smartyp

Awesome – thanks for the updates ??

I think you misunderstood :-). I’m trying to create a REAL Management Page.

The problem is the virtual page still overrides it, even when virtual page = No.

It looks like support for older style themes was dropped. From my testing (I haven’t checked the code) – if a theme does not use the WordPress function comment_form() to generate the form fields, then this plugin will no longer work. It won’t error anywhere, it just won’t display the ‘subscribe to comments’ output.

To be fair, the comment_form() function has been around a long time, so it’s not clear how many themes this would affect. But a warning would have been nice ??

Following up on this… the FB debug tool says en_NZ is NOT valid.

But given it’s ‘technically’ valid I’ll leave the filter in place. Thanks for your help on this ??

The author checked in ‘New security improvements’ 3 and 4 weeks ago. Maybe there’s more to do, maybe there is a long review process for major security issues like this one.

It does clarify, thanks ??

(Would it make sense to add an option to CDN them? Or rather CDN everything if enabled, and add an exclusion option to CDN?)

Wow, thanks for digging.

I did find this which might be useful:-
https://developers.facebook.com/docs/internationalization#locales
(it’s a bit vague as it doesn’t exactly state what they do or don’t support, but suggests they may support the lists they linked to..?)

Thanks for the filter though ??

Awesome – thanks Sybre.

How did you set up permissions at the S3 end? A lot of people just add permissions for ‘everything’ which is really not wise for security (or worse, are still using root access keys instead of IAM users).

So to reproduce, just remove some of the required permissions from the S3 policy. For example (as I experienced) if ListBucketVersions hasn’t been granted then the backup runs, but then fails at the end when it accesses S3.

Not really sure what you mean. Anyone using S3 for backups needs to know what permissions they need to allow at the Amazon S3 end. So rather than have people guess until it works (or grant more permissions than necessary) it would help to publish what is required ??

Thanks, that did the trick – was missing ListBucketVersions.

I recommend you guys put this in the FAQ ??

Do you have a backup of your site? I think that’s going to be by far the quickest way to get the site up and running again. But I’d recommend taking another full backup now (database and files) before doing anything else.

When you say manually deleted – do you mean outside of WordPress (e.g. using FTP or a file manager)? How did you determine what was unused and could be deleted?

Because it sounds like you’ve just deleted images that were in use.

WordPress creates multiple versions of an image when you upload one (different thumbnail sizes etc) – so could it be that you deleted some of those thinking they weren’t used?

Do you have a recent backup? It may be enough just to restore the /wp-content/uploads/ folder.

• This reply was modified 6 years ago by smartyp.

What do you mean by “it keeps generating spamlinks”? Are these links actually on the site itself, or just appearing in Google Analytics?

If they are only in Analytics as 404 pages then it’s just Google telling you what it previously found that is no longer there. You can ‘mark them as fixed’ but they’ll probably keep reappearing for a while as Google is correctly reporting them.

For anyone following or coming across this problem – it looks like this ticket may actually fix it:-
https://core.trac.www.ads-software.com/ticket/43857