the_lar

Hi,
I’ve got a feeling I know what is/was causing this… can you sanity check my thinking??

For some reason, my .htaccess file which was redirecting http to https got overwritten – not sure why. So the redirect wasn’t working. So, user adds product to cart on http page, then heads to cart, which is https. Would that cause the empty cart?

Thanks K

Hi Mikko,

Just coming back to this thread… sorry for the delay! I’ve looked at the example you gave me and I wanted to check whether you think it would be possible for a multiplier to be applied depending on the age of the post?

So a given search will produce a set of posts with one of which is the oldest published and one of which will be the newest, I was thinking that maybe there could be a multiplier across that range. So the oldest has a multiplier of 1 the newest might have a multiplier of 2 then some post with a published date in the middle would have a multipler of 1.5. The scale might be different but this is possibly a bit more sophisticated that having a simple cut off date which wouldn’t really work for my needs. For me it’s not as simple as just saying that ‘all posts that are less that 2 weeks (or whatever) old get this magic boost’, I need a kind of sliding scale that obviously doesn’t completely obfuscate the most relevant items either.

Hope that makes sense? Maybe the example you showed could be adapted to this approach so any pointers would be fab!

Thanks
Kevin

Hi Chris,

Yes that seemed to do the trick, is that a recent change?

On a side note, why is it that I have to use this:

__gaTracker(‘send’,’event’,’hire me’,’click’,nme);

rather than something like this:

ga(‘send’, ‘event’, ‘hire me’, ‘click’, nme, ‘clicked’);

Never quite understood that?

Cheers
Kevin

Hi Kevin,

Thanks for your thorough reply, it is much appreciated! Yes I meant ‘Force Login’ not ‘Force Members’ – sorry for confusion. I am using the Members plugin as well but that’s another story!

I am using Google Authenticator on some other sites, that don’t use Force Login and I’m not getting the issue so I’m sure that this is specific to the combination of the two – what is it specifically about the combination that may be causing it do you think?

Hi,

Just wanted to second this request. As part of a security review I’ve downgraded lots of my clients to Editors because basically they can’t be trusted not to share their login details with anyone who asks for them!!! However now they can’t manage their own redirects.

Happy to use this for now but what do think the ETA is for the next version Scott??

Cheers
Kevin

Hi,

I would also like to know whether the form can be changed. The plugin suits me perfectly too but I MUST be able to add some more *required* fields to the form. If there are any hooks I can use to specify some additional fields, that would be perfect.

Thanks
Kevin

Great thanks for replying Anton, will this work with just a standard PayPal account – there’s nothing special required is there?

Kevin

bumping this – anyone got any thoughts?

Cheers

It seems no one has a solution to this but if I wanted to remove the behaviour of wordpress sending the wp-remove-post-lock when a user clicks on ‘Add new’ – is that do-able?

Kevin

I have a similar issue, I have a fairly complicated scenario where I have set up dummy terms in custom taxonomies and use these as landing pages, I then use rewrites to extract variables and pull content in from other custom post types based on these. The ‘canonical’ ref on my custom taxonomy archive pages generated by Yoast was completely wrong. This is how I’ve disabled it:

//Try to remove canonical on custom taxonomy archive pages
function wpseo_canonical_exclude( $canonical ) {
	if (is_tax()) {
		$canonical = false;
    }
	return $canonical;
}
add_filter( 'wpseo_canonical', 'wpseo_canonical_exclude' );

Obviously this disables canonical for ALL custom taxonomy archives but you could check for a particular one.

K

I am aware of this list as they appear frequently on this forum and the suggestions are either already done or are being done. I’m looking for some more specific advice on the fingerprint of this particular issue rather than a generic list of resources though.

I take security very seriously but I’ve never come across a compromise which allows the compromiser to be able to add posts without an associated user name and wondered if any others had had similar experiences.

Thanks
Kevin

Hi There,

Just seen this thread. I am experiencing the same issues with TinyMCE 3.5.8. What happens is I highlight the text I want to add the link to, insert the link then when I switch to the text tab, I can see that the link is wrapped around the <p> tag. If I publish this without changing the code (as an editor without HTML knowledge would), the link works fine on the front end but when the editor goes back to the page, the link has dissappeared! Pressumably this is because TinyMCE is seeing it as invalid (which it is) and stripping it out. The problem is that TinyMCE is causing the invalid code in the first place.

This is causing me some headaches because obviously the editors of the sites I build are not capable of editing the HTML to correct the original issue. I’d be happy to demonstrate this over a ‘join.me’ session with the plugin author if needed?

Cheers
Kevin

Thank you, I can see that might be useful but do you know if I would be able to make the additional information mandatory?

Cheers
Kevin

Ah, I see – I thought it flushed on every page refresh. Thanks again for your help – really appreciate it.

Kevin

Just as an update on this, I have set up a single ‘dummy’ post in Properties and I am rewriting all queries to /property/somepropid/ to ‘index.php?property=dummy’ and reading the actual id into a variable – here’s my addition to keesiemejers code:

$options = array(
  'rules'=>array(
    ...,
    'property/(.+?)/?$' => 'index.php?property=dummy&propid=$matches[1]'
  ),
  ...
);

This seems to do the trick and means that I can handle all /property/ requests without there needing to be an actual post for it.

I do have one question – I have put keesiemeijer’s class into my functions.php file, but I’ve read that it’s not particularly efficient to keep flushing_rules – would I be better writing this class into a plugin?

Thanks
Kevin