jmy1138

I see — do you know to what extent the vulnerability was?

Doing a quick check, I just noticed an odd folder in /wp-contents called ‘mu-plugins’. It contained a single ‘sso.php’ file with some code. This folder is neither in my local or GitHub repos.

• This reply was modified 7 years, 9 months ago by jmy1138.

I did delay updating to 4.7.2. By the looks of what was updated in 4.7.2, there were a number of security issues. Are these issues associated with what I saw?

Here goes the solution:

<?php if ( post_password_required() ) {

echo get_the_password_form();

} else { ?>

‘Password Protected Custom Content’

<?php } ?>

I figured out the issue: I am using a custom page template in which all content is being pulled in from Custom Fields, and therefore being contained within the_content();. Therefore, there was no need for this template tag, and when the page had password protection enabled, nothing happened.

Now, its time to figure out how to password protect a custom page template full of custom fields!

Thanks for checking Esmi. Any ideas in regards to how I could troubleshoot?

Here is the basis theme’s URL: https://underscores.me/

I can also try uploading an unaltered version of this basis theme, switching to it and seeing if the issue is still occurring. If it is still happening, is there a way to test if password protection is enabled properly in the theme?

Its a theme I created, using Underscores as a basis.

Yes, I was in fact using a custom template and this prevent the content from being protect. All fixed up now— thanks!

Yes, it was: the solution was adjusting the User Agent Groups settings

Solution found: I ended up using another Boilerplate framework called Handcrafted WP starter theme by Randy Hoyt and Randy Jensen. Not exactly sure what is in this theme that fixed the issue, but I suspect there is a fix for browsers that do not recognize html5 that the other was lacking, or was not clear on how to activate.

Thanks for the help guys.
– j

Thanks for the feedback harmck!

I am glad you have experience with the html5 Boilerplate theme: is this the best one in your opinion? I am curious to know how it stacks up to the others recommended on the H5BP site.

In regards to Modernizr: I decided to just disable this, and use the html5 shiv instead (I plan to just put IE hacks in separate css files).

In regards to mshtml.dll: Is this definitely where the problem is? I did a quick search, and it looks like people with the same error are getting crashes, etc. Is this problem with the user’s browser/system and not the site itself?

Hmmm— then its more inconsistent that I thought.

Harmck: as far as toolbar addons, this would only be the case if everyone that I have had test in IE has the same addons.

At this point I think the best approach might be to just strip down the site and start again

I am getting mixed results in regards to how the site in behaving on different versions of IE/different computers: It looks like it is an IE8 and below issue, and possibly slightly older computers.

Thanks for the reply Gabe:

I have not tried disabling plugins, but none are active other than Akismet and Jetpack, so I didn’t think this would be the source of the issue. Should I still do this?

And yes, site is working just as expected in other major browsers.

Moving the jQuery UI link to the footer resolved the js console error, but I am still having issues with IE: the issues are different depending on what computer the user is on, but it is either locking up the site, or there is a ‘debugging’ error with the pages. IE isn’t being any more specific than that apparently.