Thanks for great software
Just wondering if this plugin has ever been fuzz tested for user input? I’m not expert in injection, but I notice HTML tags enter into the database fields from user input from the front end:
Would it be wise to consider parsing text lines through sanitize_text_field()
and text areas through sanitize_textarea_field()
?
https://developer.www.ads-software.com/apis/security/sanitizing/
]]>I have a website with a taxonomy called “db_themen” with different values. The posts from from my webiste are assigned to these taxonomy values from “db_themen”.
On my website, a user can choose in his frontend user profile which “db_themen” he is interested in and save this input. This works through an ACF field of the type “Taxonomy” (field name: “meine_themen”), which is linked to the taxonomy “db_themen”.
According to his input, only posts that are assigned to the same taxonomies are supposed to show on the frontend archives (Elementor archives Loop Grid) for this user.
I tried to code something within my functions.php, but I am a total beginner. The only thing this code does is hide all posts entries in the backend:
function abfrage_meine_themen($query) {
if ($query->is_main_query() && is_user_logged_in()) {
$ausgewaehlte_themen = get_field('meine_themen', 'user_' . get_current_user_id());
if ($ausgewaehlte_themen) {
$tax_query = array(
array(
'taxonomy' => 'db_themen',
'field' => 'slug',
'terms' => $ausgewaehlte_themen,
),
);
$query->set('tax_query', $tax_query);
}
}
}
add_action('pre_get_posts', 'abfrage_meine_themen');
Can someone please tell me where my mistakes are? I am sure there are several
]]>
Hi Guys, We are quite new to WordPress, but we managed to set up our website and connect it to our database. We have also succeeded in displaying data from our database using a global $wpdb; call. Now we want to take it a step further and display sql output based on user input
I have set up a WPForm in WordPress with 2 main categories, Age Group and Risk Profile. In the Age Group category, there are 4 options the user can choose from
Under 40 (if user chooses this i want the value 35 to be saved)
Mellem 40 og 55 (If user chooses this i want the value 50 to be saved)
Over 55 (If user chooses this i want the value 60 to be saved)
Pensionist (If user chooses this i want the value 65 to be saved
After that, the user has to put in his risk profile:
Low risk(if the user chooses this i want the value “Low” to be saved”
Medium risk(-||- “Medium”)
High risk (-||- “High”)
Then the user hits submit and then i want to display him the sql code. It could look like the below. So the users input should be passed to P.age_group and P.risk in the where clause.
SELECT
R.portfolio_id,
P.portfolio_name,
CONCAT(FORMAT((EXP(SUM(LOG(1 + R.return_value))) - 1) * 100, 2), '%') AS total_return_percentage
FROM
returns R
INNER JOIN
portfolios P ON R.portfolio_id = P.portfolio_id
WHERE
P.age_group = 35
AND YEAR(R.date) = 2019
and P.risk='Medium'
GROUP BY
R.portfolio_id,
P.portfolio_name;
How can i make that happen?
Also as of right now we are only using wordpress, plugins & forms in the web. Meaning we have not downloaded anything. Do we need to download stuff in the long run or can all of it run through the website?
]]>In my case, if a user types ‘london’ in the search box they are presented with:
Hen party London
Greater London
British Museum London
Natural History Museum London
London – West End
London Treasure hunts
These contain 1,6,3,3,3,6 products respectively.
1. What determines the order in which these categories appear? – as I might have expected those that begin with ‘London’ to appear first
2. What, if anything, can I do to influence or change this order?
3. If the user types ‘Hen London’ then no results appear. Do you only accept exact matches of consecutive characters? Or is there a way to influence or change this?
4. If the user searches for ‘hen’ then words containing ‘hen’ are also returned. How (if at all) does the algorithm differentiate between words that start with the search characters (e.g. hen, henna) end with the search characters (e.g. then) or contain the search characters (e.g. phenol)?
5. Is the user able to do a Boolean search?, e.g. ‘Museum OR History’; ‘London’ AND ‘Museum’
Some of these are fairly fundamental to usability but I couldn’t find any information in the documentation – hence my questions.
Hope you can help please.
]]>so I have a table on my website and I would like to allow users to change values row by row in boolean columns directly in the front-end table and update their input in the database. Once they hit refresh their input is retrieved and displayed correctly.
is that possible with the plugin?
thanks in advance for your help
]]>Here’s an example: https://www.checkli.com/checklists/view/5f6ba4b76c6d5
]]>Complete newbie so hope this is in the right place.
Is there a way to have a user fill out a form and then make a new page/post from that form?
i.e. if Sam filled out a form asking what their favourite dog and colour was, could you create a new page/post titled Sam’s favourites and list their choices?
Thanks for any help!!
]]>