onsharp

1. Remove all restrictions from media library files
   This is not an option. The client has hundreds of files restricted and they are restricted for a reason. They are running a site that has files only accessible to logged in users. This would make the files accessible to the public and therefore negate the use of your plugin entirely.
2. delete all rules from .htaccess file
   This essentially does the same thing as #1 and then when the client restricts a file it will rebuild the entire .htaccess file from the database entry. So this is not really an option either.

The client I’m having this issue with just complained again. Has any progress been made on this issue?

We’re having a similar issue on many of our sites. I don’t understand where I’m supposed to make these changes based on your comment. Can you provide screengrabs, please? Or the exact wording for what it is that needs to be changed? Example: Forms to protect > Custom contact forms > On

To me, the easiest fix would be to build the htaccess file in the opposite order, if possible.

Thanks! I appreciate the support.

I’m not sure exactly what you’re asking but this is in regards to the .htaccess file located in the uploads directory.

I also tested it on a clean WordPress install with only your plugin installed and it did the same thing. Just wanted to eliminate any theme or plugin things.

OK, I was able to recreate my issue using the following steps.

1. Add a new file to the media library.
2. Add protection to that file from the backend of the site using your plugin functionality.
3. From the media library delete that same file permanently. (Do not remove the file protections)
4. Add that same file to the media library again.
5. Add protection to that file from the backend of the site using your plugin functionality.
6. This causes two lines in the .htaccess file referencing the same file in the same folder with two different IDs. When you try to access the file it gets to the old record first and returns a media not found error.

Example lines from the htaccess file.
RewriteRule ^(2024/09/PDF-File-2.pdf)$ ../../index.php?wpdmmediaid=9493&wpdmmedia=$1
RewriteRule ^(2024/09/PDF-File-2.pdf)$ ../../index.php?wpdmmediaid=9494&wpdmmedia=$1

Nayeem,

I have found the issue but I’m not sure what to do about it. It’s adding multiple lines to the .htaccess file that adds the protection to the file(s) in question. In this case there are multiple lines referencing the same file in the same folder but they all have different wpdmmediaids. The older ones are first in the list so once it hits that record it returns a file not found error and stops, not making it to the correct line in the .htaccess file. Does that make sense? So either removing duplicates or creating the htaccess file in the opposite direction, placing newer records above the older records instead of below would fix this issue.

Thanks,
Mike

Hi Nayeem!

Yes, when uploading a file, we would like the Allow Access to be automatically applied with a default setting instead of manually going in and configuring it. If possible, we would also like to select multiple files and apply the Allow Access settings as well.

We’re running 2.7.3 on a site until they get this fixed. We couldn’t add an embedded Google map. The plugin strips out the code. I’ve even had a few instances where it completely corrupts the job listing and we need to delete and rebuild it.

Thank you, I’ve made that adjustment. I’m running another security scan now. I’ll report back when it’s complete.

A personal ticket was created.

Hello,

She hasn’t received any more of the *** Forbidden. You sent forms too often. Please wait a few minutes. *** messages, but she did receive this message.

“We’ve got an issue: *** Unknown response from https:Umoderate2.cleantalk.org/api2.0: cURL error 28: Failed to
connect to moderate2.cleantalk.org port 443 after 5202 ms: Connection timed out Anti-Spam service cleantalk.org
***. Forbidden. Please, enable Javascript. Anti-Spam by Clean Talk.”

Is there another setting I can check?

Mike

Hello,

I’ve adjusted those settings, and I will have my client test. I’ll report back on how it goes. Thanks for the quick response!

Mike