This plugin echoes secret tracking info to your site as HTML comments

Users who write a certain negative idea on the “Missed Schedule WP Plugin”, with the sole intention of leaving poor and fake reviews on other Author Plugins, or leaving poor and fake reviews on other Author Plugins, and make low stars choice on your reviews to intentionally decrasee other plugins popularity, is NOT welcome on the WordPress Forums and Reviews, and it can result is us removing your accounts and it is also blocked from our network.

Please moderate your language.

Please forum and review moderators to verify that all Gerant Norwood affermations was true or delete this FAKE review!

Thanks!

Grant Norwood wrote:

The author chose to echo a bunch of garbage to every HTML page as comments so he can use Google searches to track install base, and potentially other secret [ profanity redacted ]

Not only is this defamation, but no moderator does nothing to warn this user, who literally wrote that this plugin is a “[ profanity redacted ]“, and accused of being a hacker author of this plugin, so much to like. All this on the support forum WordPress? All legal? All permission … to certain users “excellent”? Where are the moderators? They care only to monitor the author of this plugin, while to others everything is permitted? I am waiting for clear answers to those responsible!

Thank You!

slangji: People are entitled to their opinion, and we will not silence other people’s legitimate views here simply because you disagree with them.

Yes, what he wrote is allowed here.

Even if you are totally false?
Even if you are totally invented?
Then it is allowed to write [ profanity redacted ] on this forum?
Then, i can also use this expression “program of [ profanity redacted ]” without being banned?

Regarding profanity: while we’re all grownups here, it is encouraged to keep these forums family friendly. I’ve redacted that part.

Thanks Jan for profanity edit, but all that says is totally false. He accuses me of having entered a malware in the plugin, and to be a hacker. Ask advice of my lawyer. This is a review for the sole purpose of producing a distorted idea of this plugin. In the guidelines of the forum is expressly forbidden to do this! Or am I wrong? Or this condition applies only to me, and not for other users?

The author is right, I should not have used profanity in my review. That wasn’t very classy of me and I truly apologize for using a 4-letter word to describe the garbage you output to users’ HTML pages as comments, most likely without their knowledge.

HOWEVER, my choice of words doesn’t change the fact that your plugin emits suspicious HTML code and uses multiple md5() hashes in the PHP source code for no apparent reason, which is a tell-tale sign of malware (even if it is not actually malicious, it looks like it is).

The purpose of my review is not to be mean, but is to make users aware of what you’re outputting to their pages, most likely without their knowledge, and without the option to disable it. I think it is especially important because it gives you, the author, the ability to track sites who have installed your plugin, something I’ve never seen another WP plugin do. For example, you can query NerdyData.com (https://search.nerdydata.com/code/?and_code%5B%5D=Plugin%20WP%20Missed%20Schedule&limit=0,10&rank_min=1&rank_max=1000001) to get at least a partial list of sites who have your plugin installed and active. A more specific query would allow you to see who is using which versions of your plugin.

Even if the code you’re secretly outputting to users’ pages is just version numbers, in the event a security vulnerability is found in a specific version of your plugin, hackers could use the same search queries to specifically target all the users on that version of your plugin. Not cool.

I would welcome an explanation of how your plugin’s outputting of version numbers and other chars to HTML comments benefits users who have installed your plugin, as well as what you, the author, use them for. I’m happy to admit I’m wrong if you can correct anything I’ve said.

I’m not accusing you of wrong-doing, I’m simply calling attention to what I think is problem with your plugin. And I should’ve said it nicer the first time.