[email protected]
Forum Replies Created
-
To add one more note above, you may find this ModSecurity rule also causes you some issues:
IncludeOptional /etc/apache2/conf.d/modsec/modsec_owasp/modsecurity_crs_50_outbound.conf
I knew I just needed to actually use the forums for the first time in probably 6 years and I’d immediately figure out my issue after searching/troubleshooting for 4 days.
For anyone else who runs into this, the issue ended up being a new ModSecurity rule that was added.
The line in the ModSecurity config: SecUploadDir /var/asl/data/suspicious
Was throwing this rule ID: 1000005: Access denied to PHP scripts under WordPress uploads directory.
Request: GET /wp-content/uploads/code-execution.php
Action Description: Access denied with code 406 (phase 2).
Justification: Test ‘REQUEST_FILENAME’ against ‘@rx wp-content\/uploads\/(.*)php$’ is true.While testing, I disabled ModSecurity via cPanel for one of the 90 sites that was impacted… and it immediately allowed me to edit with any editor I wanted.
I then logged into WHM and began reviewing the rules (located here: Home / Security Center / ModSecurity? Tools ? Edit Custom Rules)
I haven’t removed the rule entirely at this point. I need to further understand the impact and/or adjustments that can be made, hopefully some method of safe-listing that specific action if it’s coming from an editor, versus an actual malicious upload… But at least now I know the cause!
Good luck for anyone else who has this issue.
Running up against this just this week. Impacts not only sites I have running Avada, but also other sites that are using different page builders like WPBakery and Elementor. Across all different versions of WordPress. New/Old… New versions of the page builders/themes, old versions of the page builders/themes…
I was thinking perhaps @socolavn95 was onto something with the SSL, but upon initial testing, that hasn’t helped.
My PHP vars are all set correctly, and even doubled just to test, with no change.
Subscribing for hopefully additional thoughts/troubleshooting advice.
Oh, quick edit to mention that Avada status screen shows everything is good to go. (Also, yes, I’ve gone through the ‘disable everything and test’ with no change, unfortunately.)
- This reply was modified 2 days, 23 hours ago by [email protected].
Additional field support would be great. I’d love to have them enter 3-4 items from the get go in addition to name/email… Phone, Company Name, and perhaps a drop down of common issue types for their primary reason for the chat (Sales, Support, Billing, Other.)
I’ve already modified a few hard coded things along side the transcripts plugin… but I don’t want to make it difficult to upgrade down the road either. So… FEATURE REQUEST please ??
Forum: Plugins
In reply to: [WP Live Chat Support - Email Transcripts] Removing calls to Gravatar iconsA basic work around, disable “Display name and avatar in chat” from the WP-Live Chat Settings –> Chat Box tab. You do lose the functionality of having a name attached to the chat, but for the time being it does the trick…
Forum: Plugins
In reply to: [Contact Form 7 reCAPTCHA Extension] reCapthha php errorAnother verification for Xiradorn
I’ve used this on 3 sites now as a fix.
WP Version 4.3.1
CF7 Version 4.3
reCAPTCHA extension v0.1.0Thanks!
Forum: Plugins
In reply to: [Job Manager] The wait's OVER – Job Manager – update is here!.bvenkat
I would suggest first reviewing the documentation here: https://www.wp-jobmanager.com/documentation/
I believe you want to be in the Job Manager settings –> Display Settings tab. If you scroll down you will see a pre-populated “Job List Template” – If you want to change how the jobs are displayed, everything you need is on that page…
If you’re still struggling, I would suggest opening your own thread as this thread pertains to an update and not to the specific usage of the plugin itself.
Forum: Plugins
In reply to: [Job Manager] The wait's OVER – Job Manager – update is here!.FYI – Your actual “donate” button on the website doesn’t work… but the text link does.
Forum: Plugins
In reply to: [Job Manager] The wait's OVER – Job Manager – update is here!.You have no idea how surprised I was when I read “an update to Job Manager is available” Bravo Thomas! I’ll be testing on a few sites. Looking forward to some bug fixes from years past!
Looking forward most to Application Pagination ??
Forum: Plugins
In reply to: [Gallery Slideshow] Random orderMy man!
