Ozh

https://github.com/ozh/ozh-admin-drop-down-menu for support, as stated in the readme

Thanks, handy cheat sheet/image indeed. I’m more looking for filters to handle this automatically, though…

There are examples in the plugin itself and on the plugin page

fixed

Fixed

Thanks! Fixed

Cannot reproduce. Assuming PEBKAC.

Fixed

I think it should be clearly explained that you need WordPress to install this software. Also, I’m not sure, do I need a computer? My mom has Facebook on her phone, is it enough?

Peeps, the plugin is hosted on Github, anyone fancy a pull request? ??
https://github.com/ozh/ozh-admin-drop-down-menu

I know *very well* what’s a nonce, and I’ve been using nonces in WP since they were added in 2006, thank you.

Needed a plugin similar to yours 10 months ago, so I tried yours and noticed that either anybody could POST to the admin form, or could make a user with sufficient privileges POST to that form without having the intention of doing so (CSRF). Can’t remember but this was enough for me to ditch the plugin.

Using nonces fixes both situations.

Are you using nonces now?
Has this issue been fixed in the meantime?
I don’t know and I honestly don’t care. I don’t have time to download, install and review your plugin again. If you have, good for you and your users. If you haven’t, too bad.

You’re 10 months late as far as I’m concerned.

I’m not a user of your plugin (because of said vulnerability 10 months ago) so I’m not going to spend some of my free time to check if this issue is still to be fixed and make a PR if this is still required, sorry.

Bye.

Duh…….. Clueless guy I’m afraid ??

Please read a couple article about WP nonces, you’ll be smarter at the end of the day.

Ah, I think I get it. I have indeed both .subversion and .svn, and it seems .subversion has the client informations. That .svn directory looks like an old leftover from something, as shown with svn info. I’m deleting it.

Thanks! ??

That RTL support was worked on more than 4 years ago, but I think it’s supposed to just adapt to your locale alignment. Is your whole admin interface RTL except the admin menu? (if so, sshot please)

Yeah I was more like having a filter prior to registering the CPT and storing email sent in a CPT.

Anyway, plugin much appreciated, I’m going to test that right away, thanks