Robert Peake
Forum Replies Created
-
Forum: Plugins
In reply to: [Login No Captcha reCAPTCHA] Login problems Safari on IphoneAs I’m not able to reproduce what you describe on client sites where this plugin is installed, I suspect a configuration issue and/or a conflict with another plugin. Also be sure you are using the correct plugin (there are several with the same name). Be sure to check your settings with google, including the domain name, in particular. Good luck!
Forum: Plugins
In reply to: [Login No Captcha reCAPTCHA] Why are there no updates?It just works, so it hasn’t needed any changes. I just released an update to reflect that it is fully compatible with the latest version
Not entirely sure what this is about, but you should check that you don’t have public registration plugins enabled or anything else that might prevent the captcha from displaying. Good luck!
Where are you seeing this message and what are you doing when you see it?
Forum: Plugins
In reply to: [Login No Captcha reCAPTCHA] Security BugThanks for this.
It seems WordPress Core’s security check for weak passwords is only enforced via javascript on the front-end by disabling the submit button.
The captcha plugin, by contrast, only disables/enables the button as a convenience–checking is always done on the back end for security reasons.
Unfortunately, I am not aware of any way to make the on/off button locking compatible with what WordPress Core is doing, as they seem to simply turn it off or on–rather than emitting a signal that could be caught by the captcha plugin to ensure that both the captcha and the strong password criteria are met.
Locking a button via javascript is never a secure way to enforce anything as it can easily be unlocked a user with a small amount of html/js knowledge. As a result, this issue stems from a decision made by WordPress Core to enforce strong passwords in an insecure way.
I appreciate you taking the time to report this, and if you know of a way to remedy it via change to the plugin we would welcome a pull request: https://github.com/cyberscribe/login-recaptcha/ – otherwise you may wish to file a bug report with WordPress Core https://make.www.ads-software.com/core/handbook/testing/reporting-bugs/ (though, be warned, in my experience they are very defensive about their design decisions and unlikely to remedy this).
Forum: Plugins
In reply to: [Login No Captcha reCAPTCHA] Needs some options for flexibilityIf you implement this, please feel free to open a pull request: https://github.com/cyberscribe/login-recaptcha/
Thanks for the suggestion. Feel free to submit a thoroughly-tested pull request: https://github.com/cyberscribe/login-recaptcha
Sorry, no plans to change the scope of the plugin, which is just to add captchas to the login forms
This plugin only supports the login pages
I run this plugin on many other websites that have new user registration notifications enabled, and the administrator receives them. So, it seems unlikely it is this plugin that is causing the issue. Perhaps you enabled another plugin at the same time? Unfortunately it is usually a process of elimination to find the plugin or theme that is causing the issue. Good luck and do let us know if you find any issue with this plugin specifically.
Forum: Plugins
In reply to: [Login No Captcha reCAPTCHA] Does this plugin work in China?Unfortunately if Google is blocked it won’t work.
Forum: Plugins
In reply to: [Responsive Flickr Slideshow] Gallery on Phone ado not display properlyThe latest version of the plugin is working as expected on client sites such as: https://www.msia.org/newdayherald/archives/111090-photo-slideshows-from-events-at-the-conference-of-joy-fun-and-laughter
The issue may be caused by a conflict with another plugin or the active template (or a recent update to either). Try switching template in a staging environment and/or disabling plugins one-by-one.
If you find the solution, please post it back here for others to benefit.
Good luck!
Forum: Plugins
In reply to: [Login No Captcha reCAPTCHA] plugin compatible with a multisite installation?I am currently running this on several multisite installations for clients with no issue. You do have to input the Google credentials to each sub-site
No problem, good luck, and if you do post findings back here it may help others in the future