Thanks sir.
Forum: Plugins
In reply to: [Job Manager] Images from an Upload FieldUpload Field = field that a user uploads a file to YOU… i.e. a resume, references, etc…
If you want to add your image to the top of the job listings page/individual jobs you’ll want to go to the Settings –> Display Settings tab.
Log into your wordpress site, then copy/paste this URL to find the page I mean (Change the URL to fit your site obviously…)
https://yourwebsite.com/wp-admin/admin.php?page=jobman-conf&tab=display
From there you’ll scroll down to the “Templates” section and you’ll want to edit things outside of the loop so it only displays once..
Here is an example that I use for my “JOB LIST TEMPLATE”
<div style="float:right; border:1px solid #ccc; padding:5px; margin-left:10px;"> <img src="https://YOURWEBSITE.COM/YOURIMAGE.jpg" height="180px" width="180px"> <br> </div> <table width="500px"> <tr> <h1>Find your new career today! - Apply Below!</h1> <li><b>Free to Apply!</b> - Anyone can apply, we'll add you to our potential candidate list and notify you of any matches!</li> <li><b>No Guess Work</b> - We only match you with positions you're a great fit for!</li> <li><b>Contract Assistance</b> - We'll help guide you through the interview and finalizing all of your details.</li> <li><b>30 Day Guarantee</b> - If your employee does not work out, we'll find you a replacement for free! (Within the first 30 days)</li> <p> <p> <h3>View our current openings below:</h3> <br> </tr> </table> <table width="960px"> <tr style="height:30px; background:#1c80b7; color:white; padding-bottom:10px;"> <th width="500px" style="text-align:center;font-size:18px;">Position Title</th> <th width="150px" style="text-align:center;font-size:18px;">Location</th> <th width="100px" style="text-align:center;font-size:18px;">Quick Apply</th> </tr> <tr> <td><p> </td> </tr> [job_loop] <tr> <td style="text-align:left;font-size:18px;">[checklist]<ul><li>[job_link][job_title][/job_link]</td> <td style="text-align:center;">[job_field4]</td> <td style="text-align:center;font-size:18px;">[job_apply_link]Apply Now[/job_apply_link]</li></ul>[/checklist]</td> </tr> [/job_loop] </table> THIS EXAMPLE TEXT WILL SHOW BELOW THE JOBS LIST (Note it's outside of the job loop...) [if_job_page_count] <div class="job-nav"> <div class="previous">[job_page_previous_link]Page [job_page_previous_number][/job_page_previous_link]</div> <div class="this">Jobs [job_page_minimum]-[job_page_maximum] of [job_total]</div> <div class="next">[job_page_next_link]Page [job_page_next_number][/job_page_next_link]</div> </div> [/if_job_page_count]
If you’re looking for a fantastic job board / job application / applicant tracking system and you don’t expect to get hundreds of applications…
YES! It’s fantastic!
If you’re looking for something that writes to it’s own SQL tables, and can handle thousands of applications over a year… No… It’s not going to be able to grow with you.
For smaller clients it has worked wonders on many themes for many years…
On larger clients… it just can’t keep pace with their needs.
Forum: Plugins
In reply to: [Job Manager] Applications must not be stored in the database – how?They are stored in the database under the postmeta table… I’m sure you could disable the DB write, or alternatively disable the application display to resolve your issue…
Forum: Plugins
In reply to: [Job Manager] [Plugin: Job Manager] private CV'sThis is old, but I might as well mention for anyone else who runs into this issue, create a .htaccess file in your uploads directory with just this one simple line
IndexIgnore *
Anything under the /uploads directory will not not be indexed or displayed by the server. This will not only stop any CV/Resume from being listed… but will also hide ANY uploads on your site further securing your content.
Forum: Plugins
In reply to: [Job Manager] [Plugin: Job Manager] Google and my candidates' CVsThis is old, but I might as well mention for anyone else who runs into this issue, create a .htaccess file in your uploads directory with just this one simple line
IndexIgnore *
Anything under the /uploads directory will not not be indexed or displayed by the server. This will not only stop any CV/Resume from being listed… but will also hide ANY uploads on your site further securing your content.