step8601

ah, i see, if i selected drop-in form 2, i got the paypal button by default

but if i select drop-in form 3, i then enable paypal under the paypal settings

great, thanks ??

i ran into a separate issue which i’ll create a different thread for

which plugin?

so, if i understand things, would that mean that each physical order would need to be manually updated to completed on the braintree side? that there is no way to change the order status on the woocommerce side and somehow have it sync over to the braintree side? (just want to understand, thanks)

• This reply was modified 6 years, 8 months ago by step8601.

many thanks, glad i found this ??

also, is merchant better protected if shipping address is sent over since then the tracking number is linked to the shipping address? (just want to be sure)

thanks

could use something like this too for phone-in orders

ah, thanks so much ??

enabling iframe protection but allowing a specific url would be great for me

i want to allow a specific payment processor (for woocommerce) to use iframe for their payment window (using hosted fields) but disallow all other iframe attempts

sorry, it’s under Firewall > Custom Rules

geez

do you mean manually add it in the page title textbox?

when i did, the rendered page said:

this-is-my-custom-seo-title-page-sep-sitename

in other words, it didn’t say Page 1 of 1

trying to understand, thanks

okay, i first disabled the force ssl plugins i was trying, i then checked both boxes under brute force > custom, and then i entered the following into the Enter Custom .htaccess Rules textbox (except changed the urls for my site):

###### BEGIN FORCE HTTPS AND WWW
<IfModule mod_rewrite.c>
RewriteCond %{HTTP_HOST} ^mysite.com
RewriteRule ^(.*)$ https://www.mysite.com/$1 [R=301,L]
</IfModule>
###### END FORCE HTTPS AND WWW

and so far i am one happy puppy ??

i noticed that it was added at the top of the All In One WP Security area in the htaccess file like so (but don’t add all this in the textbox, just what i mentioned above), this is just for info to show where it is in the file:

# BEGIN All In One WP Security
#AIOWPS_CUSTOM_RULES_START
###### BEGIN FORCE HTTPS AND WWW
<IfModule mod_rewrite.c>
RewriteCond %{HTTP_HOST} ^mysite.com
RewriteRule ^(.*)$ https://www.mysite.com/$1 [R=301,L]
</IfModule>
###### END FORCE HTTPS AND WWW

so far, so good, will report back with any issues

thanks again

• This reply was modified 6 years, 8 months ago by step8601.

thanks

“If you are getting penalties, that means you should add a page variable to your title settings for those archives.”

would you mind giving an example (for us wannabees)?

thanks

“The custom rules do not change the rules added by the plugin or alter any rules you already have in the .htaccess file.”

yeehah!

i’ll add the force https and www stuff via brute force > custom and see how it goes, will report back

this would be a big help, i’m trying to enforce security but also eliminate content redundancy (www vs non-www)

super thanks ??

i manually added the following to nearly the end of htaccess (see BEGIN FORCE WWW AND HTTPS comments) and shazam it works (i left the /IfModule and END WordPress stuff there to show that this is nearly at the very end of the htaccess file, change mysite of course :

=========================================

## BEGIN FORCE WWW AND HTTPS

RewriteCond %{HTTP_HOST} ^mysite.com
RewriteRule ^(.*)$ https://www.mysite.com/$1 [R=301,L]

## END FORCE WWW AND HTTPS

</IfModule>

# END WordPress

======================================

however, i’m now wondering how i can preserve this when i do plugin updates, i did some plugin updates recently and then i had to re-add this manually to get it working again

could i add this under Brute Force > Custom .htaccess rules ?

do i have to check both (1) Enable Custom .htaccess Rules and (2) Place custom rules at the top, and then enter the custom htaccess code

or can i just check “Place custom rules at the top” and then enter the custom htaccess code?

in other words, do i need to also check “Enable Custom .htaccess Rules”? will this override the existing htaccess?

thanks

• This reply was modified 6 years, 8 months ago by step8601.