Title: stephend's Replies | WordPress.org --- # stephend [ ](https://wordpress.org/support/users/stephend/) * [Profile](https://wordpress.org/support/users/stephend/) * [Topics Started](https://wordpress.org/support/users/stephend/topics/) * [Replies Created](https://wordpress.org/support/users/stephend/replies/) * [Reviews Written](https://wordpress.org/support/users/stephend/reviews/) * [Topics Replied To](https://wordpress.org/support/users/stephend/replied-to/) * [Engagements](https://wordpress.org/support/users/stephend/engagements/) * [Favorites](https://wordpress.org/support/users/stephend/favorites/) Search replies: ## Forum Replies Created Viewing 15 replies - 1 through 15 (of 40 total) 1 [2](https://wordpress.org/support/users/stephend/replies/page/2/?output_format=md) [3](https://wordpress.org/support/users/stephend/replies/page/3/?output_format=md) [→](https://wordpress.org/support/users/stephend/replies/page/2/?output_format=md) * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Smart App Banner] Fatal PHP Eroor](https://wordpress.org/support/topic/fatal-php-eroor-2/) * Plugin Author [stephend](https://wordpress.org/support/users/stephend/) * (@stephend) * [2 years, 3 months ago](https://wordpress.org/support/topic/fatal-php-eroor-2/#post-17522856) * If someone can share their PHP settings, that would be useful. I am running PHP 8.1 but do not see any of these errors/warnings. Since I can’t reproduce the issue, I’m left picking off these errors one-by-one as they’re reported, which I don’t think makes anyone happy. * Taking of which: this will be fixed in 1.1.6. * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Smart App Banner] Strange Code from Smart Banner](https://wordpress.org/support/topic/strange-code-from-smart-banner/) * Plugin Author [stephend](https://wordpress.org/support/users/stephend/) * (@stephend) * [2 years, 4 months ago](https://wordpress.org/support/topic/strange-code-from-smart-banner/#post-17506761) * I’ve uploaded an update that will hopefully eliminate the warnings. I have not seen the same issue myself (even after upgrading to PHP 8.1) so I can’t be completely sure that it works. There may still be cases where warnings are shown in the admin screen. I’ll work on that next, when I get the chance. * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Smart App Banner] Multiple PHP warnings after update, not usable](https://wordpress.org/support/topic/multiple-php-warnings-after-update-not-usable/) * Plugin Author [stephend](https://wordpress.org/support/users/stephend/) * (@stephend) * [2 years, 4 months ago](https://wordpress.org/support/topic/multiple-php-warnings-after-update-not-usable/#post-17506760) * I’ve uploaded an update that will hopefully eliminate the warnings. I have not seen the same issue myself (even after upgrading to PHP 8.1) so I can’t be completely sure that it works. There may still be cases where warnings are shown in the admin screen. I’ll work on that next, when I get the chance. * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Smart App Banner] Strange Code from Smart Banner](https://wordpress.org/support/topic/strange-code-from-smart-banner/) * Plugin Author [stephend](https://wordpress.org/support/users/stephend/) * (@stephend) * [2 years, 4 months ago](https://wordpress.org/support/topic/strange-code-from-smart-banner/#post-17501420) * As per [the other thread,](https://wordpress.org/support/topic/multiple-php-warnings-after-update-not-usable/) this is something to do with PHP 8.x and/or its configuration. * I have a speculative fix, but I’ve not been able to reproduce the problem on my sites so I can’t be sure that it will work. I might have to release it anyway and see. * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Smart App Banner] Multiple PHP warnings after update, not usable](https://wordpress.org/support/topic/multiple-php-warnings-after-update-not-usable/) * Plugin Author [stephend](https://wordpress.org/support/users/stephend/) * (@stephend) * [2 years, 4 months ago](https://wordpress.org/support/topic/multiple-php-warnings-after-update-not-usable/#post-17480118) * If the issue is what I think it is, it’s because something went from being a “ notice” in PHP 7.x to “warning” in 8.x. This code has been pretty much unchanged in the plugin since version 0.3, so I’m pretty sure that the warnings were not introduced in the new version this weekend. * It isn’t correct, though, so I will fix when I get the time. * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Smart App Banner] Multiple PHP warnings after update, not usable](https://wordpress.org/support/topic/multiple-php-warnings-after-update-not-usable/) * Plugin Author [stephend](https://wordpress.org/support/users/stephend/) * (@stephend) * [2 years, 4 months ago](https://wordpress.org/support/topic/multiple-php-warnings-after-update-not-usable/#post-17479870) * What version of WordPress are you using? What version of PHP are you using? * The thing is, errors you shared reference lines of code that did not change between versions. The only difference is in the admin screen. There are literally no changes in the code that displays the App Banner. * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Smart App Banner] Cross Site Scripting (XSS) vulnerability](https://wordpress.org/support/topic/cross-site-scripting-xss-vulnerability-17/) * Plugin Author [stephend](https://wordpress.org/support/users/stephend/) * (@stephend) * [2 years, 4 months ago](https://wordpress.org/support/topic/cross-site-scripting-xss-vulnerability-17/#post-17470061) * Hopefully this is resolved in 1.1.4. * For those interested, this was more difficult to fix than it might first look. The validation for the affiliate data and app argument is… complicated. There do not seem to be documented rules for what the app argument is, making it difficult to determine what is valid and what is not. I just accept it as text. The app argument is a URL, but you can’t use