TorontoBoy

I just installed the plugin, set it in report-only mode. I don’t see anything being logged. Looked in Firefox developer console and nothing related to report-only mode. Does this plugin work?

Set to enforce policies, added 4 additional sites my theme uses. It changed my theme sidebar from right side to left. Very odd. observatory.mozilla.org does not detect Content Security Policy nor x-xss-protection.

Running WP 4.8 (most current).

• This reply was modified 7 years, 8 months ago by TorontoBoy.
• This reply was modified 7 years, 8 months ago by TorontoBoy.
• This reply was modified 7 years, 8 months ago by TorontoBoy.

Hi Rob,
Thanks for the explanation. Of course no one wants to download suspect plugins, so I do appreciate your honesty. Hacks happen, there is no way to prevent them.

Don

Thanks for this info. I do appreciate you posting the code as proof.

I do realize many malicious requests involve the inclusion of “localhost”, and I would not want to open up this security hole. Spammers with the hostname “localhost” have caused me great difficulty in the past.

Ok, please confirm my understanding. Even though the All Posts search is within the WP Admin screen, when you do a search, the search criteria is sent through the URL back to the server. In a search for “localhost”, BBQ will block this request, as designed. If my understanding is correct, then I’d rather not use “localhost” in my search criteria, and keep WP secure.

Thanks for clarifying my understanding.

I believe I have figured this spammer out. I correlated my Akismet spam entry with my raw access log and found out the spammer uses one ip address to GET and a second ip address to PUT. Akismet publishes the PUT ip address, which is constantly changing. I put the PUT ip address into wp-ban manager and of course, the spam kept coming. For some reason wp-ban also does not work when banning the site name.

Anyway, this spammer is using the ip address 195.154.250.39 to GET and a number of ip adresses, such as 107.172.171.56 and 107.172.198.171 to PUT. I have banned the GET ip address and hopefully this will work.

d4z_c0nf, thank you very much for the tip. I created a widget area under the banner, inserted my revolution slider into it, and turned off the default slider. The Revolution slider works very well.

I really like this theme.

The Revolution Slider plugin allows you to set up a slide show or a template. When you create a slide show you also create a shortcode. For each slide show you add images and for each image you add layers, It is in the layers where you have text/images move around and animate.

Once you save your slide show you create a post, post in your shortcode, and save. View the post and your animation comes alive.

For example I named my slide show “slider1”. The short code was [rev_slider slider1] so I paste this shortcode into a post and it appears. You can also add the slider using php or html, but I have not done this so far.

I still do not know how to add the Revolution slider to the front page slider of Customizr.

I, too, really like the Customizr theme, but the Revolution Slider plugin (premium plugin, $19) allows me to add animation to each slide. I cannot get them to talk to each other.

A graphic in my media library will have “Revolution Slider Options”, and the dropdown lists my Revolution Slider templates, but when I change the dropdown to a template and save the document the dropdown reverts back to default, and my Revolution Slider does not appear.

I would prefer not to, but I could turn off the slider options, hack the code in a child theme and add the Revolution Slider into the right php file, wherever I can find it, maybe parts/class-content-slider.php. This is messy.

I can get the Revolution Slider to work very well in a post using a shortcode, but not to replace the default front page slider.

Has anyone else replaced the front page slider with the Revolution Slider?

Thanks

This is a great mod, so thank you. A couple of points.

This mod worked “as is” in my child theme’s functions.php. I did take out more meta links than you did. This mod works with WP version 3.6.1. In fact the code is exactly the same.

I did not cut and paste your code from above because I wanted the indentations in the code for readability, so I took code from the WP core wp-includes/default-widgets.php which has indentations. The content was identical.