Webartisan
Forum Replies Created
-
I also have the same notification on several sites from my Wordfence security alert.
I clicked “See how the file had changed” in the notification on the WF scan page and it seems to me that is something related to the new maintainers of the plugin.Anyway a note from the plugin author would clear these doubt.
Finally I managed to solve by using an “autocomplete” jQuery function that automatically fills my custom field with the same value of the city dropdown. The sort order is made on that field, added in the core plugin.
Sorry, I didn’t realise this was something directly connected to premium add-on. Just though it was simply related to Listing view in the core plugin.
Thank you.
Hello everybody following this thread.
I have the same problem. Just wanted to add some details about the function that is supposed to generate the query:wfDB->querySingle() wp-content/plugins/wordfence/lib/wfDB.php:10as stated by Query Monitor.
In my case the query time spans from 0.1800 and 0.2500 secs.Thank you
Forum: Plugins
In reply to: [Contact Form 7] language selection is goneI also find this is a problem. It was really helpful choosing the language of the form and and finding the messages pre-loaded.
The problem were that we usually deactivate “Slug” field for non-administrators. After we reactivated it for Editors too, the snippet worked again.
It would be good having a form of control when javascript selectors can not get the value of Slug.
Forum: Plugins
In reply to: [Custom Content Type Manager] Lost confidence of author/pluginSamuel Wood (Otto) is a member of the WordPress.org Team, he is not the plugin’s author (who is fireproofsocks).
The WordPress Team had to edit the plugin (reversing to the last “good” version 0.9.8.6) beacuse the original author does not reply since a long time and other “authors” could have made malicious modifications.
Read this post https://wordpress.org/support/topic/version-0989-is-safe?replies=3
I really lost confidence in original author fireproofsocks who used to be very reactive in helping with bugs/request but now he no longer is.
Forum: Plugins
In reply to: [reCaptcha by BestWebSoft] Translation in french generates error in jsThank you.
Best regards,
WebartisanHi Seb,
no the files haven’t come back so far but we’re monitoring the situation with Wordfence and also third party intervention.We also had the same problem on our website.
Every .js file (in wp-content but also in wp-admin and wp-includes folders and sub-folders) got injected with similar code at the end.We could restore a previous backup and have all the .js back clean but after a random amount of time they got “enqueued” with the malicious code again.
A more detailed scan revealed the presence of two files in the core WP folders:
/wp-includes/class.wp-date.php /wp-includes/functions.wp-date.phpThe names of these files look like typical WP core files but they’re absolutely not part of it (compared to WP 4.4.2). We still don’t know when and how they were added to the filesystem.
The first file can be called from a browser and requires a password. Once activated, I suppose, it loads content from the second file that is probably responsable of the .js injection.
During a couple of scan (before and after cleanings) Wordfence’s comparison of core WordPress files against originals in repository noticed about apparently modified files (false positives because we’re using WordPress in French so some files are necessarily different) but did not considered the two added .php files above.
I would suggest to take into consideration also the number of files in the folder being scanned, not only the difference in content of each file and also somehow to recognize the language version of WP installed in the system.
Thanks for this suggestion.
I had the same need to include a custom CF7 form inside the wp-maintenance/views/maintenance.php template and your fix helped me a lot.The reason why I’ve done that was that with the standard contact form, on Firefox, users don’t get the feedback of “Mail sent to webmaster” and keep clicking on “Send” again, so we get many copies of the same email.
Would kindly ask the plugin developer to take into consideration this in one of the next releases.
Forum: Plugins
In reply to: [Custom Content Type Manager] Error when updating to the last versionUpdate to 0.9.8.2 worked for me (on WP 4.2.2)
@dharmawebstudio By any chance do you use WPML for translations in your website?
I was having the same problem and while debugging with Firebug I saw that a javascript error WPML (“pagenow not defined”) was blocking JS execution in the pop up.After upgrading to the last version 3.1.9.7 the problem went away and the Attach NextGen Gallery pop-up got visible back again.
Hope this could help.
Too bad backend is not translation-ready. We use WPML and have editors of a website who do not speak english so they can’t use the plugin at its best.
Are you maybe planning to put some __() _e() inside the admin/ files in any future versions? I could provide translations to italian (and french) for this plugin I’m discovering lately.
Thank you.
@cais – Thanks for your reply. I’ve tried first the Reset option as you suggested, this reset everything to default including Roles&Capabilites that went all to “Administrator”.
Then I tested with my colleague’s Adminitrator account and didn’t work.
I also tried to remove NGG and re-install again but no luck.
I even discovered that this admin (Administrator) user can neither edit a NextGEN gallery as well (i.e. Manage Galleries /wp-admin/admin.php?page=nggallery-manage-gallery&mode=edit&gid=1&_wpnonce=55fe80487f). The page says only that “Connection has expired” and links to login but I’m still connected.
As before, if I log in with my own account (Administrator as well) everything works fine.
Thank you for any additional hint.