Steve Truman

Hello @wpkevin12

Thank you for taking the time to write this detailed review, much appreciated.

Steve

Hello @alexdx @wpkevin12

I have been contacted by the Wordfence team. Please upgrade to the Wordfence version 7.7.1 and you will see that a3 lazy Load no longer appears as a vulnerability in the scan results.

Thank you to the Wordfence team for quickly resolving the issue. @wfmattr

Steve

@wpkevin12 @alexdx,

Ok so we have put out version 2.6.1 with what we thought may have been triggering the Wordfence Vulnerability scan report – but no it was not that.

I am sorry – we just have to wait now for Wordfence to actually inform us of why they are returning that. There is no vulnerability that we are aware of at this stage. If we did know we would fix it. I mean we are Wordfence Premium customers and run Wordfence and a3 Lazy Load on our own and all of our customer sites, so I’m just as keen as anyone to get to the bottom of this.

I am tagging the Wordfence team here, to try and get some help because I cannot get a response from them via email and I am locked out of my Wordfence account after doing just 2 login attempts and a password reset and attempting to log in with the new password.

@mmaunder, @mbarry, @wfryan, @wfmattr

Thank you
Steve

• This reply was modified 2 years, 5 months ago by Steve Truman.

Hello @wpkevin12,

Thank you – we have been able to get the same vulnerability message from running a Wordfence scan – it is for a ‘known’ vulnerability which is news to me. I have emailed Wordfence support to report the issue and as them what it is about.

We are putting a new version 2.6.1 out that has a very low-level vulnerability patch that we were aware of in the plugin framework and guessing that is what is causing the issue.

As soon as it is out we will test and see if that is it while we wait to hear from Wordfence.

I’ll keep you and @alexdx updated on here.

Thank you
Steve

Hello @alexdx

Thank you for your report – please go to our website https://a3rev.com/contact-us-page/ and send me an email with the details of what you are seeing.

In the email please send the details of what you have found.

We need to know what the vulnerability is, how we might reproduce it and a site you are seeing the issue on.

Please don’t post any of those details on here so we have the time to resolve the issue and put out a patched version of indeed it is not a false positive.

Thank you
Steve

Hello @awr10e

Thanks for the link to the site. I don’t see any classes have been added for excluding see screenshot

https://i.gyazo.com/77086ff52e602e94197af3c558eccfb7.png

I don’t see the skip-lazy class for those images

I do see the slider is showing fine with lazy load, why do you want to exclude the slider images from lazy load?

Thank you
Steve

Hello @kevinin2d,

We cannot reproduce that error. Maybe your server or something is blocking creating a dynamic CSS file, and so it is not found on the front end.

Please go to plugin settings and hit the Save Change button at the bottom and then check it again to see if the issue persists. If it does please supply a link to a page or post where you are seeing that issue.

Thank you
Steve

Hello @kaizen502

Thanks for the link – I can see that on your site the iframe is using src without http or https, it is just using //www and lazyload does not currently support that, it is the reason the videos are greyed out.

You can see that in this screenshot of the iframe code
https://i.gyazo.com/6d7f765115b69666d7bd8d5363f8167a.png

It is the same for their youtube link – see screenshot
https://i.gyazo.com/a7d3379694f4ea2a7cbbcf42b6d95573.png

We will update lazyload soon to add support for src without http or https method.

While you wait for that please turn off Lazy Load for iFrame and video from the Plugins dashboard.

I’ll update you on here when that is released.

Thank you
Steve

Hello @haji15

Thanks for reaching out – no sorry Page View Count does not track individual users or their page views.

Thank you
Steve

Hi @vacklin,

Thank you for the 5 star rating. We have never added a backend stats interface as we believe that best practice for any website admin is to be getting those stats via Google Analytics.

Our plugin is just for frontend display – social proof and that sort of thing, although we have many users who only use our plugin to quickly see the number of views on any page or post.

For anyone wanting to see full stats on page visitation, they should be using Google Tracking code with a plugin that shows the basic traffic stats on the admin dashboard. Indeed we use this free plugin for that on our own clients websites.

That plugin is very easy to use and has great documentation, including on how to set up a google analytics account and generate the tracking code.

I hope that helps you a bit.

Thank you
Steve

Hello @mrtuxedoode,

Thank you for the link – I have checked and also had a team member check from a different location and do not see the issue.

We can see the Red Background of the Cardholders and the lazy load spinner – when I go back to the home page – But the images always load.

I would suggest that you check it from a device that you have not checked it on before and you’ll see it is fine – because I think the reason is that it is cached in your browser. You could open your browser inspector and with Network – Disable cache checked – go to the home page and go to another part of the site then return to the home page = that will clear the browser caching of any scripts.

The other suggestion is that you can use the Image Load Threshold to set it at 300 which means that images start to Lazy Load 300px before they get to the viewport – see screenshot

https://i.gyazo.com/7d553c0f3b9282ca3c6371e3f578c962.png

The other thing that I would suggest is to move the Cards down the home page a bit so they don’t load in the screen view – If it was possible (which it is not) you would exclude the first row of card images from Lazy Load. But you can see if you add the Threshold as I suggest that the next row of cards would load below the fold – and be there when the user scrolls. This is what I am talking about.

https://i.gyazo.com/b0303fe9ab50cb756d9f970f65bd86b8.jpg

I hope that helps

Thank you
Steve

@krishnsahadevan

Thank you – is that this PDF plugin?

I’d need to download it and install on a local with Clean WP and WooCommerce install to debug the issue.

When you say the images are broken in the PDF – is the PDF sent as an attachment with the new order notification?

When you say images – do you mean the Logo – because the screenshots for that plugin do not show and image thumbnails?

Another question – when you check the PDF on the My Account > Orders – is the image broken on the PDF there when you open it?

Thank you
Steve

• This reply was modified 2 years, 8 months ago by Steve Truman.

Hello @krishnsahadevan

Sorry there is not enough information on your ticket for me to help you.

First of all – what is making the order? Is it WooCommerce?

Second – what is making the PDF? Usually, that will be another plugin that does that.

Also can you please confirm what versions of the ecommerce plugin – pdf plugin and WordPress you are using.

Thank you
Steve

Hello @matheusfd

Thanks for getting back to me. I have read the doc that you linked to, and would be happy to buy the Manual Donations add on – except it does not do the 1 thing we want it to do – update the donors card on the frontend.

That’s a shame.

Anyway, thank you for your time.

Steve

Hi Guys,

Just as a follow-up – I probably should have mentioned that while no donation was created on the site when the Donation was made via a Donation Card – the Donor was created.

See the Screenshot below – the Donor was created at the time of the Donation – but no amount was recorded.

https://i.gyazo.com/6deee37483f70824371e95aabff1637f.png

My client would really like to ‘recover’ the Donations so they can show them on the Donation Card Totals. If we can manually create the donations is there a way to edit the number of donations and the Total Donated that show on the cards?

Thank you
Steve