Viewing 13 replies - 1 through 13 (of 13 total)
  • Plugin Author Ronald Huereca

    (@ronalfy)

    Thanks, I’ll check this out on an MS install. I’ll try to have something for you this evening.

    Plugin Author Ronald Huereca

    (@ronalfy)

    Plugin Author Ronald Huereca

    (@ronalfy)

    Can’t duplicate this. Please see above thread. Do you have a members plugin enabled that defines custom roles?

    Thread Starter Kevin van Hengst

    (@kevinvhengst)

    Thx for the reply.

    We do not use a plugin that defines roles for users. We use the role system WordPress ships with. I have to note that it is a multisite with a total of 8 sub sites.

    The plugins we use are the following:

    acf5-pro
    advanced-custom-fields-cli
    advanced-post-types-order
    csv-importer
    debug-bar
    domain-wpcli
    gravityforms
    gravity-forms-google-analytics-event-tracking
    proper-network-activation
    relevanssi-premium
    responsive-video-embeds
    wordpress-importer
    wordpress-mu-domain-mapping
    wpml
    wpml-string-translation
    wordpress-seo available
    customer-admin
    networkwide-functionality

    Plugin Author Ronald Huereca

    (@ronalfy)

    Hmm, none of those plugins set off any bells or alarms.

    I tested on a local multisite, but did not use domain mapping.

    What version of Gravity Forms are you using?

    Thread Starter Kevin van Hengst

    (@kevinvhengst)

    Gravity Forms in on “1.9.12.16”.

    I’ve done some digging in the plugin code and backtraced the line of code that calls a function form pluggable.php called check_admin_referer.

    This function is getting called at line 457 of class-gravity-forms-event-tracking-feed.php and features this line of code check_admin_referer( $this->_slug . '_save_settings', '_' . $this->_slug . '_save_settings_nonce' );.

    When I comment out this line I am able to setup trackings for the forms.

    For the sake of completion I’ve dumped the value’s that are being used in function check_admin_referer.

    var_dump($adminurl);
    var_dump($referer);
    var_dump($result);
    die();

    It gives me the following data:

    string(34) "https://dev.hooymeijer.nl/wp-admin/" string(124) "https://dev.hooymeijer.nl/wp-admin/admin.php?page=gf_edit_forms&view=settings&subview=gravity-forms-event-tracking&id=1&fid=1" bool(false)

    Plugin Author Ronald Huereca

    (@ronalfy)

    Good digging. I’ll take a look at this further.

    Plugin Author Ronald Huereca

    (@ronalfy)

    Okay, found the issue.

    I was able to get a copy of 1.9.12.16 from Gravity Forms support. In this version, there is a bug where a nonce isn’t being outputted in the feed settings.

    I highly recommend updating to 1.9.18 as that will immediately fix the issue.

    I’m not seeing a way to output my own nonce onto the settings page to remedy this issue, but if you’re unable to upgrade, I will investigate this further.

    Thread Starter Kevin van Hengst

    (@kevinvhengst)

    Ah that’s quite an interesting find. I should be able to update Gravity Forms to a newer version. I’ll let you know the results when I’ve been able to upgrade it.

    Thanks for your efforts in this investigation. ??

    Thread Starter Kevin van Hengst

    (@kevinvhengst)

    I’ve updated Gravity Forms to 1.9.18.3 and everything works as intended. Thanks for the effort!

    Thanks for this info, updating to the latest version of GF also fixed this problem for me ??

    I’m having this issue as well. I am using the most current version of GForms 1.9.13.26 and it says my version is up to date. Any ideas?

    • This reply was modified 7 years, 12 months ago by jkenler.
    Plugin Author Ronald Huereca

    (@ronalfy)

    That seems like a pretty old version. The version they have listed on their site is 2.1.1.12.

Viewing 13 replies - 1 through 13 (of 13 total)
  • The topic ‘Are you sure you want to do this?’ is closed to new replies.