Mark

So far changing that one line of code has fixed this for me.

I am using a caching plugin – LiteSpeed Cache for WordPress

Those alerts were coming when I was active on my site. Every time I add a new post/page/etc. the cache is cleared. Connected to whatever was causing those alerts maybe?

And above is exactly what I was getting. The last one claimed that over a thousand admin had modified accounts and there’s only one admin account.

Mark

So far, so good. First day I have not received those two messages warning me about admin changes.

Knock on wood!

Did the change to the plugin. I’ve continued to get the alerts but only just now had time to check back and find out what the fix may be. I will report back whether or not the alerts stop.

The number has grown. I get two emails each time. One indicating my actual admin account has changed and another one telling me that thousands of admin accounts have changed but it’s just one blank entry after another. I’ve looked both ways and there just aren’t any other admin accounts besides mine.

Anyway, will report back.

PS To clarify, I was continuing to get the alerts and have now tried the fix. The way I worded that was not entirely clear. It’s late!

• This reply was modified 6 years, 3 months ago by Mark.

I seem to be getting a variation of this. I received two alerts tonight like this.

Alert: Database changes detected

The first one claimed there were 542 changed administrator accounts. It was one long blank list with the titles for the fields but no actual data.

The second alert showed just one account changed – my one and only admin account. I checked my user account and can find no changes but did change my password to be on the safe side.

I looked at my SQL tables and it didn’t show any accounts other than the small handful that exist on my site. And I used the script above for extra measure. It also gave me one admin account, my own.

When I look at Ninjafirewall log it does show it blocked a visitor who was trying to enumerate authors.

HEAD /index.php – User enumeration scan (author archives) – [author=1]
GET /index.php – User enumeration scan (author archives) – [author=1]

Several times over. No idea if there’s any connection.

The user IP listed in the email is mine which is the weird thing. I am logged in but before the alert I had not changed anything, password, etc. for my account. I was updating a widget in my sidebar.

Thanks Con – did leave it – although I’m unsure how many people will vote on it. We shall see.

??

Okay, my understanding, however tenuous it may be, is that the real app is the plugin, i.e. the code running on our blogs. The Facebook settings just tell Facebook what to expect from our app. So as far as I can tell the link just tells us how to change those settings without actually updating the app itself? And maybe in reality the app is already compliant?

Dunno, would hope for some official word on this from the developer but appreciate anyone’s effort- thanks Parneix!

I noticed the same issue today. I know my category sitemap was fine before I went in and added SEO info for each category yesterday. Sure enough going back and changing to “always include” on each one fixed it. Thanks for the helpful info!

FWIW, I’ve seen the same behavior with regards to Facebook ignoring og:image with likes/shares using the new plugin. I haven’t done an exhaustive comparison, but sites that it’s working on seem to still be using the (older?) open graph meta tag style in the header such as still documented here:

<meta property="og:tag name" content="tag value"/>

where the current plugin is using:

<meta property="https://ogp.me/ns#locale" content="en_US" />

When I run pages through the debugger, it shows that they have the image tag, but when I share them, it’s hardly ever the image chosen.

I’m not sure why it’s not expressly pointed out somewhere in the plug-in, but you can see the Facebook comments for your apps at this address:

https://developers.facebook.com/tools/comments

Awesome! Since it’s not something I needed routinely I opted for a short and sweet route to fix it last night – just displaying thumbnails with links in a grid, but if I were to need this more regularly, I’d definitely go this route!

I did test your updated code with a test post on my site just now and there was no javascript that I could see in the RSS feed. I didn’t want Mailchimp to pick it up so I deleted the post but the lines of code their support people indicated caused the issue was no longer there so I think you succeeded!

So it appears only posts thumbnails are supported? Is there a reason pages are not supported? As I said, the previous plugin I was using was able to accomplish both tasks.

I’ll look at your link, and see if it’s something I can manage on my own in the interim but I don’t think it’s expecting much for Facebook’s own plugin to handle both Page and Post featured images. Joe User (and I likely fall into that camp myself) isn’t expecting to have to jump through hoops. Heck, how many posts have I read just for the support issues in this plugin that involved users unsure how to even FTP into their site?

At any rate, thanks for the confirmation and for the link! I’ll see what I can make of it.

@creativemarblesconsultancy – re the code to add FB comments independent of the new plugin. Depending on your comfort level playing with theme files, it’s not overly complex.

Facebook even provides a tool to build the the basic code here:

https://developers.facebook.com/docs/reference/plugins/comments/

Now it would be tedious to use that code generator for every page/post and insert it individually -a nightmare in fact if you ever wanted to change course and had inserted it a lot of places. I’ve inserted the code into my theme files where I want it to appear with one change, I took the hard-coded URL from Facebook’s code sample and replaced it with:

<?php the_permalink(); ?>

That way Facebook is passed the URL for the page/post in question without you having to hard-code it. That’s my approach anyway and it appears to work but I welcome anyone finding fault with it and offering better code. I don’t claim to be a WordPress guru.