Title: vincentpg's Replies | WordPress.org --- # vincentpg [ ](https://wordpress.org/support/users/vincentpg/) * [Profile](https://wordpress.org/support/users/vincentpg/) * [Topics Started](https://wordpress.org/support/users/vincentpg/topics/) * [Replies Created](https://wordpress.org/support/users/vincentpg/replies/) * [Reviews Written](https://wordpress.org/support/users/vincentpg/reviews/) * [Topics Replied To](https://wordpress.org/support/users/vincentpg/replied-to/) * [Engagements](https://wordpress.org/support/users/vincentpg/engagements/) * [Favorites](https://wordpress.org/support/users/vincentpg/favorites/) Search replies: ## Forum Replies Created Viewing 5 replies - 1 through 5 (of 5 total) * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Download Plugin] dpwap_plugin_download_link() missing return type on permissions short-circuit](https://wordpress.org/support/topic/dpwap_plugin_download_link-missing-return-type-on-permissions-short-circuit/) * Plugin Support [vincentpg](https://wordpress.org/support/users/vincentpg/) * (@vincentpg) * [2 days, 11 hours ago](https://wordpress.org/support/topic/dpwap_plugin_download_link-missing-return-type-on-permissions-short-circuit/#post-18969901) * Hi, * Thank you for reporting this issue and for providing the detailed explanation. * You’re absolutely right. Since `dpwap_plugin_download_link()` is hooked to a filter, it should always return the expected data type. Returning `null` on the permission check can indeed cause the plugin list table to fail when WordPress expects an array. * We’ll update the function to return the original `$links` array (instead of ` null`) when the current user does not have the required capability. This will preserve the expected return type and prevent the fatal error. * Thank you for identifying this. We’ll include the fix in our next plugin update. * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Download Plugin] Plugin ZIP Generated on Local Environment Causes Fatal Error on HTTPS Server](https://wordpress.org/support/topic/plugin-zip-generated-on-local-environment-causes-fatal-error-on-https-server/) * Plugin Support [vincentpg](https://wordpress.org/support/users/vincentpg/) * (@vincentpg) * [5 days, 11 hours ago](https://wordpress.org/support/topic/plugin-zip-generated-on-local-environment-causes-fatal-error-on-https-server/#post-18967975) * Hi, * Thank you for sharing the additional information and the generated ZIP file. * We have received the details and are currently investigating the issue on our end. Our team will review the archive structure and attempt to reproduce the behavior using a similar environment. * We appreciate your detailed report and the effort you put into helping us diagnose the issue. We’ll keep you updated as soon as we have more information or findings to share. * Thank you for your patience. * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Download Plugin] Plugin ZIP Generated on Local Environment Causes Fatal Error on HTTPS Server](https://wordpress.org/support/topic/plugin-zip-generated-on-local-environment-causes-fatal-error-on-https-server/) * Plugin Support [vincentpg](https://wordpress.org/support/users/vincentpg/) * (@vincentpg) * [5 days, 12 hours ago](https://wordpress.org/support/topic/plugin-zip-generated-on-local-environment-causes-fatal-error-on-https-server/#post-18967955) * Hi, * Thank you for reporting this issue and for providing the detailed information about your test environment and findings. * Based on your description, we understand that the ZIP file generated by the Download Plugin plugin works correctly on your local Windows installation but results in an incorrect directory structure and a fatal error when uploaded to a Linux- based production server. * We have tested the same workflow on our end by downloading plugins using the Download Plugin plugin and then uploading them to another WordPress installation, and the process worked correctly without any directory structure issues or activation errors. * To help us investigate further, could you please share the following information? - The name and version of the affected plugin. - The exact fatal error message from the live server. - The ZIP file generated by the Download Plugin plugin. - The local server environment you are using (for example: XAMPP, WAMP, LocalWP, Laragon, etc.). - The PHP version used on your local environment. - The PHP version used on the live server. - If possible, a manually created ZIP of the same plugin for comparison. * This information will help us reproduce the issue more accurately and determine whether there is an environment-specific issue related to ZIP generation or path handling. * Thank you for bringing this to our attention. We look forward to your response. * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[ProfileGrid – User Profiles, Groups and Communities] CSRF to Account Takeover vulnerability](https://wordpress.org/support/topic/csrf-to-account-takeover-vulnerability/) * Plugin Support [vincentpg](https://wordpress.org/support/users/vincentpg/) * (@vincentpg) * [5 days, 15 hours ago](https://wordpress.org/support/topic/csrf-to-account-takeover-vulnerability/#post-18967754) * Hi, * Thank you for following up and for sharing the screenshot. * This issue has already been addressed by our team and the fix was included in** ProfileGrid v5.9.9.9**. * Could you please verify the issue against the latest version and let us know if the vulnerability is still reproducible? If you have any reproduction steps or additional details for v5.9.9.9, we would be happy to investigate further. * Thank you again for reporting this and helping us improve the security of ProfileGrid. - This reply was modified 5 days, 15 hours ago by [vincentpg](https://wordpress.org/support/users/vincentpg/). * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[ProfileGrid – User Profiles, Groups and Communities] CSRF to Account Takeover vulnerability](https://wordpress.org/support/topic/csrf-to-account-takeover-vulnerability/) * Plugin Support [vincentpg](https://wordpress.org/support/users/vincentpg/) * (@vincentpg) * [2 weeks, 2 days ago](https://wordpress.org/support/topic/csrf-to-account-takeover-vulnerability/#post-18956830) * Hi, * Thank you for bringing this to our attention. * We appreciate you taking the time to report this issue. We will review the findings internally to verify the reported behavior and assess the impact. * If the issue is confirmed, we will include the necessary fix in an upcoming ProfileGrid release. * Thank you again for helping us improve the security of ProfileGrid. Viewing 5 replies - 1 through 5 (of 5 total)