ciantic

How is this supposed to help security?

You can make blocks that act like shortcodes, you can even make a block that runs shortcode like this:

register_block_type(
    'temp/shortcode',
    [
        'render_callback' => function ($attributes, $content) {
            return do_shortcode($content);
        },
    ]
);

Then to use it I’d just do:

    <!-- wp:temp/shortcode -->
    [myfancy-shortcode]
    <!-- /wp:temp/shortcode -->

• This reply was modified 1 year, 10 months ago by ciantic.

Yes this is major headache. Can someone explain what the security issue is allowing shortcodes in templates?

Ideally templates should only be edited by admins, I fail to see where the security issue is.

“The plugin that sabotaged itself”

I love the title. It’s like commencing a divide and conquer tactic on your on own product. I wonder does the @takayukister read these support messages?

This plugin is just a tool for most, and it worked absolutely great for years, precisely because it had backwards compatibility!

I’m having also serious trust issues at this point.

To be honest, the v2 works just fine. Everything new is not necessary better. Just make the plugin to support Recaptcha V2 also and problem is solved. Anything else is crazy.

Given that this CF7 is installed on 5 million sites, it’s crazy to try to make a backwards incompatible change of anything.

There is no way all five million will update settings, login to the google recaptcha get new keys etc.

Even single developer may have too many sites to deal with that.

• This reply was modified 6 years, 3 months ago by ciantic.
• This reply was modified 6 years, 3 months ago by ciantic.
• This reply was modified 6 years, 3 months ago by ciantic.

Yes, I agree.

It’s a bit ironic isn’t it. Regular users don’t understand what that badge is. Some recycling thing? It’s the new version of recaptcha, that is supposed to be almost invisible! But because of the ugly position of fixed badge, it is actually more intrusive.

Because it is positioned fixed, it’s not anymore related to the form, but instead it’s now following you on whole site. So people think it’s some advertisement! This is awful.

It’s total mess, the checkbox is much better, it’s clear that the functionality is associated with the form it’s placed on at least.

• This reply was modified 6 years, 3 months ago by ciantic.
• This reply was modified 6 years, 3 months ago by ciantic.

This is very much true.

There are so many contact forms out there, that breaking the spam prevention like this is not a good idea.

Recaptcha v3 should be option, as well as Recaptcha 2.

The position fixed badge from recptcha v3 is so ugly that I can’t upgrade CF7 right now.

Two methods of collapsing / expanding for Flexible layout is confusing. I prefer the native collapser for Flexible Layout.

I only want to use this plugin for repeater, is this possible?

Ankit, nope. It’s in the vanilla admin page.

The height starts to work if I drag from the corner, but if I use editor_height property the tinyMCE initializes the editor incorrectly.

I have not tried in the front-end though.

Web HTML5Outliner, and for web devs Chrome HTML5outiner Plugin, really awesome.

Harrison O., oh you don’t know HTML5 outlines? See Mozilla examples about it. In HTML5 h1 can be anywhere. E.g. article, section, nav… Try HTML5Outliner. SEO can handle HTML5 outlines.

Indeed it makes more sense to have H1 in a parts of content that is not related. (For instance if you write an article, you cannot know if it’s embeded in list, so article writer can always use H1)

Apologies the spec does not require header, but it makes sense if one has several <nav> elements in the page (like I happen to have).

Harrison O, it does require it

Chrome HTML5Outliner throws me “untitled nav”, and here is a link for HTML5 SPEC with headers.

Also it makes sense for accessibility to have a name for each navigation “Main menu”, “Subpages menu” etc.

Though I found a way:


<nav id="navigation-secondary" role="navigation">
<?php
$locations = get_nav_menu_locations();
$menu = wp_get_nav_menu_object($locations['secondary']);
?>
<h1 class="assistive-text"><?php echo esc_html($menu->name); ?></h1>
<?php wp_nav_menu(array('theme_location' => "secondary")); ?>
</nav>


The problem lies in here, suppose two meta keys “begindate” and “begintime”, then the meta_query argument becomes:

meta_query' => array(
    'relation' => 'OR', // Begintime is "optional"
    array(
        'key' => 'begindate'
    ),
    array(
        'key' => 'begintime'
    ))

But only way to orderby meta key is using "orderby" => "meta_value", huh? How could I say that orderby first begindate and then begintime?

It works just fine, it’s just that the OpenID is freaking confusing to use:

1. Create wordpress user.
2. Login with the user.
3. Go to Users -> Your OpenIDs
4. Add OpenID: “https://www.google.com/accounts/o8/id” just this, no number or other shit.
5. It allowes user to associate account with OpenID.

Logout, and in wp-admin login use https://www.google.com/accounts/o8/id no numbers or other shit, just that url.

It works, but question I have is how can we enable this to *all* users without them doing this?

DoctorDR:

If I can help with any config settings then let me know.

Could you write somewhere how to setup Cloud Files for storage & delivery of user files and uploads? I’m about to get Cloud Servers VPS and setup a WP network to replace one horrible symlink-Joomla configuration for multiple sites.

Do you recommend some image from Cloud servers? Do you use Webmin or something control panel?

Thanks.