the_dead_one

If you disable media uploading on TDOMF, then you’d be fine too.

What exactly are you trying to disable? Editing entries in the moderation queue?

FYI I posted on my blog as soon as I was informed about the exploit. That feed gets pulled into the plugin’s admin page. Not sure how I could inform anyone earlier then I knew.

We recently found that all posts submitted using TDO Mini Forms are missing the author information. Whereas the posts used to display “By <author name>” and optionally the <author email>, the post authors have default to admin. New posts that were submitted using the TDO Mini Form have “tdomf_<number>” as the author instead of the author information.

That sounds like the posts were submitted from not logged in users, i.e. anonymous. The “tdomf_<number>” is a default author created to allow anonymous posting because every post needs to be associated with an a user. However, the info is not lost. The name and email is in the “Content Fields” (which should be called Author Email, Author Name and Author Website). So you can use the WordPress content fields API to display the name on your theme pretty easily.

Just for the record, you should be fairly safe to continue using the plugin if you don’t have uploads. And even if you do have uploads, your webserver configuration would have to allow jpgs to be executed as scripts to have an effect.

It’s probably a good thing I didn’t give you date because I still haven’t fix it. I guess I better get round to it.

If you have it already installed and are worried about it – I did a blog post here: https://thedeadone.net/blog/where-has-tdo-mini-forms-plugin-gone/

There was an exploit reported against it so it was removed. See here for more info on that.

As for being out of support. Well, yea I haven’t worked on it in quite a long time. I don’t even know if it works in the latest wordpress (my current sites can’t be upgraded yet because of old versions of mysql). I did say I was going to fix the exploit and get it back up, but I just haven’t had the time with IRL getting in the way,

Let me understand, you are trying to use my plugin to show posts with specific tags in a specific category, correct?

Something like this: https://thedeadone.net/category/download/?keyword=wordpress (this link shows posts tagged with the tag “wordpress”, within my “download” category)

The plugin is pretty old and I made it back in the day when plugins didn’t necessarily have admin pages in WordPress. If you just install and activate the plugin, you should be able to filter on tags in a category straight up with no other configuration.

You need to find two things, the URL of the category archive in question (not the code in the template!) and the tag_slug of the tag (or tags) you want to filter on. You can find the tag slugs in the WordPress admin backend. Take the URL of the category page, then add ?tdo_tag=tag_slug (replacing tag_slug with the actual slug of the tag).

(As for the “support” forums on my site. I’m planning on deleting them. I guess you didn’t see my blog post on it, so that pretty much nails why I plan to get rid of them.)

I haven’t looked at the “freecap” code in an age, but I think it’s the capatcha answer that’s later used to verify against the user input. This code is only triggered if you use the “capatcha” widget on a form I believe.

The “edit link” for the author is a wordpress built in thing. TDOMF doesn’t or can’t turn that off. You can edit out of the theme. Or in the options for the Form in TDOMF you can disable the extra TDOMF edit link (and/or modify the edit link to point to the tdomf form).

Can you not modify it under the “Form Options” / “Messages” panel? You shouldn’t need to edit the code.

At my company we usually don’t have too much time to custom code products so we use plugins when possible.

This is a very similar reason to why I haven’t been able to put much effort into supporting TDO Mini Forms these last few months. See here for a longer explanation. It’s quite disheartening to hear that actual companies, as opposed to someone like myself who does it for the love, can’t afford the time (or money) to do it themselves.

My recommendation is to that if you need the advanced features of TDO Mini Forms for a commercial/serious project then you should probably think of creating or buying a dedicated solution. (Gravity Forms looks good tbh). You’ll have a contract, you’ll have someone you can go to for upgrades or help if you get hacked, not just someone who may get round to it eventually. I think that holds true for any plugin that your site might depend on. Hell, I haven’t kept up with WordPress since 2.7, I don’t even know why you would want Custom Post Types or Taxonomies for TDO Mini Forms when you can achieve most of the stuff by clever use of categories and tags. IMHO, etc.

I’ve fixed this with release v0.13.9. It was half fixed with v0.13.8. If you feel like donating, please do. ??

I’ve fixed this in v0.13.9, just released. Issue with new JQuery’s seralize option in sortable.

I’ve gotten to the root of the drag-n-drop problem and I will be releasing a fix this week or next week.

As far as I can tell, this is the only thing busted by the WP3 upgrade. But if you find anything else, feel free to drop a comment on my blog.

Could you check what the settings of the Upload Widget are and make sure that “.php” is not listed “Allowed File Types”?

If you put .php in this setting, it’ll allow anyone to upload a .php file using the form.

Brilliant! ??