistently even after JavaScript and cookies are enabled, then there most likely is an installation problem, site configuration issue, plugin conflict, or JavaScript conflict.
If the information provided doesn’t solve the issue for you, we’ll need a bit more info from you on the specifics, and we’ll need to email back and forth, so please head over to the WP-SpamShield Support Form (our main support channel), and take a moment to fill out a support request. That will allow us to help you diagnose this, find out what the real issue is, and get things working right for you.
Please ask yourself this…When developers spend so much time developing free plugins for the WordPress community, is it really ok to post a 1-star review without making any reasonable effort to receive support? That’s simply not the right way to handle things.
If you have an issue with something, submit a support request first, and give the author time to respond. We provide free support for our plugins…all you have to do is submit a support request at the WordPress Plugin Support Page. We provide some of the best support out there.
You might want to take a moment to check out these two posts:
I would ask that you reconsider your rating.
– Scott
Hey chltx,
I hear ya…that’s no fun.
Ah, so the IP lockdown isn’t practical. Some sites it is, others it is not. Totally understand about the time constraints.
Glad some of those suggestions can be helpful.
Regarding contact form, it’s quite easy… all the instructions are here: Installing a WordPress Contact Form on Your Site
The main plugin documentation page is here: WP-SpamShield and if you scroll down to “Quick Navigation ā Contents”, there are links to every subsection of the documentation, with answers to just about everything you could need. š
(Also, in your WP-SpamShield settings page, there are links to just about documentation and support pages as well.)
Have a good one!
– Scott
I understand.
Two hours…ouch, that’s rough. Hmm, if I hear you correctly, I think I could help cut that down to a simpler process, and do it in a whole lot less time, without you having to intervene, even if you have a lot of data to process. (It all depends on the specific parameters you have, but sti.) Contact me through our contact page if you like, and I’ll be happy to look into that for you. We have similar scripts running on a lot of our sites. We also data-mine and analyze a lot of spam data daily for WP-SpamShield (all automated) so we have a “little” experience with this type of thing. š
A couple other thoughts on login security for your login pages, and brute force attacks:
- If you are the only site admin, or there are only a few people, you can lock down the login page (and the entire admin area
/wp-admin/) by IP address (whitelist only the admins). That is far more effective than blacklisting a growing number of IP addresses. *One caveat… if you do this, then you will need to also whitelist the/wp-admin/admin-ajax.phpfile for all visitors, as that can break some functionality otherwise. - Two-factor authentication. Using two factor authentication will help immensely in situations like this. There are a number of plugins available like Clef and a number of others. As an alternative to full 2FA, you can use a plugin like Stealth Login Page to add a second key to your login page.
- Use a web host that has a strong emphasis and track record with security. They usually will incorporate some brute force / DDOS protections into their system/firewall/etc. For example: be sure they have ModSecurity or equivalent installed.
- Once you install WordFence, make use of the login security and login lockout features.
For managing multiple sites there are a number of plugins, such as MainWP Dashboard / MainWP Child, ManageWP Worker, InfiniteWP Client, iControlWP, and a number of others. (I’m not advocating any one in particular, just mentioning them.)
Anything that gets me closer to set-and-forget without losing effectiveness is good.
I hear you there! š
Hope this info helps. Have a good one!
– Scott
- Q: Iām trying to optimize my site for speed, and Google PageSpeed and/or Yahoo YSlow are telling me I should move the