anakin2697

I’m not sure if you are intentionally ignoring the obvious or just always side with authors no matter how suspicious a plugin is acting but I have evidence.

(1) As mentioned I keep cataloged backups that I can restore easily – and can restore them without error if this plugin is not installed.
But if I install this plugin and then try to restore it my control panel warns “Access denied; you need the SUPER privilege for this operation.”
That’s because this plugin is modifying the database to access things it shouldn’t be and my control panel is blocking it.
I’ve started from scratch multiple times and it has done the same thing each time.

(2) If I restore a backup without this plugin loginizer has no problem updating. If I install this plugin logizer breaks.
There is nothing wrong with my site other then *this plugin* breaking security functionality when i install it, confirmed multiple times with fresh installs.

(3) Regarding “That would be a neat plugin that could do that.”.
I read an articular on wordfence recently that several plugins were compromised when sold to new authors, and some of them included backdoors that allowed access to the sites.
So it’s not such a reach that this malware infected script might very well be calling home – and causing the IP behavior I observed.

Interesting enough the wordfence article mentioned that YOU wordpress admins were very slow to act in removing malware, including ignoring more than one complaint.
Maybe you should be a little more interested in protecting users and a little less interested in attacking them.

No, My site was not just “hacked” but it is this plugin specifically.

I keep directadmin backups of all changes I make to my site.
When I went to “restore” a copy that included this plugin, directadmin balked because the copy with this code was trying to access super admin privileges, which is not normal.
I confirmed it by installing a fresh copy and it did the same thing each time I installed this plugin.

And as I mentioned, with this plugin installed, my loginizer updates would not run – wheras if I restore the previous copy that did not have this plugin, my security software updated normally.
And lastly I saw I was attacked by multiple IPs shortly after installing this plugin.
I had to block them via my firewall.

Did you use the demo csv file? I think I remember I had the change the image field name in the csv file to “featured_image” to get it to work correctly.

Could be something else in your case but maybe worth a try. (fyi i’m not the author just a user)

Good point – the author should be more clear on the differences between the free and pro version.

Sure you can use google analytics for free- which gives google control over your data and is also pretty clunky and UN-intuitive. Or you could support a plugin like this that gives you control over your own stats data on your own site, and is intuitive to use.

The pro version is worth every penny.
It takes a lot of work to develop wordpress plugins. I have seen more than one good “free” plugin die because nobody donates to it. Users like you complain when the plugin dies. Why not support authors to keep good plugins like this alive?

True Mickey..

But up until now the author has gone out of his way to help people, reading his blog.
And reading his FAQ it implies support will be provided such as “I have found a bug

Please report it NOW. I fill try to fix it and incorporate the fix into the next release. I try to respond quickly to bugs that are possible to fix (all others take a few days). “

The above implies he is willing to help you.

But i’ve seen other plugins that say in all caps on the plugin homepages “NO SUPPORT IS PROVIDED FOR THIS PLUGIN. USE AT YOUR OWN RISK.”
It sends a very clear tone difference :)..

Obvoisly he will still get an occasional knucklehead but I think if he makes the lanquage change, and doesn’t provide support on the forum, many people will get the message.