joshhowenstine

Sorry for the late reply. Thanks a ton Nicola I really appreciate the help!

asaracena, I am getting the security notification from wordfence as well.

Modified plugin file: wp-content/plugins/all-in-one-event-calendar/cache/twig/f9/27/e9ebb965697e227fa8ba7991946….

I believe that it is going to throw this flag out anytime the cache is updated since the cache is contained in the plugin directory and wordfence scans for any recently updated files. I am just going to ignore the warning for now. Unless the cache is stored outside of the plugin directory it is going to keep popping up for us.

Here is how I fixed the issue. It was caused by a mysql default.

[mysqld]
ft_min_word_len=3 change to

[mysqld]
ft_min_word_len=1

However I do not have access to mysql settings on my production server for this project so I used the following to fix the issue.

edit classes/item.php line 557

$permission_sql .= ” OR MATCH($permissions_field) AGAINST (‘{$ur}’ IN BOOLEAN MODE)”;

Changed to:

$permission_sql .= ” OR $permissions_field LIKE ‘%$ur|%’ OR $permissions_field LIKE ‘%|$ur|%’ OR $permissions_field LIKE ‘%$ur|%'”;

Hope this helps if you run into this issue