WordPress built-in validation routines as it is likely a custom URL scheme, and you can only specify an allow-list of valid schemes. In the end, it allows anything that “looks like” a URL but deny-lists Javascript. * This complexity leads to the “hopefully” in the opening paragraph. It is possible that the validation is too strict, and it does not allow some valid options. It’s also possible that the validation is too lax and allows options that it should not. * Let me know if you find either of these cases. * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Smart App Banner] Cross Site Scripting (XSS) vulnerability](https://wordpress.org/support/topic/cross-site-scripting-xss-vulnerability-17/) * Plugin Author [stephend](https://wordpress.org/support/users/stephend/) * (@stephend) * [2 years, 4 months ago](https://wordpress.org/support/topic/cross-site-scripting-xss-vulnerability-17/#post-17460951) * As noted above, the PatchStack link does not have enough information to be able to resolve. Assuming that it’s the same issue noted by chrisaudio, I am working on it. * However, this is only exploitable if you have admin access. And if you already have admin access, you can already display whatever code you want. * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Smart App Banner] Cross Site Scripting (XSS) vulnerability](https://wordpress.org/support/topic/cross-site-scripting-xss-vulnerability-17/) * Plugin Author [stephend](https://wordpress.org/support/users/stephend/) * (@stephend) * [2 years, 4 months ago](https://wordpress.org/support/topic/cross-site-scripting-xss-vulnerability-17/#post-17440733) * I’m unclear if that’s the same vulnerability, but it does actually have enough information to be able to understand it! * I am looking into it. It’s real, but you need admin privileges to do anything with it. Needless to say, if you have admin you can already do what you like. * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Smart App Banner] Cross Site Scripting (XSS) vulnerability](https://wordpress.org/support/topic/cross-site-scripting-xss-vulnerability-17/) * Plugin Author [stephend](https://wordpress.org/support/users/stephend/) * (@stephend) * [2 years, 8 months ago](https://wordpress.org/support/topic/cross-site-scripting-xss-vulnerability-17/#post-17176192) * I’ve been looking into this, but I don’t see any details of the vulnerability. * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Smart App Banner] Banner does not show up](https://wordpress.org/support/topic/banner-does-not-show-up-2/) * Plugin Author [stephend](https://wordpress.org/support/users/stephend/) * (@stephend) * [6 years ago](https://wordpress.org/support/topic/banner-does-not-show-up-2/#post-13010624) * The banner appears when I view the page. What browser are you using? (It only works in Safari.) Did you see it once and press the ‘X’ in the corner? * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Smart App Banner] Unable to delete app in settings](https://wordpress.org/support/topic/unable-to-delete-app-in-settings/) * Plugin Author [stephend](https://wordpress.org/support/users/stephend/) * (@stephend) * [6 years, 1 month ago](https://wordpress.org/support/topic/unable-to-delete-app-in-settings/#post-12928232) * I see the banner at the top of the home page. Did you manage to fix it? * For anyone else with the same issue, what I think is going on is this. The list of apps you see in Settings>Smart App Banner are just shortcuts. Deleting entries here does not affect any pages/posts that already use the app. * To change the app used for a page, go to that page and edit the Smart App Banner property for that page, either directly or by choosing the “new” shortcut. * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Smart App Banner] Not working anymore ?](https://wordpress.org/support/topic/not-working-anymore-171/) * Plugin Author [stephend](https://wordpress.org/support/users/stephend/) * (@stephend) * [6 years, 2 months ago](https://wordpress.org/support/topic/not-working-anymore-171/#post-12734216) * When I look at the page, I see the following tag: * `` * That the tag is there shows that the plugin is working. However, you have the wrong value in the app-id field. The app-id is the identifier that Apple gave your app. For example, one of mine is “289374576”. * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Smart App Banner] webview problem](https://wordpress.org/support/topic/webview-problem/) * Plugin Author [stephend](https://wordpress.org/support/users/stephend/) * (@stephend) * [6 years, 3 months ago](https://wordpress.org/support/topic/webview-problem/#post-12693610) * All the plugin does is add some metadata to the web page. The browser then displays( or not) the banner, so, in the general case, this would be an option for Apple or Google to implement. On iOS, if the user taps the ‘X’ to close the banner, it’s not shown again. * If your app has a custom URL scheme, [it might be possible](https://stackoverflow.com/questions/24571548/javascript-how-to-detect-if-the-custom-url-scheme-is-available-or-not-availabl#24571962) to detect that the app is installed but I’ve no immediate plans to try to implement it (and it might not work!). * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Smart App Banner] Chrome mobile compatiblity](https://wordpress.org/support/topic/chrome-mobile-compatiblity/) * Plugin Author [stephend](https://wordpress.org/support/users/stephend/) * (@stephend) * [6 years, 8 months ago](https://wordpress.org/support/topic/chrome-mobile-compatiblity/#post-12112458) * As far as I know this is a feature of Safari, so no, it doesn’t work in Chrome. * Regards, Stephen Viewing 15 replies - 1 through 15 (of 40 total) 1 [2](https://wordpress.org/support/users/stephend/replies/page/2/?output_format=md) [3](https://wordpress.org/support/users/stephend/replies/page/3/?output_format=md) [→](https://wordpress.org/support/users/stephend/replies/page/2/?output_format=md)