seedy

I run several plugins at once (including some that haven’t been upgraded for years, but still serve specific functions (Spam Karma)). I have been using WP for about 10 years without having any security plugin conflict.

Could you be more specific about the conflicts you’ve had; which plugins and what happened?

Bad Behavior can be useful. Once it’s been running for a while its log can supply IP’s of login bandits and you can put them in Advanced Blocking in Wordfence. Get an http:BL key for it, which is free.

All my Live Traffic history is gone after the update. A warning about that would be nice.

Thank you, that is helpful.

Private so no one except the chosen even know it exists. This makes it a non-target. But also protected so if it does get found…unless I should just trust being non-linked to be enough. Which I don’t.

So, perhaps the better question then is how to keep a Page out of the menu?

Carousel is part of Jetpack which I see as being part of WP. I have been using NextGen, but its Album nesting is not very breadcrumby.

Try logging in the backend if you can and install Wordfence and let it scan a while. The free version only does once a day but that will get you a list of compromised files.

It might be better to start over with a new install and turn all comments off and use a theme from the repository at first. And immediately first thing right now make a new admin account and delete the account called admin.

If you can get into your server account’s control panel and they offer phpMyAdmin, you may be able to extract the content you used to paste into the new one. Export as XML file and you can save your posts without saving whatever hacking was done.

Once you’re up, Bad Behavior and Wordfence can help you deflect attackers.

The file is there, but Wordfence reports things like…

Milwaukee, United States arrived from https://gateway.zscalertwo.net/zscaler.swf?a=s&t=iHVQ2WQBF1n0DB76&e=2099999999&u=https%3a%2f%2fgateway%2ezscalertwo%2enet%3a443%2fauD%3forig and tried to access non-existent page https://mysite.com/wordpress/wp-content/themes/picolight/ubuntu-r.woff)%20format(%22woff%22

Which makes me think it’s somehow seen as a page. Since I am not fluent with PHP and the dev Deutsch gesprechen, was trying the generalities first.

I changed the visited site name in there, just to be clear.

I felt awkward bringing it up, can’t imagine that it was willfully obfuscated. I’ve probably been using WP for too long. Even so, I can’t remember accidentally logging out.

Jkum, you can try deactivating and then reactivating the plugin. Sometimes works.

Yup, doing it again for me.

Nextcellent Gallery plugin is based on pre 2.0 NGG. But it doesn’t guarantee anything long-term if WP updates no longer work with it either.

I am thinking this same kind of thing, perhaps it’s time to learn markdown and go php-free. Someone is always looking for profit or ego-change with open source software. Not NASA-reliable.

A report back on NextCellent Gallery 1.9.14, it works just the same as NGG 1.9.13, the promise is that they will continue maint. upgrades at the 1.9.x level.

While the old NGG was possessed of quirks, I adapted and built a posting workflow around it.

I also tried Photo Album Plus linked above, it and Easyest Gallery will work with the folders of NGG files, but neither will import the metadata so are close to starting over. The workflow in both is different enough from NGG to also be like starting over.

When I have a testbed in place I will try the escape-ngg plugin and report back.

Okay, now it’s loading again, if that helps the dev confirm something…

Helpful possibility…escape-ngg

* This plugin will scan through all your posts and pages for the [nggallery] shortcode.
* It will loop through all images associated with that gallery and recreate them as native
* WordPress attachments instead. Finally it will replace the [nggallery] shortcode with
* the [gallery] shortcode native to WordPress.

So I tried updating to see if any clues were found since my last post. Sadly, nope. I cannot believe that the icon to insert a gallery/album/photo is gone from the post editor. Instead, a feeble and useless attempt to integrate with WordPress’s Media handling. If I wanted to use WP’s clueless Media thingie, I would be doing it already. That’s what plugins are for, to do things another way.

In any case, there’s no obvious way to insert a gallery into a post, so I went over a copied the shortcode from another post. I’m not sure how the lack of the icon constitutes an improvement…

So what this comes down to for me is no more updating anything. No more WP updates either, because it’s obvious that NGG is girding for some sort of forced integration.

This is how platforms jump the shark. They get so lost in forward-thinking and reinvention that they leave their users behind. I really do not want to rethink my workflow so programmers can brag about some new innovation they cooked up. And that’s where WP and NGG are headed. To a place that no longer works for me.