simonpedge
Forum Replies Created
-
Thanks a ton. It works a treat.
Also the response time was literally minutes (unheard of) – thank you!
See: https://drive.google.com/file/d/17L_8GHNDvbg9wcYp2FF3d-zXHgB4zIrm/view?usp=sharing
This is email correspondence I had with “FearZzZz” back in March about this. He is the one who raised this XSS issue on PatchStack, and I created Version 2.4.9 to fix this issue. In the email you can see he confirmed that the issue had been resolved.
Not sure how to get PatchStack back in the loop, you would think they would periodically test to see if vulnerabilities still exist?
I’ve actually deleted the plugin completely and I’m still getting the above message. That’s dodgy??
PatchStack has just not updated their database.
You will see that on PatchStack, FearZzZz is listed as the person who discovered the vulnerability. This is who I’ve been dealing will via email correspondence and he has confirmed to me via email (and also see above previous comment) that this vulnerability is resolved.
Ok I am closing this topic now as version 2.4.9 solves the security vulnerability.
Ok I am closing this topic now as version 2.4.9 solves the security vulnerability.
Ok, I’m waiting to hear more about this from either www.remarpro.com or WordFence Security.
In the past whenever I’ve had security issues with Slide Anything, www.remarpro.com or WordFence Security (or both) have contacted me and provided details on the issue, how to replicate it etc.
Recently (within the last year), www.remarpro.com contacted me and told me I had to go through the entire plugin and sanitize all inputs (and escape all outputs) to make the plugin totally secure, otherwise they would delist the plugin. This included sanitizing titles, text inputs text areas etc… This was an exhaustive process but I did it and www.remarpro.com confirmed this as of release 2.4.0 for Slide Anything. I have not heard back anything since.
I have not added any new input fields and new functionality to the plugin since, so I am wondering if this is a red herring or maybe security scanners are acting on old information. But maybe I missed something (and www.remarpro.com missed it). I’m sure if it’s a real issue www.remarpro.com will contact me shortly about it.
No, sorry, but this feature is not available.
On some hosts, you can run into issues when you approach 50 slides – this is because the PHP ‘Max Input Vars’ may be set very low (only 1000) on some hosting configurations.
To increase this PHP setting see:
https://support.undsgn.com/hc/en-us/articles/213459869-Max-Input-Vars
https://themezly.com/docs/how-to-increase-the-max-input-vars-limit/What version of PHP is your web host running?
If PHP version 8.0 or higher, then try switching back to PHP 7.4 to see if that helps.
What version of PHP is your web host running?
If PHP version 8.0 or higher, then try switching back to PHP 7.4 to see if that helps.
What version of PHP is your web host running?
If PHP version 8.0 or higher, then try switching back to PHP 7.4 to see if that helps.
Sorry, but Slide Anything slides are static content only and cannot be automatically generated from custom post type content.
I did develop a plugin a while back (Slide Any Post), which did not really take off, which you could have a look at – see: https://edgewebpages.com/sap/
(there is a 7-day trial, so you can test whether it works ok for what you want)Ok, good.
How did you change the URL?
(for others who may want to do this)