ClickyB

Hi k_nitin_r,

Yes – it is fixed in version 2.0.2.

Thank you very much ??

Fixed by resetting as suggested (Thanks)

Hi TDO,

As a temporary workaround I currently I have it set to allow “Unregistered Users (i.e. everyone)” but that’s (obviously) not preferable long term…

How I had it set was to allow “Users with rights to publish posts”.
Then I had all 5 boxes checked…. ie:
Subscriber (newly registered users)
Contributor
Editor (can publish posts)
Author (can publish posts)
Administrator (can publish posts)

But – the problem was that Subscribers & Contributors were seeing a message saying: “You don’t have access rights to this form”!
The strangest thing of all was that the first member to encounter the problem was a “contributor” with the highest TDO post-count!

Stranger still is that – since I changed settings to allow “Unregistered Users (i.e. everyone)”, he made another post… But when I check the “Manage” link he isn’t listed under “Last 15 Submitters”… In fact – the last 2 users to use the form haven’t been included in the “Manage” list!

Sorry to hear you were unwell btw… Hope you’re over it now.

Regards,
ClickyB

I was using “wp-move-comments” (Move Comments – Version 2.0 – Easy move comments from one post or page to another – By Rilwis).

It looks like the plugin has disappeared from the WordPress list now (and like Rilwis is not going to reply here…) so I’ll try that one instead – lol

Thanks apostolis

There’s a plugin that will do this here, or you can create a static page and use an RSS feed to display your last 5/10 posts.

“magic quote settings”??

What does that mean? (I can’t see any reference to them anywhere)!

Yeah, the fact that they don’t appear in the formhacker is what makes them such a pain to fix ??

My form was imported into the latest version. Would it help if I removed it and started again?

In addition to the above problem I notice that every time I save the “Form Widgets” page (after editing) a weird thing happens:
For every url entered in a text widget backslashes seem to be added in multiple places… So:
<a href="https://domain.co.uk/folder/" title="mytitle" target="_blank">
Becomes:
<a href=\\\https://domain.co.uk/folder/\\\"title=\\\"mytitle\\\" target=\\\_blank\\\">
I only added 3 in each spot but the form seems to add a random number!
I tried to add the “I agree” widget and there were well over 1,000 backslashes in each spot (I counted the lines and number per line – sad huh)!
As you know, it’s not possible to “block select” in the widget-edit field so – after an hour of deleting – I lost my patience and gave up!
I looked in the plug-in folder to see if I could find a place to delete them “en-masse” (expecting them to be saved somewhere) but I couldn’t find it!
Any idea what might be causing this and/or how to remove them quickly?

[Note: These backslashes don’t seem to show up in the form itself (nor in the form hacker) they are only visible in the widget edit window! Although this means they have no effect, it makes editing widget text a nightmare and – each time – the form widgets page seems to take ages to save!]

Sorry to string another error into the same thread but – for all I know – they may be related!

I’ve been trying to adjust this too; the total width allocated seems to be very limited.

If I set up a 2 column table with row widths 70% and 30% I can see 6 digits in the 30% column and 9 digits in the 70% column!

That makes reading/editing information quite difficult. But there’s plenty of whitespace on either side…

Is there any way to increase the total width?

“Notice: Undefined index: tdomf_upload_key_1 in root/website/wp-content/plugins/tdo-mini-forms/tdomf-upload-inline.php on line 71”

Hi TDO,

Thanks for the fast response.

I changed the line as you recommended but am seeing the exact same error message!
So I saved the “Form Manager & Options” page and the “Form Widgets” page and then refreshed the submissions page… but I still see it!

I could have mentioned before (incase it’s relevant), the rest of the “upload files” widget is displayed after the message, but the message is there!

Hi TDO,

No I don’t use any cache plugins.

On that linked doc’ under “Sessions and security” it says:
There are several ways to leak an existing session id to third parties. A leaked session id enables the third party to access all resources which are associated with a specific id. First, URLs carrying session ids. If you link to an external site, the URL including the session id might be stored in the external site’s referrer logs. Second, a more active attacker might listen to your network traffic. If it is not encrypted, session ids will flow in plain text over the network. The solution here is to implement SSL on your server and make it mandatory for users.

That was the part that worried me!

Hi the_dead_one,

Thanks heaps for the quick response ??

I have register_globals turned off.

I looked into the session.auto_start issue and was slightly concerned by the security vulnerabilities (mentioned in the page linked from the last post of your forum thread).

However, I do like the TDOMF facility and would like to use it (rather than making all my members “contributors”), so I may try it, but – before I do so – the thing that most confuses me (which I should have mentioned before) is that I have had 2 members use the form successfully and – although they both had problems the first few times they tried – they are both adding posts without any problems at all (which makes me think it should be possible for all users) so I’m wondering how that could happen…
Could it be associated with the login?
Could it be the “preview” function which either helps or hinders their ability to use it?
Is it associated with cookies (on/off)?

If I can find out then – presumably – I can take the necessary action without worrying about site security.

If you have any further thoughts I’d be glad to hear them, otherwise I will contact these 2 users and see if they remember anything which might shed some light on the situation (in which case I will – of course – let you know).

Thanks again for your help,

ClickyB

Thanks “TDO” ??

One thing I didn’t understand:

“There is no templates. Hwoever you can control the “allowable tags” from within the widget control form. Is there an issue in using the “Post Content” widget control page?”

The only “widget control form” I could find is at:
admin.php?page=tdomf_show_form_menu plus the two TDOMF widgets which appear on the normal wp-admin/widgets.php page… I don’t see anything there which will allow me to edit the tags; maybe I’m misunderstanding what you mean?