Forum Replies Created

Viewing 15 replies - 91 through 105 (of 1,410 total)
  • redsand

    (@redsand)

    Thanks Victor! 🙂

    Plugin Contributor redsand

    (@redsand)

    @abigailm:
    We’ve already asked you multiple times not to troll our support threads, as the advice you provide is most often incorrect and counterproductive. Given the often negative tone of your commentary, it can only be taken as trolling. If cache settings are correct, there is no issue like you describe. That only happens if your settings are incorrect. So, now for close to the tenth time, please stop trolling.

    @svtx:
    As already mentioned:

    If you want help diagnosing the issue, we can likely figure out what the issue is on your site within about 10 minutes if you’d like to submit a support request.

    Plugin Contributor redsand

    (@redsand)

    There is 403 forbidden error when I try to access your site.

    We identified the IP address of your blocked request. There has been a load of malicious traffic from that IP.

    Also, your IP address is on a load of blacklists, and has multiple reports of hacking attempts coming from it.

    You definitely need to check the security of your phone, and any network/Wifi you connect it to. That’s all I can say from here.

    Plugin Contributor redsand

    (@redsand)

    If you’re getting that, combined with the issue posting from the phone, it’s likely you have a security issue on your computer/network/phone.

    Two recommendations: Make sure your software (OS/browser/apps) are all up to date — using the latest versions — and get security software such as BitDefender, and run thorough scans of everything on your network.

    We’ll check our security logs and see if we can identify your blocked request.

    Plugin Contributor redsand

    (@redsand)

    Hi there @spespam,

    Please see the sticky post at the top of the forum: PLEASE READ BEFORE POSTING – Updated Jan 2017. (Or click on the support links on the plugin’s settings page in the WP Dashboard.)

    If you follow those steps, we’ll be able to help you out. 🙂

    – Scott

    Plugin Contributor redsand

    (@redsand)

    Given you needed to add this as a frequent issue kind of tells where the problem lies, many people have this problem so perhaps it’s time to take a closer look at it.

    We work extremely hard on compatibility, and have fewer conflicts that most plugins. In almost every single case where we receive this kind of report, the user has not worked through the Troubleshooting Guide, FAQs and Known Issues. As soon as they do, the issue gets resolved.

    Besides, there’s no solution offered at all..

    Well, you can interpret it as you like, but there are a ton of solutions in the Troubleshooting Guide, FAQs and Known Conflicts.

    For example, if you’re using a plugin that is on the known conflicts list, it’s not going to work properly. Or if your site has a configuration issue, that would cause it not to work. Unfortunately we can’t make something work if these types of issues are in place — they would cause issues with any plugin. That’s why it’s important for users to read the plugin documentation fully.

    If you want help diagnosing the issue, we can likely figure out what the issue is on your site within about 10 minutes if you’d like to submit a support request. (We don’t do our tech support here at the forums, because we can offer a better, more secure experience through our site.)

    I’m sorry to hear that’s your decision, but you’re obviously free to do as you like. Take care.

    – Scott

    Plugin Contributor redsand

    (@redsand)

    Hi @svtx

    Almost 100% of reports of this type of error have nothing to do with the plugin itself, but rather are due to a site config issue or conflict.

    If you’re getting the issue on 6 sites, it’s definitely not a bug in the plugin.

    Step 9 in our Troubleshooting Guide covers this specific issue, and gives the steps to resolve it:

    One or more users on your site consistently receive a JavaScript and cookies related error message similar to this: “Sorry, there was an error. Please enable JavaScript and Cookies in your browser and try again.” (For comments, registrations, contact forms, or anything else.)

    Please see the sticky post at the top of the forum: PLEASE READ BEFORE POSTING – Updated Jan 2017. (Or you can click on the support links on the plugin’s settings page.)

    If you follow those steps, well definitely be able to help you resolve the issue.

    – Scott

    redsand

    (@redsand)

    Hi @laura83,

    I can provide a bit of insight into site speed issues. (I’m the author and lead developer of WP-SpamShield.) Speed is something especially important to us. 🙂

    WordPress site slowdowns are most often caused by undiagnosed PHP errors, configuration issues, memory issues, database issues, missing modules, old mySQL versions, and old PHP versions.

    I took a look at your site, and from the site headers, it seems you’re using PHP 5.5. for anyone who wants a faster site, the first thing I’d recommend is to upgrade PHP. There are only three currently supported branches of PHP: 5.6, 7.0, and 7.1. Since you’re using 5.5, and it is no longer supported by the PHP dev team, I’d recommend at least upgrading to PHP 5.6. There should be zero compatibility issues. There are some minor speed improvements over 5.5. However, if you want a major improvement, upgrade to at least 7.0. PHP 7 is over 2x the speed of PHP 5.6 and earlier.

    Your web host will usually have instuctions in their support pages about how to change PHP versions. It does not usually require any kind of change to the software installed, just configuration changes. If the support pages don’t give you instructions, or they don’t make sense, just submit a support request to them.

    Another thing high on the list to check is that your site has the MySQLi extension installed. (It’s what manages the functionality of MySQL databases.) Some PHP installs only have the older MySQL extension, and it’s significantly slower. (Even with some newer PHP versions, we have seen the rare occasion where a random host has disabled MySQL and added MySQL. SMH.)

    Database bloat / size of your WP database. An easy way to check for potential database bloat is to check the size of the DB. If it is excessively large, then there is a good chance it’s got some bloat and needs to be cleaned up. For example, a medium sized site with a fairly large membership base would not usually even go above 500 MB. In general, small site should be under 100MB. (If well-optimized, potentially much lower.)

