lechon

Hi,

We are still having massive problems with the false positive 404 errors.

We disabled the 404 detection on the plugin and installed a 3rd party plugin just to monitor the soft 404 errors. The 404s did not show up on the 3rd party plugin monitor, but we now are starting to see on our Google search console (webmaster tools) massive soft 404 errors there which is definitely not good for the site.

We know with certainty that is iThemes causing the issue as when the plugin is turned off the 404 disappear.

Hi Kyle,

I am sending the information you requested via your private email. Please check your email inbox.

Thanks

Hi,

Just sent you an email.

Thanks

Hi,
We are using Apache mod_rewrite and a code that looks something similar like you will see below. (not actual code, but a sample just to illustrate the point here).

RewriteEngine on
RewriteBase /
RewriteOptions inherit

#Redirect for New Custom Permalink
RedirectMatch 301 ^/videos/([^/]+)$ https://www.sitesample.com/%post_id%/%postname%/$1

#auto-correct errant characters from Videos URLs spaces and any encoded symobls

RewriteCond %{REQUEST_FILENAME} !-f

RewriteCond %{REQUEST_URI} ^[/]([videos\s>\+\ ]|%[A-Z0-9]{2,2}){6,} [NC]

RewriteRule ^(.*)(?:[^a-zA-Z0-9/_-]|%[A-Z0-9]{2,2})+(.*)$ $1$2 [NC,L,R=301,DPI]

Hi,

Thanks fro getting back to me.

Here’s a sample of what a redirect look like

From
https://www.sitesample/Videos/tvserghh/

Redirect to:
https://www.sitesample/7127/tvserghh/

The site is using this custom permalink:

https://www.sitesample/%post_id%/%postname%/

It’s true, I can confirm this, it does give away the secret URL by means of wp-register.php
I tested under different browsers (all cache clear)

Hi Kyle,

Thanks for the explanation, I think you are on the right track.

Thanks again for all your hard work in making this plugin great.

Hi Kyle,

Your plugin is awesome!, please do not integrate with any advertising, I have seen my share of bad malware injection when 3rd party advertising is involved, even for Google, they have also have had problems in the past with 3rd party affiliates. Besides, Google is not going to give you a single cent by you allowing to integrate ads on your plugin. I have no problem for paying for your plugin more as long as you do not have ad integration with it.

Below is a reference when one of the Google ad partners got hacked.

https://www.theverge.com/2014/9/19/6537511/google-ad-network-exposed-millions-of-computers-to-malware

Thank you again for making this fantastic plugin.

Regards,

Lechon

Hello,

Thanks for taking the time to review this plugin. I really love this plugin but it breaks often for me. I think is was developed for really small sites, on a large site it’s a train wreck.

I like your suggestion about the plugin not running against the whole site, I think it’s a fantastic idea.

I wouldn’t mind paying money for this plugin if it actually worked on a large site on an efficient manner.

Hi there,
No difference with the trailing slash and there are not weird characters or apostrohes on the post names.

Thanks for getting back to me with the explanation, I understand now.

On my second part of my comment regarding the form embed, is just a concern, as we experienced a while ago a site that was compromised by another plugin that had a similar form embed on the site. Their site got hacked and in terms ours too. We are only going by past experience.

Thanks again for providing a detail explanation of the issue.

Regards,

Lechon

Total Bull!
Your plugin is going to spam users with junk mail, it did it then and I will do it now. You will also ruin your users’ experience with popup ads.

Hi Kyle,

Thanks for taking the time to explain this to me, it makes total sense.

I think I am going to wait until you release a version that fixes this issue, in the meantime I will be using the version your have on development mode for now.

If you go to the site fluidplayer.com you will see something really interesting. If you try to contact them, they want you to accept their ‘Terms and Conditions’ before you even communicate with them, well guess what, they don’t list their terms and conditions on their site but they do want you to accepted their ‘Terms and Conditions’ anyway. Puzzled by this I demanded from them to see it, and I was told to go to Exoclick for the terms.

Just as recent as December 2016, and March 2017 Exoclick was injecting malware into sites via ads and the delivery system used was fluidplayer

https://malwaretips.com/blogs/remove-syndication-exoclick-com/
https://www.fixyourbrowser.com/removal-instructions/remove-exoclick-com-redirect-ads/

Hi Kyle,
The masters behind Fluid Player is a company called ExoClick. While the platform API library is distributed under the MIT license (just like the JW Player as well) you will be giving up the data analytics from your website for free. And of course there are other shenanigas that come along when embeding 3rd party ads directly on your video stream.