Hi Emmanuel, I just have being inform that your excellent plugin EG-Attachments is vulnerable to Cross Site Scripting (XSS). I use this great plugin on all my sites sines more than a decade now and I’m Very happy with it.
Can you please correct it, that would be much appreciated.
Merci ??
]]>There hasn’t been any activity on this in more than a year. Can we assume it has been EOL’d?
]]>I think that this code needs to be changed within eg-attachments-public.inc.php:
if ( 1 == $logged_users && !is_user_logged_in()) {
$url = $file_url = $attach_url = $direct_url = ( '' != $this->options['login_url'] ?
$this->options['logged_users'] :
wp_login_url( apply_filters( 'the_permalink', get_permalink( $post->ID )))
);Possible code correction replacing $this->options[‘logged_users’] :
$this->options['login_URL']
Hello
I noticed from my server error log that the function that records the clicks on an attachment to the DB (/inc/eg-attachments-public.inc.php, line 202 and following) throws the following error:
WordPress errore sul database Duplicate entry '2016-09-03 00:00:00-12816-12822' for key 'PRIMARY' per la query INSERT INTO wpat_eg_attachments_clicks (click_date,post_id,post_title,attach_id,attach_title,clicks_number) values (CURRENT_DATE(),12816,'Test Ingresso',12822, 'Potenze', 1) fatta da require('wp-blog-header.php'), require_once('wp-includes/template-loader.php'), do_action('template_redirect'), call_user_func_array, EG_Attachments_Public->manage_link, EG_Attachments_Public->record_click
This is because my WPDB table prefix isn’t the default value “wp_”, but “wpat_”.
I suggest using the $wpdb->prefix var instead of the fixed string “wp_” in line 217 of the aforementioned file:
$sql = $wpdb->prepare('SELECTclick_id,clicks_number FROM‘.$wpdb->prefix.’eg_attachments_clicks` WHERE click_date=CURRENT_DATE() AND attach_id=%d AND post_id=%d’,
$attach_id, $parent_id);`
Kind regards
Kind regards
]]>Hi,
A very strange thing is happening on sites I develop on a Mac (MAMP) the filetype icons don’t show, but when I migrate it to the domain (typically a Service Provider running Linux) the file-type do show.
Is there a fix for this?
Best regards,
Jackey
I’m using WordPress on 2 sites with EG Attachments and with two different themes.
The most recent site is a 4.4.1 with Smartline Pro theme.
The EG ‘part’, where the file(s) are shown, conflicts with the featured image of the blog post, they don’t show side-by-side, but one is placed on top of the other.
Please see: https://imgur.com/KZlN92m
]]>For awhile now, I’ve had a problem where file sizes over a certain amount (not sure exactly – maybe 20-30 MB?) would not work. When the file is downloaded (using Direct mode), the file size appears as 0 bytes.
I finally found a workaround — disable the “Force Save As” mode, either in the plugin settings or in the shortcode. Once I do that, the download works (I’ve tested up to 150MB).
However, some file types now open inside the browser, and I would prefer they are downloaded.
Emmanuel – can you look into a permanent fix for this issue?
Thank you
Paul Blacquiere
PS – I recently switched to the new ‘Metro’ icons — they look great! ??
]]>EG-Attachments doesn’t behave very well when i try to attach the same file to more than one post or page.
Attaching a file to the second+ location via the Media button, using either “attach” or “insert into post” doesn’t save the file to the page/post.
The “Multiple” modal in the list posts screen is often not accurate, e.g. it will only show one location the media is attached to. Adding or removing attachments via the modal doesn’t work either.
When detaching files from a post the media stays attached until i delete entirley from the WP site and re-add.
Any help, suggestion, whatever would be appreciated! I am using the plugin extensively in a free resource library and would really hate to have to move to another plugin as we use EG-Attachments on nearly every page and post.
]]>Hi!
Currently I can show 3 types of attacthment
* All
* Documents
* Images
I’m using Documents that exclude images, Is there a way to exclude Videos too?
I was looking line 382 in eg-attachents-public.inc.php to exclude videos in
if ($where != ”) {
$where = str_replace($wpdb->posts.’.post_mime_type LIKE \’notimage/%\”, $wpdb->posts.’.post_mime_type NOT LIKE \’video/%\”,$where);
}
return $where;
but I can’t make it work.
Can you give me some help?
Thank you!!
]]>I upgraded to wordpress 4.3 and I no longer see the widget for EG-Attachments. Am I missing something?
EGA Version 2.1.3
]]>Is there a way to add an external link to the list instead of a file? I have lists populated with files but need to add a link to an external file within the list. I am currently having to do a separate section that is manually coded.
]]>Hi Emmanuel,
I have version 4.0.7 of wordpress installed but I can’t open in a new page with your plugin. The field target=”_blank” is selected but it open the file in the same page.
Thank for your answer
Roberto
Hi,
Thank you for this plugin!
I am looking for a way to customize the display of the files. Overall, EG-Attachments is very good. It lacks only the management of finer thumbnails.
– Document Gallery is very good but not great thumbnails for details.
– EG Attachment is very good for the details but not great for thumbnails.
Is it possible to get the same rendering (information visible in the screenshot) with EG-Attachments ??
I am recover information from Document Gallery to put in place thumbnails of EG-Attachments …
Screenshot: https://www.casimages.com/i/150729122028449931.jpg.html
Thank you (sorry for this bad translation) …
Julien
When I first used EG-attachments on my dev site it worked fine.
