rossagrant
Forum Replies Created
-
I too go through phases of getting LOTS of users locked out, all trying to sign in with either no username or a string of random letters.
How many attacks are normal?
I must have had 40 this morning over the last hour.
Will do, thanks so much for your help!
In the meantime, if anyone runs their site like this with S2, please shout up!
I’d love to hear of working solutions!
That’s definitely an option.
It would be even better if users had the option to go premium at registration though.
I find conversion is quite good at the initial point of registration and have many areas of the site where users can sign up for S2 access straight away without being a current member.
It would be awesome if that was possible!
At the moment i use a very standard set up of S2 member.
Users either sign up for free initially or hit a PayPal button to sign up for S2 level 1 access.
If they do this initially they go to Paypal and are redirected back to the registration form on successful payment.
The registration form in each instance is exactly the same – the standard BP form.
I haven’t altered any of the core BP registration stuff at all.
My concern about moving away from this form to one that can handle conditional logic is that the form might dictate the user level and not let S2 deal with it as it does with the default registration page.
@kts915 Thanks for that.
The screen shots for formidable forms look VERY similar to the GF’s etup.
You’ll see a drop down on the screen shot on the page you linked to with a drop down to set the user role for the form you are creating.
I’m just wondering how S2 would deal with this.
If I made one form with all the possible profile types on it and set it to sign someone up as a subscriber by default – does S2 know to upgrade to level 1 if a user comes to register after checking out at Paypal, or does the form take over and only give subscriber access?
Forum: Fixing WordPress
In reply to: "Cookies are blocked or not supported by your browser."Hi guys!
I’ve gotten to the bottom of this for sure now.
Some themes that have the sidebar login widget developed before the latest WP update of 3.7 will more than likely have a line of code which states:
<input type="hidden" name="testcookie" value="1" />Particularly if you use Buddypress.
See this trac ticket here.
http://buddypress.trac.wordpress.org/changeset/7485
If you are using BP, you simply need to delete that line from your sidebar.php or BuddyPress navigation file containing that line of code.
100% fixed all of my issues.
Forum: Fixing WordPress
In reply to: "Cookies are blocked or not supported by your browser."This is a bit random chaps, but I’ve been following these threads on this issue for weeks as I too have this problem on my main site.
I don’t run varnish on my system and all plugins are so very much tried and tested that I didn’t think it could be them.
The thing that seemed to fix this issue on my 2 sites was to deactivate and then reactivate Akismet.
I have absolutely NO idea whatsoever if Akismet could or would play a part with authentication for login in any way, but disabling and enabling the plugin has flushed something out of the system that was causing this problem.
If you find yourself with this issue, I would recommend you deactivating all plugins and then re-enabling them ONE AT A TIME.
Not sure what happens in that re-activating phase, but it sorted my problem out with this cookies issue.
All now works great again after weeks of thinking it was a core WP issue.
Hope that helps.
AWESOME! And no worries whatsoever on timeframes. When you are developing something that’s free for us, no one can expect you to jump right at it!
Thank you so much for a fix, it’s VERY MUCH appreciated!
Have a great weekend! π
Nice one Joost, look forward to the new version! π
Hey Joost,
I just fixed this issue in another plugin that wasn’t registering a hook with the wp cron action, and I think the issue in WP SEO not firing the wpseo_ping_search_engines cron job will be fixed in the same way.
We simply need to hook it in I think.
You’ll just need to add something like this:
add_action( ‘wpseo_ping_search_engines’, ‘wpseo_ping_search_engines’ );
That should register the hook and enable the cron job to fire as right now I don’t think it is when a new blog post is posted.
Let me know what you think.
Forum: Plugins
In reply to: [BuddyPress Album] BP Album Bug after editing activity stream item fixCheers Foxly!
I’ve raised an issue on Github here: https://github.com/BP-Media/bp-album/issues/1
Also just checked in my error_log to see these Joost:
[14-Jan-2013 16:11:18 UTC] PHP Parse error: syntax error, unexpected $end in /home/mysite/public_html/wp-content/plugins/wordpress-seo/inc/wpseo-functions.php on line 149
I think I may have been restoring a backup at the time though, so it may not be relevant.
Would love to get that cron job back working though!
Sorry Joost, actually the yoast_tracking cron job is fine, but i still get a XNo action exists when I look at:
Entry #1: wpseo_ping_search_engines X no action exists with this name
This sounds like quite an important wp-cron job.
Has any updates changed the way this works?
Don’t recall seeing a cross next to it in previous versions.
Any ideas how to fix it?
Thanks! π
No worries eplans, glad you got it fixed!
Esmi, I’m not sure if we should post hosts as those that are less pro-active in fixing this issue may be retargeted.
Perhaps when we know everyone has heard back from their hosts with what action has been taken and that any potential issue has been resolved.
People right now need to be setting their wp-config.php file to the permission 600 if possible and moving it up one level above the default directory.
That will stop anyone from reading DB passwords if they are hacked.
You too should do that eplan.
FTP into your install and right click your wp-config..php file, click on permissions and change it to 600.
See if the site still functions properly. If not use 640.
Then when it works, move your wp-config.php file up one directory into the root of your server.
If it all works and your blog functions leave it there, it will be much safer.
Just out of interest, has anyone been hacked by this that WASN’T on a shared server?
Anyone get hit on a VPS or dedicated server – not in a shared environment?