rivmedia

Confirmed Admin accounts are being created and backdoors being uploaded to the upload directories. We’ve helped a few people recover their sites today. Hope you guys can force an update.

Looks to be working, thanks Tobias for the quick response.

Any ETA on this fix ? It’s a pretty vital function for the site

Amazing answer thank you Fahad ??

I’m sure I will be in touch soon ??

Thanks for that reply Lester,

I did see it was designed for the main loop. But I can’t understand why your code :

<?php if(function_exists('the_ratings')) { the_ratings(); } ?>

Works exactly how we want it to, in exactly the same location. But our code :

<?php global $current_user, $post;
 $user_comment_count = get_comments(array('user_id' => $current_user->ID, 'post_id'=>$post->ID) ); ?>

<?php if($user_comment_count) { 
	echo '<h2>Thank you for your review,  please leave a star rating.</h2>';
   the_ratings();  
} else {
	echo' <h2>Leave a review first you may then give a star rating.</h2>'; 
    comment_form(array('class_submit'=>'button'));
} 
?>

Doesn’t work, I actually think its something in our code which is missing rather than being a loop problem ? We’ve also tested our code in the main loop and have the same problem. I was hoping you could see something obvious as to why its not working.

Perfect thank you, tested and works as expected ??

Updated, all working fine this end.

Confirmed, Since the action hooks for edits have been added in 1.4.5 you can no longer edit past entries.

We’ve reverted back to 1.4.4 until this is resolved.

Thank you Lester, Look forward to seeing the resolution ??

That doesn’t make any logical sense surely? The usernames are there ( all users are logged in to comment ) , so the plugin shouldnt replicate the last rating given on a post for all users which do not have ratings regardless of whether someone is behind the Same IP.

The first two ratings are also behind the same IP, but they show correctly. Its only the comments which do NOT have ratings which are showing as having them incorrectly.

• This reply was modified 7 years ago by rivmedia.

The author is behind the same IP for testing purposes, but in the settings we are logging by username, not by IP or cookie.

This is the result of the var dump

 
		
array(2) {
  [0]=>
  object(stdClass)#7666 (3) {
    ["rating_username"]=>
    string(8) "Rivmedia"
    ["rating_rating"]=>
    string(1) "5"
    ["rating_ip"]=>
    string(14) "99.189.192.178"
  }
  [1]=>
  object(stdClass)#7663 (3) {
    ["rating_username"]=>
    string(4) "Book"
    ["rating_rating"]=>
    string(1) "4"
    ["rating_ip"]=>
    string(14) "99.189.192.178"
  }
}

• This reply was modified 7 years ago by rivmedia.

Yes you are correct, shortly after posting the above I realised it was not browser related, but actually dependant on the user. For us it was all non-admin users could not rate.

We found that this code we were using was conflicting :

// Redirect non-admin users out of the Admin panel
add_action( 'init', 'blockusers_init' );
function blockusers_init() {
    $user_id = get_current_user_id();
    if ( is_admin() & $user_id != 1) {
        wp_redirect( home_url() );
        exit;
    }
}

We’ve solved this issue but adding the Ajax conditional :

// Redirect non-admin users out of the Admin panel
add_action( 'init', 'blockusers_init' );
 function blockusers_init() {
    if ( is_admin() && ! current_user_can( 'administrator' ) && 
       ! ( defined( 'DOING_AJAX' ) && DOING_AJAX ) ) {
        wp_redirect( home_url() );
        exit;
    }
}

• This reply was modified 7 years ago by rivmedia.

Hi Simon,

I apologise, I was having “one of those moments” ??

I must have been looking at a page’s source which actually did have the slider activated on it, checking again I can see it does indeed work like that ??

Sorry for wasting your time.

A quick look at developer console on a browser will confirm the above, see this screen grab of all the mixed content warnings on your page:

https://imgur.com/a/BtNcE

Your developer needs a swift slap around the back of the head. He’s converted the site to HTTPs but hasnt bothered to convert all internal links/references to https. Resulting in mixed-content warnings and failed resource loading.

This a great plugin : https://en-gb.www.ads-software.com/plugins/better-search-replace/

Allows you to search all database tables for the old URL ( in your case https://www.discovertheburgh.com ) and replace it with https://www.discovertheburgh.com

Fixing a wealth of problems like you are experiencing now. Obviously make a full backup of your database before attempting to use that plugin and do a test restore to make sure it works.