bigneno

@zonetrap
You can paste it into header.php or into specific post’s text editor.

Make sure you have jquery library enabled. Change #map to #YourIframeID.

Here’s my working temporary solution via jquery.

<script>
jQuery(document).ready(function($){
   $('iframe#map').attr("src", $('iframe#map').attr('src').replace("http:","https:") );
});
</script>

Same issue here, users get 500s on empty questionmark, please remove this rule in future updates.

If I copy the whole section “CUSTOM CODE BPSQSE BPS QUERY STRING EXPLOITS” to custom code and comment out only one line, how will I know that there’s nothing new in other lines of this section on a plugin update.
Is there any way to compare my current customized htaccess with any new one after plugin update?
Should I clean all custom code, copy new sections and edit it (comment out lines etc) on every plugin update?
Thanks

Permarad is right – there is a bug.
This happens when you have many postmetas attached to one post (even hidden with keys starting with “_”) . This plugin uses only one LEFT JOIN.

Each postmeta key-value pair has it’s own row in postmeta table, so this plugin should generate a JOIN query for each pair, not just one.
For example:

$join .= "LEFT JOIN (SELECT post_id,meta_value FROM $wpdb->postmeta WHERE meta_key='_firstkey') meta1 ON $wpdb->posts.ID = meta1.post_id
LEFT JOIN (SELECT post_id,meta_value FROM $wpdb->postmeta WHERE meta_key='_secondkey') meta2 ON $wpdb->posts.ID = meta2.post_id ...

...

$where .= " OR ( meta_value LIKE '%{$wp->query_vars['s']}%' ) ";

You should modify this plugin to use ONLY ONE user-defined postmeta key or build a large JOIN query for all existing postmeta keys.

Hope this was helpful.