Now though, it only shows filename, and caption rather than like in the screenshot:
Title, Description, File and size…
Not sure what happened.
Link: https://goo.gl/cge4B3
I have tried reinstalling the plugin, etc.
I also wanted to use the plugin with another plugin to have an easy to attach button like john christophers Attach plugin, but I thought maybe it was the other plugins conflicint with EG-attachments.
Not sure exactly what’s going on at all ??
Problem:
When a download a specific pdf file, made by bluebeam with specific markups, it always gives a corrupt file when I download it.
When I don’t use the plugin, the file doesn’t go corrupt by downloading.
My solution:
Go to the plugin settings and chose a linktype as “file” and not “direct”.
Replication Steps:
Upload a file to a post that contains an @ symbol in the filename. e.g. [email protected]. Insert the attachments shortcode, and include the ID for the post.
Publish, then view the post. Attempt to download the file.
At present, appears to throw a 404.
Found on EG Attachments v.2.1.3.
]]>hello,
I have a website with old pdf files attached to a custom post type.
when activating your plugin, only new attached files are displayed in the widget or by short-code.
is there any possibility to display old attached files?
Firstly, I really like your plugin.
But I can no longer save some settings make to the Attachments widget. Dropbox select settings will not “stick” and go back to their default value after clicking “save”. Checkboxes, the title, etc. work fine.
Even when I go into the database and correct the serialized data for the option to values I know to be correct (template from “large” to “small”, for example) the setting is not saved—in fact, the widget is removed from the sidebar (though the setting remains).
I have deleted and re-installed and still have the problem. Any help is appreciated. Thanks
]]>Hi I have a template where i want the post with the download attachments on the right in a sidebar, but your shortcode only works inside the post.
Is there a way to do this?
Ps. your plugin is amazing and have searched a long time through others before settling on this.
]]>I can’t seem to get any attachments to show in the Documents List no matter what I do. It always seems to say “No attachment available for this post”. Existing pages which were working still work but it does not seem to work for new posts/pages.
]]>After the last update, every pdf icon in the attached files has been replaced with a document icon. How can I resolve my problem?
Thanks in advance
Hello,
I just made a full update of the site from a very old version and the shortcode completley stopped working. I have gone thru the settings and can’t find what may cause this. Any ideas what I may be missing?
]]>Hye,
using WP v4.1.1.
i have to add PDF attachments to the posts.
Am wondering how to add new attachments as i dont see any ‘Add Attachment’ button or anything.
Also when i added the pdf file via the ‘Add Media’ it inserts the media in the post content only which i dont want.
Attaching a screen shot of the Edit Post page
Click here to see the Screen Shot of Edit Post Page
Hi again Emmanuel,
I’ve chosen the ‘Medium’ template on the Settings/Auto Shortcode page. I’ve also chosen to display the thumbnail.
This works fine on the individual post pages (icons display as 32×32 and the photo thumbnail is also 32×32).
But on my home page (a regular WP ‘page’) where 8 posts are displayed the icons are displayed at 66×66, and the photo is 150×150. I’ve read the FAQ and understand the photo is probably being distroted by my theme CSS, but why are the EG icons displaying at different sizes?
Thanks!
]]>Ver. 2.1.2
After upgrade counter was zero, and stopped counting.
https://www.viadeiboschi.gov.it/wp/consiglio-di-istituto-10
Thnks for your attention
]]>Hi
The description fields have stopped appearing on attachments. Version 2.1.1
https://www.dewiscil.org.uk/recruitment/vale-of-glamorgan-and-bridgend
If I implement automatic detection then they display correctly but also on pages where I don’t want them. Ticking the box disabling auto where the manual code exists makes no difference. I’m using this shortcode.
[attachments size=medium fields=”title,description,date” orderby=”date DESC”]
Suggestions gratefully received.
Jeremy
https://www.webswonder.co.uk
Image downloads not appearing when I choose “Document type: All”
As title ??
I created a brand new WP blog, installed this plugin, then uploaded a word doc and an excel xls to the default sample post. I’m using ‘auto shortcode’ to add the list of attachments after the post.
Both attachments appeared as expected at the end of the post. I then uploaded an image to the same post. However it doesn’t appear at the end of the post along with the doc and xls.
If I choose “Document type: Images” I can see 1 attached jpg. If I choose “Document type: Documents” I can see 2 attached files, doc and xls. However if I choose “Document Type: All” I only see the doc and xls, no jpg.
Any ideas?
]]>Hi,
‘Show attachments for everyone, but the url, for logged users only’ option works only with 1.9.5 version.
There’s a lock shown at the list when the user is not logged in but everyone can download the attachment without login.
Could you please fix it?
Thanks
M
Hi Emmanuel,
I want to deinstall EG-Attachments.
This fails:
Parse error: syntax error, unexpected '->' (T_OBJECT_OPERATOR) in /www/htdocs/wp-content/plugins/eg-attachments/uninstall.php on line 27
Can you please assist?
Kind regards,
J?rn.
As of today I get broken downloads – but not for all files.
https://hotel-oberkirch.de/en/news/our-newsletter/?aid=9534&sa=1 – you will get a broken pdf – while the file this download is referring to is quite ok: https://hotel-oberkirch.de/wp-content/uploads/2015/02/The-Oberkirch-Telegraph-Spring-2015.pdf
Please advise. Thank you.
]]>