• Resolved flizzywp

    (@flizzywp)


    Hey,
    does this plugin add anything that has to be taken into consideration regarding GDPR?

    As far as I can see, it doesn’t set any cookies and doesn’t connect to any external servers, is that correct?
    And when an image is embedded, it doesn’t link to the external source but uses base64 encoding?

Viewing 15 replies - 1 through 15 (of 32 total)
  • Thread Starter flizzywp

    (@flizzywp)

    On another note: Aren’t there copyright issues when an image is encoded and embedded like this? Is it possible to disable embedded images completely?

    Plugin Author Asgaros

    (@asgaros)

    Hello @flizzywp

    Asgaros Forum is safe to use in regards of GDPR. No personal data is collected or processed by the forum itself – the forum uses the existing data which is collected/processed by WordPress.

    You can disable image-embedding by customizing the WordPress editor which is used by Asgaros Forum. There are plugins out there which can be used for this, for example:
    https://www.ads-software.com/plugins/tinymce-advanced/

    As an alternative you can also add the following code to your themes functions.php file to remove the image-button from the editor:

    function remove_img_button($buttons) {
      $searchKey = array_search('image', $buttons);
      if ($searchKey !== false) {
        unset($buttons[$searchKey]);
      }
      
      return $buttons;
    }
    add_filter('asgarosforum_filter_editor_buttons', 'remove_img_button');
    Thread Starter flizzywp

    (@flizzywp)

    Thank you for your help!
    It’s a really great plugin! Very intuitive to set up. I tried 2-3 others but immediately switched back because they were too overwhelming.

    Thread Starter flizzywp

    (@flizzywp)

    Sorry, but there are a few more things I need to disable:

    I don’t want Youtube links (or any other provider) to automatically embed themselves.
    Basically, I want to disable all forms of embedded content in the forum.
    Also, I want to remove the “advanced” link editor, because it shows all my pages which is just weird.
    Can I do that?

    • This reply was modified 6 years, 1 month ago by flizzywp.
    Plugin Author Asgaros

    (@asgaros)

    @flizzywp

    The Embed and Editor functionality are both WordPress-components and not a part or implementation of the Asgaros Forum. This forum plugin just uses the existing functionality.

    If you want to change the behavior of WordPress core-components, you have to check out other existing plugins for this. I cannot directly modify those components inside the forum-plugin because it would impact WordPress and all other plugins which are using this functionality as well.

    You can find more information about WordPress embed-functionality here:
    https://codex.www.ads-software.com/Embeds

    Thread Starter flizzywp

    (@flizzywp)

    Ok thank you. But the code you provided above only removes the “insert image” button for the forum, right? Not for my normal admin post/page editor.

    Can you give me a similar snippet for the “insert link” button?

    • This reply was modified 6 years, 1 month ago by flizzywp.
    Plugin Author Asgaros

    (@asgaros)

    @flizzywp

    I guess for links it just would look like this:

    function remove_link_button($buttons) {
      $searchKey = array_search('link', $buttons);
      if ($searchKey !== false) {
        unset($buttons[$searchKey]);
      }
      
      return $buttons;
    }
    add_filter('asgarosforum_filter_editor_buttons', 'remove_link_button');

    But users can still just copy & paste a link into the editor. So it does not make any big difference if the button is there or not.

    • This reply was modified 6 years, 1 month ago by Asgaros.
    Thread Starter flizzywp

    (@flizzywp)

    Thank you. The difference is that people now can’t show the link editing menu, which is just too confusing and complex for someone who doesn’t write actual blog posts on my website.

    • This reply was modified 6 years, 1 month ago by flizzywp.
    • This reply was modified 6 years, 1 month ago by flizzywp.
    Thread Starter flizzywp

    (@flizzywp)

    Just to confirm that: this only removes buttons from the forum editor, right?

    Plugin Author Asgaros

    (@asgaros)

    @flizzywp

    Yes, it only should remove it from the forum.

    Thread Starter flizzywp

    (@flizzywp)

    And with the available hooks and filters there is no way to remove embedded content and replace it with its url?

    Plugin Author Asgaros

    (@asgaros)

    It could be possible with some kind of custom-implementation but as a plugin-author I want to avoid to “reinvent the wheel” when there are already existing solutions out there which are working fine.

    You can try to check out the following plugin which allows you to disable embedding:
    https://www.ads-software.com/plugins/disable-embeds/

    Thread Starter flizzywp

    (@flizzywp)

    I’ve tried all plugins I could find (including this one) and all PHP snippets of the first few pages of Google and none of them worked. I can still embed all external content.

    I tried another forum plugin and noticed that it does not automatically turn URLs into embeds, so I was wondering if I can do the same with Asgaros.I don’t want to use a different plugin.

    • This reply was modified 6 years, 1 month ago by flizzywp.
    Plugin Author Asgaros

    (@asgaros)

    @flizzywp I know which other plugin you are talking about. They disable it completely on purpose because they sell a separate addon which enables embedding inside of posts.

    As an alternative you can try to add the following code to your themes functions.php file:

    function disable_embeds_code_init() {
     global $asgarosforum;
     
     if (!$asgarosforum->executePlugin) return;
    
     // Remove the REST API endpoint.
     remove_action( 'rest_api_init', 'wp_oembed_register_route' );
    
     // Turn off oEmbed auto discovery.
     add_filter( 'embed_oembed_discover', '__return_false' );
    
     // Don't filter oEmbed results.
     remove_filter( 'oembed_dataparse', 'wp_filter_oembed_result', 10 );
    
     // Remove oEmbed discovery links.
     remove_action( 'wp_head', 'wp_oembed_add_discovery_links' );
    
     // Remove oEmbed-specific JavaScript from the front-end and back-end.
     remove_action( 'wp_head', 'wp_oembed_add_host_js' );
     add_filter( 'tiny_mce_plugins', 'disable_embeds_tiny_mce_plugin' );
    
     // Remove all embeds rewrite rules.
     add_filter( 'rewrite_rules_array', 'disable_embeds_rewrites' );
    
     // Remove filter of the oEmbed result before any HTTP requests are made.
     remove_filter( 'pre_oembed_result', 'wp_filter_pre_oembed_result', 10 );
    }
    
    add_action( 'init', 'disable_embeds_code_init', 9999 );
    
    function disable_embeds_tiny_mce_plugin($plugins) {
        return array_diff($plugins, array('wpembed'));
    }
    
    function disable_embeds_rewrites($rules) {
        foreach($rules as $rule => $rewrite) {
            if(false !== strpos($rewrite, 'embed=true')) {
                unset($rules[$rule]);
            }
        }
        return $rules;
    }

    I am not sure if this affect existing embedded content because WordPress caches this embedded content automatically and re-uses it. But for new links it might work.

    Plugin Author Asgaros

    (@asgaros)

    @flizzywp

    I will add a new setting for the upcoming update which allows you to disable embedding.

Viewing 15 replies - 1 through 15 (of 32 total)
  • The topic ‘GDPR’ is closed to new replies.