LukeDouglas

SergeM,
I will be the first to state I know ‘many’ plugins use code that could present a danger to hacking.

My true concern is these are websites that I have had the CleanTalk Spam & Security plugins working for months and all the plugins they are flagging have been installed and working for months.

Why would I all of a sudden get dozens of emails flagging files in these plugins as potential spam or a security risk?

Example: Here is a warning which shows that one is the ‘Actual Version’.

https://csisaddlepads.com/wp-content/uploads/cleantalk-email-csi-screenshot.png

So what exactly does ‘Actual Version’ mean and, it recognizes as the ‘Actual Version’, why throw a warning?

Seriously, if I have to send every file to Cleantalk for analysis, I won’t be able to work, play, and probably only sleep 4 hrs a night.

Look at the image below. It even flags a ‘Cleantalk’ file!!! WHY!

https://hchg.org/wp-content/uploads/Screenshot%202024-01-28%20202747.png

Also, if I put in a exception for “wp-content/plugins/cleantalk-spam-protect/” in the “Directory exclusions for the malware scanner:” section, will all sub-folders also be excluded or will I have to include every subfolder?

Look at the number of malware I got just during a 3 hour period today and they are still coming in. Dozens!!!

https://scatmansdomain.com/wp-content/uploads/cleantalk-emails-3-hr-today.png

• This reply was modified 1 year, 1 month ago by LukeDouglas.

Serge,

I knew that already. I was trying to find a way that I could edit each website ‘proactively’ to have it exclude this file. I guess I’ll have to ‘Approve’ it when I get an email.

As this is all WordPress, it would be great if there was a ‘URL exclusion’ tab on the Personal Lists where I could simply enter partial URL “/wp-content/akeebabackup_secretkey.php” which would apply to all websites under my account. If “/wp-content/akeebabackup_secretkey.php” was in any URL, it would be excluded from security checks.

FYI, I use AkeebaBackup on all my client websites.

Just a thought! ??

Also, can you set a time for a course? IE: 90 days from purchase to view course, after which the course is no longer available?

Do you have an example of your “Analytic/Report”?

Also, on the paid courses, if someone had paid for the course and sent the link to a friend, would that friend be able to view that page without logging in to be verified as a paid student? How does that work?

On your tracking, is that done on a page to page progression?

Example: If the course had 8 pages, the student finishes page 1 and goes to page 2, would that be a 12.5% completion?

What about membership & lesson data? Is that all kept on the website or is an account at Academy required?

The client is concerned if content is served from your website or will Vimeo remain on Vimeo as well as all the course data. Can you clarify how this is handled?

Follow up question. Do you have a subscription capability to restrict paid users to certain course pages?

I have changed the settings to:

wp-content/plugins/mywpguru
wp-content/themes/dt-the7/inc/extensions

But, to be honest, the plug-in should recognize if there is a leading or trailing ‘/’ and either give a warning or just remove them programmatically or, at the very least, have this clearly explain on the General Settings tab.

Did you mean to use backslashes? I believe you meant this:

/wp-content/plugins/mywpguru/bfnetwork/Crypt

FYI, I have it that way already on one website that I checked. I will check all of them tomorrow. I’ll wait a few days and, if it didn’t work, I’ll come back to this post.

Glad it wasn’t me! ??

I used CSS to reposition the logo.

I can live with that but it did require doing some CSS so the logo wasn’t hidden.