Forum Replies Created

Viewing 15 replies - 1 through 15 (of 34 total)
  • The issue appears more so in the way that Plesk is integrated into Apache and handles the “Security” feature. When a customer uses Plesk’s “Secure wp-content” or “Secure wp-includes”, Plesk is not locking it down via .htaccess, but instead is locking it down at a much higher level. I’d presume it’s somewhere in their httpd.conf, but that could be very off base.

    So we could have manually upgraded all day, and came out with the same results since it’s still locked into the same working directory “/var/www/domain.tld/httpdocs”. In testing, I confirmed that a fresh install of WordPress that is placed in a new fresh directory and never touched Plesks Security feature, worked flawlessly in base configuration (2012Theme, no plugins). However placing that in a directory previously secured by Plesk, then it’ll follow those same rules previously added, and the wp-content and includes would be borked.

    The main gist of Securing these folders is to stop HTTP access to .php files and preventing them from being executed. In terms of TinyMCE this affects the concatenation of tinymce.php, but it also affects some ajax applications that call .php. Typically it all just works, but for whatever reason, 4.4 had a rough rollout with Plesk and they appear to be gearing up for an update tomorrow the 14th that’s suppose to address their Toolkit.

    Confirmed.
    Issue appears related to their “Secure wp-includes” and the fact that the updates were applied directly via WordPress rather than via the Plesk software. Plesk’s wordpress toolkit auto-magically disables the secure feature, updates wordpress, and resecures it (atleast from what I can gather). The fix is to simply go into the Toolkit, Select All, click “Check Security”, and Roll Back “Secure wp-includes”. Once it’s rolled back, resecure it again.

    https://talk.plesk.com/threads/how-to-exception-wp-tinymce-php-with-wordpress-toolkit.332872/#post-779781

    Innovation, I’ll explain more offline, but found this going through Plesk forums:
    https://talk.plesk.com/threads/pppm-3732-wordpress-toolkit-problem-after-check-for-updates.336168/

    Appears that there’s configuration issues with Plesk software and their security features that’s colliding with WP4.4.

    While that may explain why tinymce.php doesn’t work (a fluke in their security/permissions with the wp-includes directory) it doesn’t explain why Concatenate_Scripts doesn’t work.

    I’m going to check with my Plesk Admins to find out more information as it applies

    I’ve been helping out Innovation2 with this issue, and reproduce the issue on multiple servers. We’ve gone over replacing all but the wp-content and wp-config.php.

    Disabling the Concatenate_scripts gets the Tinymce is not defined, using Script_Debug fixes everything but of course has debug.

    Environments have been:
    CentOS 6 and 7,
    PHP running as FPM 5.4 or 5.5

    Each server worked prior to the 4.4, but 4.4 causes the issue. We’ve disabled all Plugins/Themes, rebooted the servers / services, etc. Also disabled .htaccess.

    Plugin Author Tim

    (@uaktags)

    Right, well we’ll see what we can work out. I still want to look at a world idea that I discussed with another user. But I’m also interested in making a Army/Castle system. It’d be similar to maybe those Gang/Mafia games where you could recruit virtual citizens into your Gang/Mafia/Army/Kingdom, and then use them for resource building of Gold(Cash), Attack, Defense.

    Plugin Author Tim

    (@uaktags)

    Thanks for the post, I’ll look into the XP increments, that should have been fixed along time ago but I may have to just scrap it and come up with a new algorithm.

    As for losing and XP staying the same, that’s built by design, though I should probably look into rewarding some XP for losing since it is experience gained.

    I’ll look into these in the coming days.

    Plugin Author Tim

    (@uaktags)

    Well you could have it so that an attack module would attack a bank. Most RPGs I’ve played though have had it so that the bank is a protected asset, one that can’t be stolen. I would recommend looking into the design of your RPG to include some of the Ideas below:

    -implement upgradeable skill sets where after certain level achieved, a skill set can be purchased. One of which allows you to rob a players bank.
    -implement quests where you rob a central bank, and if succeed you steal a portion of x number of players who have deposited money in the bank.
    -implement a city/world system where people are located in the same city/town and have a central bank system.
    -implement a army/castle system where you employ and train soldiers or crooks to sneak in and rob resources of a player.

    Many ideas but modules would have to be built for it all.

    Plugin Author Tim

    (@uaktags)

    I suppose if you were so inclined to do so. XP Points normally aren’t things (in RPG games) that are tradable or really worth any currency. They’re values that determine the growth of your player. If though you did want to trade in all of the usage of XP points for gold, you would have to modify the plugins that give you XP (the attack currently) to give just gold.

    Perhaps a bit more clarification would help me assist ??

    Plugin Author Tim

    (@uaktags)

    Thank you, fixed in 1.0.18. There appears to have been an issue where I didn’t add array($this, ‘save_registration’) but instead just had it as calling save_registration directly. This led WP to look in it core for a function that didn’t exist instead of looking in the WPRPG class.

    Plugin Author Tim

    (@uaktags)

    It should show you the update link within the wordpress plugins page. If not then I’d suspect you have another issue we haven’t looked at previsouly. If the link doesn’t appear after a few mins, I’d suspect that you have a FileSystem Permissions issue (wp-content/plugins/wprpg is set to some permission other than whats default)

    Plugin Author Tim

    (@uaktags)

    Thank you for the suggestion and the find. I’ve updated it for 1.0.17.

    Plugin Author Tim

    (@uaktags)

    The new update (1.0.17) should fix that issue along with any other Debug Function, Update_Meta, etc

    Plugin Author Tim

    (@uaktags)

    The Bank issue does sound like a software glitch that I’ll look into and publish a status on it’s own plugin page. [UPDATE: I don’t see any issue with this again, email me and i’ll look at your page. Dutch or not]

    XP stands for Experience Points, and are the points that your player gains from doing whatever it is you create your player to do. For instance, when using the Attack Module, a Successful Attack or Defend increases your Experience Points since you gained “Battle Experience”. In RPG games XP is normally used alongside leveling.

    Ranking is based solely, at the moment, on who has the greatest XP points. But later I need to create the Members Module to organize by Rank, and also want to give factors for Ranking. Some times XP points doesn’t always count as the highest ranking person, depending on how your game is set up or you wish to distinguish players.

    Plugin Author Tim

    (@uaktags)

    I’ll try to be as clear as I can so you can translate or understand more easily.

    There is no language settings, unfortunately I have not made it to that part of the development to focus on internationalization. Sorry for that inconvenience.

    As far as your cubepoints / wordpoints issue, the plugins I’ve made are merely samples to get others interested. I neither use cubepoints or wordpoints myself at all. Since you are the second to ask, I’ll take some time in the upcoming week to look at making another plugin similar for WordPoints.

    As for your issue with the author/admin. There should be no such error message, or perhaps I’m not understanding the question. Using [list_players] in a post/page will create a list of the players on your site. Each player will then be able to attack other players IF you have the Attack plugin enabled. This goes for the Admin AND the users. Perhaps if you email me at timgarrity89 (at) gmail (dot) com, I can help look at your site and see the issue rather than you try to explain it.

    Hope that helps, and above all, thank you for supporting my plugin and idea.

    Plugin Author Tim

    (@uaktags)

    Marked as resolved.

Viewing 15 replies - 1 through 15 (of 34 total)