gravitylover

line 132:

<?php echo $_POST['user_login']; ?>

>

<?php if(isset($_POST['user_login'])){echo $_POST['user_login'];} ?>

fix login:
/s8-custom-login-and-registration/inc/forms.php

line 152

$redirect_url = ( $_GET['redirect'] != '' ) ? $_GET['redirect'] : s8_get_current_url();

>

$redirect_url = ( isset($_GET['redirect']) ) ? $_GET['redirect'] : s8_get_current_url();

/wp-act-admin.php

Replace:
<?php echo $act_data_filter; ?>
>
<?php if(isset($act_data_filter)){echo $act_data_filter;} ?>

Replace:
if ($_GET['act_page']
>
if (isset($_GET['act_page'])

Replace:
echo ($act_events_tab[$act_tab_type])
>
echo (isset($act_events_tab[$act_tab_type]))

Fixed:

Replace all occurrences of the following

/wp-activity.php

get_usermeta
>
get_user_meta

!$_COOKIE['act_logged']
>
!isset($_COOKIE['act_logged'])

Errors while using the plugin (on the front and back end of the site)

Notice: get_usermeta is deprecated since version 3.0! Use get_user_meta() instead. in /home/campers/public_html/wp-includes/functions.php on line 2871

Notice: Undefined index: act_logged in /home/campers/public_html/wp-content/plugins/wp-activity/wp-activity.php on line 304

This avoids the flash of all testimonials, by hiding all but the default before the browser loads javascript:

<div class=”front_end_data” <? if(isset($hide)){echo “style=’display:none'”;} $hide=1;?>>

It must be related to the dom parser module? Perhaps it has some server requirements?

Thanks for the excellent plugin – this is a dream come true for optimal caching.

Website source code is blank when using the “Default” filter method on WP 3.6. Works fine for advanced

This user also has the same problem: https://css-tricks.com/snippets/wordpress/prevent-css-caching/

Send a demo wp link and I will illustrate the vulnerability

It still allows the user to output an iframe onto the page and other malicious code

https://login.maxcdn.com/account/addkey
“API Management has been removed from CP2. Please switch to the new look in order to manage your API, thank you!”

Looks like we will have to wait for W3TC to update their plugin to handle the new API.

MaxCDN have now moved to oauth authentication and this does not work with w3 total cache!

When testing in w3 total cache the error displayed is:
Error: Unable to purge (SQLSTATE[HY093]: Invalid parameter number: no parameters were bound).

@davee

I was correcting the incorrect code in the plugin, good job!

The correct URL for SSL on google is:
https://chart.googleapis.com/ (this causes no errors)

Other key areas to update:

gad-admin-pages-posts-ui.php

<img width="90" height="30" src="https://chart.googleapis.com/chart?chs=90x30&cht=ls&chf=bg,s,FFFFFF00&chco=0077CC&chd=t:<?php echo $cvals; ?>&chds=<?php echo $minvalue; ?>,<?php echo $maxvalue; ?>"/>

gad-widget-data.pjp

return '<img width="90" height="30" src="https://chart.googleapis.com/chart?chs=90x30&cht=ls&chf=bg,s,FFFFFF00&chco=0077CC&chd=t:' . $cvals . '&chds=' . $minvalue . ',' . $maxvalue . '"/>';

In the mean time guys, comment out line 44 of:
wp-admin-theme.php

<link rel="stylesheet" href="/wp-admin/css/upload.css" type="text/css" />