Multisite Access from Specific Site

  • Resolved Rhapsody348

    (@rhapsody348)


    3 years, 8 months ago

    I have a multisite installation using subdomains. On my sites, I have a created a plugin that manages site content for various subsite administrators. This includes producing reports of their site users (e.g. display a table with all user profile fields).

    I am considering using this plugin so that administrators for selected sites could add extra user profile fields. Not all of the subsites would have this so the plugin would only be enabled on selected subsites. I see that your plugin creates a number of tables with the table name format WP_PREFIX_prflxtraflds_table-name.

    Questions:
    1. Do you store only the user_id in your custom tables that has a relation to a WordPress user, or do you also store the Site ID that user is associated with? (If not, I can use the is_user_member_of_blog() function) . This will make displaying the user profile fields easier for selected sites.

    2. Is there a function that can be called to determine if the plugin is activated on a particular subsite on a multisite install? (If not I can use is_plugin_active(‘profile-extra-fields’)). This will determine if I look for the extra profile fields.

    3. Assuming that condition 2 above is met, is there a function or shortcode that will put a users custom profile data into a multi-dimensional array with field_name -> user_data pairs so that I can easily iterate to output the data table?

    4. Do you sanitize data inputs to prevent sql injection?

    5. Do you handle quotes and other special characters in the data?

    The page I need help with: [log in to see the link]

Viewing 5 replies - 1 through 5 (of 5 total)
  • Plugin Support andrewsupport

    (@andrewsupport)

    Hi,

    1), 2), 3), 4), 5) – This functionality is not available. We will consider it, and if we deem it necessary, we will make the necessary changes to the plugin.

    If you’d like, you can request a paid customization and provide all the details on this ticket. This way, we could develop the functionality that would match all of your requirements.

    Thread Starter Rhapsody348

    (@rhapsody348)

    So you do not sanitize data inputs to prevent sql injection? This is very dangerous and I recommend that nobody use this plugin until that is incorporated.

    Plugin Support andrewsupport

    (@andrewsupport)

    Hi,

    I apologize for the misleading answer. We do sanitize data inputs to prevent sql injection. The plugin’s code is written with all WordPress security guidelines.

    Thread Starter Rhapsody348

    (@rhapsody348)

    Thank you for the security answer. This is good news. I will write my own function to pull the customized data for a multisite installation and post it here to share for other to use.

    Plugin Support andrewsupport

    (@andrewsupport)

    Hi,

    Thanks for letting us know.

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘Multisite Access from Specific Site’ is closed to new replies.