    You can check a lot of this by installing our debugging plugin, RS System Diagnostic.

    You also will want to check your site for hidden errors using WP_DEBUG, WordPress’ built-in debugging function.

    We have a WordPress debugging guide that may help you with this and with some fixes for these issues as well – located here.

    If you have any questions RE: WP-SpamShield, feel free to submit a support request, and we’ll be happy to help.

    I hope this info helps! 🙂

    – Scott

    Plugin Contributor redsand

    (@redsand)

    Hi @warriorsheart,

    I’m sorry to hear that you had a negative experience with the reminder notice in the admin area. We definitely did not intend to give you the feeling that we were trying to twist your arm or anything like that.

    In general people tend not to rate plugins very often, so the message is just a small reminder to ask users to do that after they’ve used it for a bit. Regarding the look and feel of the notice, that’s the standard format of WordPress admin notices.

    Perhaps you may not have realized it but you could close that at any time and it won’t come back…you’re definitely not obligated to rate anything.

    Again, you have my genuine apology for any frustration this may have caused.

    – Scott

    redsand

    (@redsand)

    @tradesouthwestgmailcom

    So who is Red Sand Media Group and where does this warning message come from? I believe that is the most concerning question, that I would have.

    Um, we’re the developers of WP-SpamShield.

    And then finally, I don’t care about the patches and what your people consider an _answer_ to the questions that you say were already addressed… I am looking for the validity and the purpose to post something on a Dashboard that has no real message value or source tag indicator.

    The validity comes from the fact that we’re helping inform users that their site has a serious security vulnerability that needs to be addressed. We’ve always had a heavy focus on security. Anti-spam and security cannot be separated.

    It could be that I have been using WP-Spamshield for years and this is the first time I have ever [noticed] ANY messages.

    WordPress zero-day vulnerabilities (aka unpatched vulnerabilities) don’t come a long that often. If you keep your site up to date, and there are no zero-day vulnerabilities, you’d never see a notice.

    I would not have to wonder why a discouraging message has taken over my personal space.

    I’m sorry you felt discouraged by it, but that’s not its purpose. It’s purpose is to let a user know that there is a security vulnerability in their current WordPress install. That’s a serious issue that can lead to your site being hacked, so the issue needs to be addressed. If the site is not on the latest version, then normally upgrading will help take care of it. When you have a zero-day, then other measures will need to be taken.

    We’re doing that to help people…I would hope that comes across. If you’re in danger, wouldn’t you want a friend to warn you? That’s all we’re trying to do.

    Try toning down the presence or be a bit more concise on WHY the message is appearing. I love WP-Spamshield but if I had known that is where it was from—and why—then I would not be here

    Right…and what I’m saying is that we’ve already done this. That’s already been taken care of. We’ve literally done exactly what you’re asking.

    redsand

    (@redsand)

    @tradesouthwestgmailcom @localsearch

    We’re way ahead of you. 🙂

    All of these concerns have already been addressed in updates that have been released since this thread started. If you haven’t upgraded to the latest version — 1.9.11 — please do so.

    No. I just got the same message with 4.7.5

    In v 1.9.10+, you would not see that. Unfortunately WordPress did not patch the issue in 4.7.5, so it is still a problem. But, again, WP-SpamShield completely mitigates the threat. See this blog post for more details.

    A link in the warning message takes [me] here: https://wpvulndb.com/wordpresses/475 but this does not return any warm-and-fuzzy information as it just makes me feel that there is more hanky-panky in the form of a virus as there is nothing legit looking to the site uri.

    If this is a WP thing then it should state such. It appears a third party thing that I did not load on my instance, so where is it coming from and who put it there.

    That was already addressed 11 days ago. Since version 1.9.9.9.9, WP-SpamShield adds information about the source of the alert, that the alert is provided by WP-SpamShield, and that data is provided by the WPScan Vulnerability Database, along with a link to the homepage of the WPScan Vulnerability Database site. (The site is a well-known and trusted resource among WordPress security professionals.)

    This thread is a bit of a dead horse at this point.

    If anyone has any further issues or questions on this topic, please address them to the plugin’s main support page and we’ll be happy to help.

    – Scott

    redsand

    (@redsand)

    Excellent advice, @davdebcom! We would agree.

    It does look like the error message comes from WP-SpamShield.

    @edbras It looks like your site is using W3 Total Cache – That will definitely cause problems. In the past it was quite good but we no longer recommend it, as it’s gone downhill in the last couple years. It definitely mangles a lot of JS and CSS, and we recently marked it as not compatible with WP-SpamShield.

    I can also recommend this troubleshooting step as well to maximize compatibility with caching.

    Let us know if we can be of any further help to either of you.

    – Scott

    No worries. 🙂

    Plugin Contributor redsand

    (@redsand)

    ReCaptcha? This plugin does not use any CAPTCHAs, and no CAPTCHAs are necessary when WP-SpamShield is installed, so they should be disabled/uninstalled.

    It’s likely detecting your site’s version of WP and cross-referencing it with a vulnerabilities DB. That’s likely why it still reports the vulnerability, since WordPress had not patched it yet.

    If you’d like more info on how WP-SpamShield mitigates the threat, feel free to check out this blog post.

    I’m glad they have that resource though. Excellent. 🙂 We’ll start giving it a test.

    I’m glad you were able to find this post, and WP-SpamShield.

    You are very welcome! We’re glad to help! 🙂

Viewing 15 replies - 91 through 105 (of 1,410 total)