• Resolved Joe Bailey

    (@billybidley)


    When I activate this plugin (it is deactivated currently), previously entered form submissions show up to every visitor to the site which is a massive security breach. Could it be an incompatibility with a plugin?

    Other plugins I have installed are:
    Admin Columns
    Advanced Custom Fields PRO
    All 404 Redirect to Homepage
    BackWPup
    Contact Form 7
    Contact Form 7 – Dynamic Text Extension
    Contact Form 7 Builder And Designer
    Contact Form 7 Drag and Drop FIles Upload – Multiple Files Upload
    Custom Content Shortcode
    Custom Post Type UI
    Favicon by RealFaviconGenerator
    Flamingo
    Flickr Justified Gallery
    Imagify
    iThemes Security
    MC4WP: Mailchimp for WordPress
    Redirection
    Redirection for Contact Form 7
    Resend Welcome Email
    Responsive Lightbox & Gallery
    SEOPress
    WP Mail SMTP
    Yoast Duplicate Post

    The page I need help with: [log in to see the link]

Viewing 15 replies - 1 through 15 (of 19 total)
  • Plugin Author Aurovrata Venet

    (@aurovrata)

    previously entered form submissions show up to every visitor to the site which is a massive security breach.

    that ain’t normal.

    Could it be an incompatibility with a plugin?

    unlikely to produce this result. The plugin has the functionality to load previously submitted values for a given logged-in user, but this can only be triggered for all users with specific filters.

    Can you enable the plugin and map a test form on a private page so I can take a look

    Thread Starter Joe Bailey

    (@billybidley)

    Hi Aurovrata,

    I’ve made a staging site and private page with a mapped form on. The issue only occurs with non-logged-in users. How can I give you access?

    Plugin Author Aurovrata Venet

    (@aurovrata)

    if it is a staging server then no need to make it a private page, just a normal page and the link here. I want to see some settings on the page

    Thread Starter Joe Bailey

    (@billybidley)

    Plugin Author Aurovrata Venet

    (@aurovrata)

    When a non-logged-in visitor submits the form, the post created is authored by the admin user (id=1) by default.

    If you have previously submitted forms for this default author which have been flagged as ‘Submitted = no’, (by default it is ‘yes’, but you must have changed it in your post table), then the plugin assumes that this post submission is not complete and therefore reloads it in the form,

    image

    As you can see in this screenshot, the first post has its ‘Submitted’ column set to ‘no’.

    If you Quick edit your post, you an check the submitted post back to ‘yes’, and this will stop it from being loaded in the form again,

    image

    Thread Starter Joe Bailey

    (@billybidley)

    Hi Aurovrata,

    Thanks for digging into this for me.

    The Post My CF7 Form ?is mapped to a Custom Post Type, set with the Custom Post Type UI plugin.

    When the Post My CF7 Form plugin is active, I cannot see my Custom Post Type.

    When navigating to this URL:
    ?https://staging.solentcreatives.co.uk/wp-admin/edit.php?post_type=project

    I get this error message:
    Sorry, you are not allowed to edit posts in this post type.

    I can still see this page:
    https://staging.solentcreatives.co.uk/wp-admin/edit.php

    I am an administrator on the site but not user id 1.

    When the Post My CF7 Form plugin is in-active I can see all of my custom posts just fine.

    Therefore, I can’t test whether changing the Submitted Column fixes my issue.

    Plugin Author Aurovrata Venet

    (@aurovrata)

    The Post My CF7 Form ?is mapped to a Custom Post Type, set with the Custom Post Type UI plugin.

    ok, so this could be the source of your problems! Make sure you map your form to an existing post and not a custom post type, since the post type already exists and its creation is hnadled by the other plugin.

    Keep in mind that many post type/field creators somehow implement the creation in a non-std WP way. Users have complained of strange behavior with the ACF plugin. I have not experiemented with this Custom Post Type UI plugin, but it may also be causing strange behaviour.

    The Post My CF7 is designed to handle post and field creation for you. So if it is not working as expected, then map your form to a new custom post type and let the plugin handle the creation.

