GreatBlakes

Thanks for the update.

I’m seeing the same problem. Even simply having this plugin active on a website will cause the block editor (and all of its dependencies) to be loaded for every user on the front end.

I am requesting that the plugin add functionality to do this automatically when a theme or plugin is updated (as well as when a post is published or updated if it doesn’t already do that). On larger websites with many content managers not everyone knows about (or does) this extra step.

It isn’t about seeing it the second (or more) time…

That popup should never appear

I did find the error in my console, and under any other circumstance I would gladly provide the exact description, however, I can’t in good conscious help facilitate these kinds of practices in WordPress plugins.

Enough plugins do this kind of thing (or redirects) when activated that, like others have said, managing many WordPress websites’ plugins is already cumbersome enough. I’d like to again strongly urge your development team to remove the entire tour “shepherd” functionality from the plugin.

I really liked Updraft, but it isn’t the only backup plugin out there.

Regarding my comment about the number of queries, that was less of a security comment and more of an optimization thought. There may only be 5 queries in the plugin, but it appears to be based on the number of taxonomies. On my test site I saw 23 queries performed by this plugin, and on more complex websites I’ve seen it go well above 100.

This may not be something that is avoidable as the feature provided by this plugin may need each one of those, but again that is a convenience feature and is why it plays into the overall decision.

On the security notes, I ran one of my old plugins through CodeRisk and it found that 1 of the 4 issues was an XSS risk, so I so think there is validity in their score. At the very least it implies that there is something that can possibly be improved, and that is worth researching in my opinion.

• This reply was modified 6 years, 7 months ago by GreatBlakes.

Also looking forward to the update, thanks.

@takayukister This is likely the same issue as these threads:

https://www.ads-software.com/support/topic/bot-submitting-from-58fecca08a199-etc/

https://www.ads-software.com/support/topic/woke-up-to-200-spam-emails-and-they-are-pouring-in/

Is there any info we can provide (with in the Mail tab settings or otherwise) that could help figure this one out?

We’re seeing the same issue as well. Was going to try the honeypot, but will probably skip that now and use ReCaptcha too. Would love to not need to use that, though.

I’d also like to mention that having the plugin in the WordPress plugin repository is a requirement for my client work, so while it is great to see development is continuing, and as much as I love Github, it is not a viable alternative to being able to bundle the plugin with my theme installs.

This is great to hear. I’m hoping it’ll be implemented in a way that we can hook into, but just happy to see it return. Thanks.

I thought I had that same issue, but the config.js file was (ironically enough) cached, so I had to enable debug mode to make it work. I’d sign into Cloudflare in a different window to enable debug mode and see if that kicks it.

I turn development mode on anytime I work on my code. I have the plugin installed on each of the WordPress sites on my server so that I could toggle dev mode on once and for 3 hours can work on any/all of the sites on the server. So technically I’m “mass turning it on and off”, but I can do it once from any one of those WordPress sites (used to be able to do it with a single click). That being said, it seems like many others have their sites on different servers and must toggle dev mode for each individual site manually.

Sometimes I’ll notice that things are either cached or have reverted (for example if I’m coding for 6+ hours), and so I’ll need to re-enable dev mode in Cloudflare once or twice during a coding session. What was nice was that my above functions showed the status right in the admin bar so I could see at a glance if dev mode was on or not.

In 1.x I was turning it on/off by updating the option that the plugin listened for using my own functions file (but still calling functions defined in the Cloudflare plugin). This option in the DB has been removed and so were the functions I was calling.

I’d also like to see the DevelopmentModeCard moved from config.js to a WordPress option within the Cloudflare settings page so that we don’t need to modify that file after every update. Coincidentally, I was just viewing this thread again when you posted because I just updated the plugin and lost the ability to enable dev mode so I needed to copy/paste that snippet you provided again… I feel like I shouldn’t have to bookmark this thread (or save that snippet in a repo) in order to update settings.

Hope that’s enough info- I tried to answer as in depth as possible. Thanks.

• This reply was modified 8 years, 6 months ago by GreatBlakes.

I used to be able to extend this plugin in my theme to be able to toggle dev mode via AJAX from the admin bar, but since this new update removes the get_dev_mode_status and set_dev_mode functions I’m no longer able to do this.

I’d love if this could be a core feature of the plugin itself- it was very handy to have an indicator for dev mode at a glance and have an easy way to toggle it without needing to go 4+ clicks into the WordPress admin interface to get there.

Just out of curiosity, is there a reason the cart page isn’t included in the checkout funnel? Is it just industry standard, or personal preference? Seems like it would be nice to have the cart included in the dropoff report.

Is there a way to customize the steps in this plugin without modifying the code itself to change the step numbers that are hard-coded into it?

That’s great to hear- I’ve create a Gist of the more advanced functionality I mentioned for reference. Like I said earlier- it can definitely be optimized quite a bit, but is working great on my server.

https://gist.github.com/chrisblakley/75f797364d2c314897bf