Daniel Tara

I am working to get this plugin reinstated. It might take a while until the plugins team review it, but apart from that it’s all good. There is nothing wrong with the plugin, just a bit of miscommunication with the plugins team.

Thank you for bringing this to my attention. It’s been fixed in version 2.3.8.

It’s been added in the latest version.

All I know is this issue wasn’t reported before I applied a security patch a few weeks ago. You can roll back to version 2.3.6 and see if the issue still occurs. If it does, it could be as I said in the other thread another plugin that is adding a nonce field that conflicts with the plugin’s one. A caching plugin is also possible. Try excluding that page from the cache and see if it helps. As a last resort, try setting up a staging site and disable your plugin there.

As I said in the other thread, start re-enabling plugins one-by-one until you find the one causing the issue.

Please see the answer to anniewp’s topic.

Here’s what I know:

The plugin works with just One User Avatar, WP Adverts, WP Adverts – Authors and WPAdverts Snippets – Change Author Avatar plugins activated.

I suggest you disable all plugins except those and see if the issue still persists. If it doesn’t, start re-enabling plugins one-by-one until you find the culprit.

If the issue persists even with just the above mentioned plugins active, check to see if you have 2 nonce fields in your form (view source and searching for nonce should do this) and if you have a second one find out which plugin is adding it.

This snippet should fix the issue for you:

add_filter( 'get_comment', function( $_comment ) {
	if ( ! empty( $_comment->user_id ) && ! empty( $_comment->comment_author_email ) ) {
		$user = get_user_by( 'email', $_comment->comment_author_email );

		if ( $user instanceof WP_User ) {
			$_comment->user_id = $user->ID;
		}

	}

	return $_comment;
} );

I’m not going to add it to the plugin because doing so would have various unintended consquences.

Alternatively, you could go into the database and manually update the user_id field in the wp_comments table every time someone adds a comment. You can just set it to 0 and then the avatar will be retrieved using the email address.

You can already filter the output of that function. This snippet should allow users with only the upload_files permission to upload avatars:

add_filter( 'wpua_is_author_or_above', function() {
	return current_user_can( 'upload_files' );
} );

I am reluctant to add permissions control to the settings page as I’m afraid it would confuse most users.

Thank you for your suggestion. I will fix this in the next version.

Soon. I’m working on a general fix that should solve compatibility issues with various plugins while not breaking plugin security. It requires a little bit of testing, otherwise we’re back in the situation where a lot of setups break bacause of changes.

I am currently researching this and will get back to you.

I am researching this. It is a known complex issue that is only affecting a few third-party plugins. It likely has to do with a security patch that was applied recently. You will likely see an update that fixes the issue within the next few days.

Hi. The WP Adverts plugin does not have a front-end register form. May I ask what plugin you are using for that form? Thanks

Thank you for bringing this to my attention. I have been busy fixing a security vulnerability in the plugin during the past few days, but I will now look into this issue and get back to you.