    Thread Starter Joe Bailey

    (@billybidley)

    Thanks for the reply.

    I’d love to switch those settings around but making any updates on the Post My CF7 Form page inside the Contact Form 7 admin do not save. Whether that’s switching from live to draft, updating a mapping, etc.
    Have tried on already created and brand new forms.
    Have tried with all plugins disabled except this and CF7.
    Have tried on 2 different hosts.

    Are you supposed to be able to make changes on this page?
    https://take.ms/bMpFS

    Plugin Author Aurovrata Venet

    (@aurovrata)

    any updates on the Post My CF7 Form page inside the Contact Form 7 admin do not save.

    can you inspect your javascript console and see if you are getting any errors?

    Are you supposed to be able to make changes on this page?

    so from your screenshot I can see already 1 misstake. You have selected ‘New Post’ for the first mapping field ‘Post Type’. If you are using another plugin to create the post type Project, then you need to select the value ‘Existing Post’. ‘New Post’ is only when you let the Post My CF7 handle the post creation.

    Thread Starter Joe Bailey

    (@billybidley)

    I can change the dropdown to ‘existing post’ and that saves, however, due to the incompatibility with the CPT UI plugin, my custom post type does not display.

    I now cannot change the dropdown back to ‘new post’, changes will not save. No console errors.

    Plugin Author Aurovrata Venet

    (@aurovrata)

    however, due to the incompatibility with the CPT UI plugin, my custom post type does not display.

    well that’s because the project post type already exists in the databse, so you cannot create it again!

    You’ll need to create a new post type project-new for example to get it to work.

    Thread Starter Joe Bailey

    (@billybidley)

    That would be great if I could edit any settings:
    https://monosnap.com/file/AaBigtwiAUkMjjZKA1VvLg9gOg2HNw

    Plugin Author Aurovrata Venet

    (@aurovrata)

    very odd. Let me run some tests on my server and get back to you.

    Can you also enable WP_DEBUG mode and see if you are getting any errors on your server?

    Thread Starter Joe Bailey

    (@billybidley)

    Notice: Undefined index: menu_position in /home/sites/20a/7/717fa3dd6e/public_html/wp-content/plugins/post-my-contact-form-7/includes/class-cf7-2-post-factory.php on line 314

    Warning: Cannot modify header information – headers already sent by (output started at /home/sites/20a/7/717fa3dd6e/public_html/wp-content/plugins/post-my-contact-form-7/includes/class-cf7-2-post-factory.php:314) in /home/sites/20a/7/717fa3dd6e/public_html/wp-includes/functions.php on line 6712

    Warning: Cannot modify header information – headers already sent by (output started at /home/sites/20a/7/717fa3dd6e/public_html/wp-content/plugins/post-my-contact-form-7/includes/class-cf7-2-post-factory.php:314) in /home/sites/20a/7/717fa3dd6e/public_html/wp-admin/includes/misc.php on line 1310

    Warning: Cannot modify header information – headers already sent by (output started at /home/sites/20a/7/717fa3dd6e/public_html/wp-content/plugins/post-my-contact-form-7/includes/class-cf7-2-post-factory.php:314) in /home/sites/20a/7/717fa3dd6e/public_html/wp-includes/pluggable.php on line 1340

    Warning: Cannot modify header information – headers already sent by (output started at /home/sites/20a/7/717fa3dd6e/public_html/wp-content/plugins/post-my-contact-form-7/includes/class-cf7-2-post-factory.php:314) in /home/sites/20a/7/717fa3dd6e/public_html/wp-includes/pluggable.php on line 1343

    Plugin Author Aurovrata Venet

    (@aurovrata)

    Hello Joe

    I made some more tests on my server and found a bug that could explain the issues you have been facing.

    Before I deploy the fix, can you please test it on your setup. You will find the version 5.4.5 beta on the github repo, please download the zip file and manually update your version to see if it works for you.

Viewing 15 replies - 1 through 15 (of 19 total)
  • The topic ‘Activating this plugin breaks CF7’ is closed to new replies.