Sumit Singh

Sorry, I meant when this setting is ON the terms should match exactly.

For example, if the search term is “apple” results will include only entries with the exact word “apple”. Entries containing “apples,” “Apple pie,” or “pineapple” will not be included, because these are not an exact match.

If this still does not answer your question, please explain in details with website link and search term and the results you are expecting.

Thanks

• This reply was modified 3 months, 2 weeks ago by Sumit Singh.

Hi,

That’s a known limitation. To keep this plugin fast I am giving up some features. You can search multiple words from a single tag but combining tags will results in this issue unless you choose OR relation.

This is a long pending issue so far I did not found easy solution without changing the design or query speed.

I hope in future I can fix it.

Thanks

Thank you!

Thank you!

Hi,

Just to let you know this should be fixed with latest update i.e. v2.2

• This reply was modified 3 months, 3 weeks ago by Sumit Singh.

It must be fixed in version 2.2

Sorry, somehow I missed this topic. Did you find the plugin?

To answer your question yes.

Hi,

Sorry for the delay.

Search results layout is out of scope topic. This plugin only control the search query. The representation of results from the query depends on theme/plugin you are using to control the search results page.

While it is possible you can use plugins like https://www.ads-software.com/plugins/pdf-thumbnail-generator/

I hope it helps.

Hi,

Sorry for the delay.

When match term exactly is ON the keyword should match exactly with the search content, title etc whatever is selected in the settings.

Please let me know if you need further help.

Thanks for the report.

Indeed, it is not needed. This has been fixed. Please update to the latest version.

Thanks for the report. This has been fixed. Please update to the latest version.

I think you misunderstood my statements again. ??

I mean we need data sanitization when it is being used inside the App to display something or being saved or used for external API/request. In simple terms when it can affect the output of application.

Here, actions are predefined names to trigger the certain code coming from code not from user. Providing the wrong data will not trigger them but can not harm the application. If you think it is security issue, please provide the steps I will fix swiftly.

Now you says $_REQUEST can contain anything and can come from anywhere. This is correct. But can you explain me a reason why a user will modify the requests using devTools or by other means? Or why a plugin/theme author will send an invalid action name? There is no accidental trigger by user that can happens in case of input forms.
The only intention when user will do this is to harm the site and gain access. Right?

So basically your site is under attack by unknown attackers and you want data validations not sanitization. Both are different things.
But what worries me that instead firewalls you are asking third party authors to patch the code so they can’t harm the system.

Even I fix this (which I will do in next version) the original issue is not fixed your site will keep getting the request and this will load the WP/plugins code, will use server resources, it will just suppress the error.
Anyway, it is your call.

About the this error, I will fix it but I will release it only with major update as it is very low priority issue. If this is was a common warning someone else could have reported this in 10 years. Only you are having this.

PS:- The handbook you shared is about displaying the data or saving it. You can see here https://github.com/WordPress/wordpress-develop/blob/trunk/src/wp-admin/admin-ajax.php how WP itself treat the actions. It just ignore the non scalar values, same I will do.

Thanks

• This reply was modified 8 months, 1 week ago by Sumit Singh.

Also what is point of sending this action when response is 400 bad request?

Hi,

Sorry but sanitization is needed for data entered by user not the data coming from code itself.

not just from a third party theme or plugin but also by any constructed request to /?action=

Not it is only called for Ajax request not just for any request with action parameter.

I would first like to know from where this action being generated? Do you have a public plugin/theme so I can replicate it?

Unnecessary if else increase the complexity of code.

Thanks

Hi,

The error is because of Ajax action name is not a string but an array.
I am not sure if this is a plugin or theme. Can you check with default theme if you see the issue? Or disable the plugins one by one to see which plugin sending the wrong format?

Because as per standards action should be a string not an array https://developer.www.ads-software.com/plugins/javascript/ajax/#action

Thanks