blueskycreative

HI there,

Nope tried that, it doesnt seem to want to save, and It was working as I have some old test ones I made, but even when I restore those from the bin, it doesnt see them as landlord contacts either?

Please see it in action..

🙁 Paul

HO Ok, SO not sure if this support posted , as I didnt use the code button,

SO trying again,

Ok, SO I need ot make sure that for security the site cant be spoofed and a user sent to another url,

Looking at your code it says to add this

/**
 * Set the URL to redirect to on login.
 *
 * @param string $url The visited URL.
 * @return string The URL to redirect to on login. Must be absolute.
 */
function my_forcelogin_redirect( $url ) {
  return home_url( '/mypage/' );
}
add_filter( 'v_forcelogin_redirect', 'my_forcelogin_redirect' );

Now one of my design team says this is correct?

/* Redirect url after login */
function my_login_redirect( $redirect_to, $request, $user ) {
    $redirect_to =  home_url();
 
    return $redirect_to;
}
 
add_filter( 'login_redirect', 'my_login_redirect', 10, 3 );

Now looking at your suggestion it would be this…

/**
 * Set the URL to redirect to on login.
 *
 * @param string $url The visited URL.
 * @return string The URL to redirect to on login. Must be absolute.
 */
function my_forcelogin_redirect( $url ) {
  return home_url( 'https://blueskycreative.co.uk/' );
}
add_filter( 'v_forcelogin_redirect', 'my_forcelogin_redirect' );

as an example, but when I use this I get a 404 as it goes to this url

blueskycreative.co.uk/https:/blueskycreative.co.uk/

I need to make sure that I set this correctly so it cant be redirected by hackers. The security people said I had this before..

“The vulnerability, an Open HTTP Redirect, is a way to redirect users away from the real website
and onto one controlled by the attacker, usually without the victim being away of the move. A
proof-of-concept has been developed for this specific instance which would allow an attacker to steal user
login credentials in a way which would appear to be a normal part of the login process. The fix for this issue
is relatively simple and implementing it is unlikely to affect normal operations of the site.

The login system suffers from an Open HTTP Redirect vulnerability as the “redirect_to” parameter passed
to the page is not validated before being used and so can be set to a fully qualified URL which takes the
user away from the real site and onto one controlled by the attacker. This can then be used to capture
login credentials or perform other attacks against the user.
Parameters used for redirection should always be checked to ensure they only allow a user to be taken
to pages or domains which are authorised by the site. This is usually done by restricting them to relative
URLs only and so blocking fully and protocol relative URLs.”

I appreciate your help and what to put in the function.php fo sort this so its a ) safe and b) works

Many thanks Paul

Hi there,

thanks so much for the info, so it seems to just use a normal PayPal account and nt adaptive payments. Because it uses the Wallet?

Ok, SO my only other thing now is where and how does the campaign owner add their payment email? Ie where the payments go to ? As it seems blank in the dashboard

https://prnt.sc/sf321z

It doesnt show anything here? SO where is the persons PayPal info? added for the 95% payment to go to ?

Hi

They are normal wordpress pages. http://www.st-marys-ashford.kent.sch.uk/ is the site. It does use pagelines but this should not mess with any of the normal basic pages.

It has the tick box at the bottom of the page to not send an email alert out, so I presumed it was sending out. It does for the post categories.

cheers

Paul

Hi there

I have just done that and sent the email to you

You need to use google chrome for the page lines dmd system

Login to wordpress turn on the subscribe2 plugin and then click on the visit site link at top

that opens the dms 2 system

at the bottom there is a control panel, click on any of the tabs and it opens up…you will see the css error if you turn on and off the subscribe2 plugin…

many thanks

Paul