So Close to Perfect

  • This plugin was almost the answer to my 9th attempt at finding a simple plugin for this basic task.

    Everything worked great except for the image upload. You had posted on a previous support thread that the problem is because of the user role; however, the whole reason we are all using this plugin is because we want visitors to post without any regard for USER registration or USER role.

    Long story short, if this thing could post a picture with the submission, I’d pay $25.00 for it (or donate $50.00).

    https://www.ads-software.com/extend/plugins/djd-site-post/

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author djarzyna

    (@djarzyna)

    Yeah, I know it’s a pain. I really would like to have this thing working that way myself. So yes, I am going to work on a solution.

    Plugin Author djarzyna

    (@djarzyna)

    I thought about it and came to the conclusion that allowing unregistered guests to post (without media upload) is as far as you should go. By allowing unregistered users to upload media (or any other file) you open the door to various problems – with malicious code the worst of them. It’s a case of simplicity vs security. And I think it’s a wise move to put more weight on security. Imagine your site becomes very popular – and we all want popular websites, right? – with just a few hundred posts a day. Are you really prepared to inspect all those posts and attachments in detail? This is what you have to do if you open up to guests completely.

    Now, if you have users that have to contribute something valuable to your site do you really think that it’s a big annoyance for them to register once and login afterwards?

    You might be an experienced WordPress user and web admin who knows how to solve the problems created by a plugin which is way too open. But do you think this applies to all the users that downloaded this plugin so far? I believe the majority of users expect any plugin to be secure. If I open up to guest uploads this plugin by itself won’t be secure anymore. If someone less experienced uses it and disaster strikes he or she will ultimately blame the plugin. Not good.

    Maybe there is a way to allow this kind of media uploads and still be on the safe side? I have no idea yet. Any suggestions?

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘So Close to Perfect’ is closed to new replies.