cedaly1968

The pop-ups are simply not working and I have the paid version.

It’s also in your user manual on adding a gallery… says you can add a url for a link of the gallery.

https://huge-it.com/wordpress-gallery-user-manual/

Sorry – not being clear. When you go into the Gallery in the admin, there is already a place to enter the URL for the image. I put a url in but nothing happens. I assume it is the url for where you want to redirect the use when they click on the image.

Thanks for the information! I think a few pieces of the http code are part of the PHP files being used. For example, our logo is being displayed via http. I can change the code but I think that also forces everyone to https (which may not be bad considering the volume of attacks our site has received). I’ll get to work on your suggestions – very useful.

I am totally lost

I have two pages: Events and Event
I have an Events URL Slug: events
I have Single URL Event slug: event

When I click “Where is my calendar? Right here It goes to the url/events and shows the calendar. But the url event/ also shows the calendar.

What is the slug for the Single URL Event for?

So the Calendar is using the event slug? How do you know what plug calendar is using? Wouldn’t calendar use the plug “calendar”

So the Calendar is using the event slug? How do you know what plug calendar is using? Wouldn’t calendar use the plug “calendar”

I can confirm he is getting into the MySQL database through PHPMyAdmin. I access the actual database and see the user. I just got the following message this morning:

This email was sent from your website “St. Joseph Cathedral” by the Wordfence plugin at Sunday 10th of April 2016 at 07:05:45 AM
The Wordfence administrative URL for this site is: https://www.saintjosephcathedral.org/wp-admin/admin.php?page=Wordfence

A user with IP address 94.190.36.90 has been locked out from the signing in or using the password recovery form for the following reason: Used an invalid username ‘administartor’ to try to sign in.
User IP: 94.190.36.90
User hostname: 90.36.190.94.interra.ru
User location: Pervouralsk, Russia

This was rejected in an attempt to insert an invalid username. For some reason though rootuser is accepted. He made it in again yesterday and I removed him. I imagine he will again this week. This is the user that we believe has breached the mySQL database multiple times.

Ukraine Lviv, Ukraine
IP: 46.119.112.23 [unblock] [permanently blocked]
Reason: Manual block by administrator
Hostname: SOL-FTTB.23.112.119.46.sovam.net.ua
No attempts have been made to access the site since this IP was blocked.
Last site access before this IP was blocked was 4/10/2016 12:54:00 AM (9 hours 8 mins ago)
5 hits before blocked
0 blocked hits
Permanently blocked
Ukraine Lviv, Ukraine
IP: 46.119.127.129 [unblock] [permanently blocked]
Reason: Manual block by administrator
Hostname: SOL-FTTB.129.127.119.46.sovam.net.ua
No attempts have been made to access the site since this IP was blocked.
0 hits before blocked
0 blocked hits
Permanently blocked
China Beijing, China
IP: 180.76.15.143 [unblock] [permanently blocked]
Reason: Manual block by administrator
Hostname: baiduspider-180-76-15-143.crawl.baidu.com
Last blocked attempt to access the site was 4/10/2016 12:00:17 AM (10 hours 2 mins ago).
0 hits before blocked
6 blocked hits
Permanently blocked
Ukraine Lviv, Ukraine
IP: 46.118.155.216 [unblock] [permanently blocked]
Reason: Manual block by administrator
Hostname: SOL-FTTB.216.155.118.46.sovam.net.ua
Last blocked attempt to access the site was 3/22/2016 8:48:25 PM (18 days 13 hours ago).

He is actually getting on and is in the MySQL database.

I am using the Wordfence Login Security Options to block rootuser. There is not a user in the installation named rootuser. There are actually only 5 users on the site. I also have the application set to immediately lockout invalid usernames.

After deleting the users and blocking his IP address yesterday, the user has not returned. Typically, he reappears within a week (not back today).

I am not on a shared server and the server is protected with an SSL certificate. This activity started AFTER WordFence was installed. I can sometimes get the user to drop for a month and then it comes back. I know there is a hole, the issue is where. I’ll have to look again. I can shut down plugins, but then I have to wait a day or two and the results are likely inconclusive. There has to be another way to figure this out. I can’t deactivate the site functionality for that long.

This plugin is becoming more maintenance than it is worth. I had to deactivate all of my plugins, did not change a single page, and of course when I reactive The Event Calendar the events and calendar disappear. Now I am trying to figure out why and whether or not I have to reinstall the entire thing. This is VERY frustrating.

hey this is awesome, thank you. I have a lot of these in place but securing write permissions on folders is a good idea too. I am just surprised that users are being added. Thanks for this – great post!

Still working on the CSS – wow, you guys have a TON of code for the calendar! This might take a while. I did fix the CSS so the events Widget looks better for my theme. The corrections for the Calendar Filter are going to take some serious effort!

Thanks Brook – I will take a look. Love the plug-in… you have something good going there!