enderandrew

It’s from a series of .htaccess rules to protect and secure your WordPress install.

https://perishablepress.com/6g-beta

I realized however the rule in question was here:

RewriteCond %{QUERY_STRING} ([a-zA-Z0-9]{32}) [NC,OR]

That limits the query string to 32 characters so no one attempts any SQL injection via URL. But 32 characters isn’t long enough to the URL to many of the JS and CSS files, especially with the version string attached.

It was part of my .htaccess file I just added. I removed this section and everything works fine now.

# 6G:[QUERY STRINGS]
<IfModule mod_rewrite.c>
RewriteCond %{REQUEST_URI} !^/$ [NC]
RewriteCond %{QUERY_STRING} (mod|path|tag)= [NC,OR]
RewriteCond %{QUERY_STRING} ([a-zA-Z0-9]{32}) [NC,OR]
RewriteCond %{QUERY_STRING} (localhost|loopback|127\.0\.0\.1) [NC,OR]
RewriteCond %{QUERY_STRING} (\?|\.\./|\.|\*|:|;|<|>|’|”|\)|\[|\]|=\\\’$|%0A|%0D|%22|%27|%3C|%3E|%00|%2e%2e) [NC,OR]
RewriteCond %{QUERY_STRING} (benchmark|boot.ini|cast|declare|drop|echo.*kae|environ|etc/passwd|execute|input_file|insert|md5|mosconfig|scanner|select|set|union|update) [NC]
RewriteRule .* – [F,L]
</IfModule>

IE8 here. I turned the plugin off for the moment, but I can do some more detailed testing at home later tonight.

It is broken for me in IE.

That is weird. That says it is getting weird characters that aren’t UTF-8, but those characters don’t appear in the page source, nor in my saving the page from the server.

I tried verifying the CSS directly here:

https://jigsaw.w3.org

I paid someone to develop a theme for us, and begged them to use a standards compliant base theme. Instead, they used a commercial/proprietary theme that isn’t so standards compliant. They charged me a fortune, left me with something broken, and I’m trying to fix it.

SI Captcha Plugin works with this.

I’ve set up a cron job, and I still don’t show any tweets a day later. I’m monitoring 30 Twitter users. They’ve had tweets in the past day, but this doesn’t appear to be working.

If I edit one of the files to establish a key, then that file will be overwritten with each update of the plugin.

Wouldn’t it be better to keep that key in the database?

+1 for this feature as well.

I like how customizable this is, and nice it looks. But I might have to switch to something else that supports this feature.

I believe you’re using Joomgallery given the class=”jg_catelem_photo” attributes.

Can someone provide some code snippets as examples for how you might get author tags and some of the more standard tags implemented via your theme?

How would you implement this in a theme?

https://buddypress.org/community/groups/how-to-and-troubleshooting/forum/topic/wordpress-nightly-breaks-buddypress/

Thanks for the link, but that only allows me to pic one image as the default, not randomly assign one from a group. And while it allows people to upload avatars, it doesn’t present them with the option of selecting from a gallery of uploaded avatars.

I’m in the exact same boat as bmwau.