Dylan - Harmonic Design

I am not the developer of the Ocean Theme or the Ocean Modal Window plugin.

“Unless I’m mistaken, the test page in question only contains a single quiz with multiple questions.”

I believe you that that is all you did to the page. But there is a modal on that page too, and because this modal is duplicating the content, it is causing the issue. If you still want to fix it, you need to find out why a modal is on a page that you did not add it to.

The page you sent me has the same quiz printed twice. Once on the page content as normal, and then another copy inside the lightbox modal from that plugin.

You’ll need to find out how this is possible on your end as it is not related to HD Quiz. HD Quiz does not add itself to random parts of people’s websites. Perhaps you added a modal with a quiz on it to all pages or something? Or as a widget? Just throwing ideas out there, but ultimately this is something you’ll need to contact the Ocean team for support.

Hi drebin54,
if you can send a link to a quiz I can take a look and confirm, but so far, there are two things to note.

1. If by popup, you mean a lightbox, that is still the same page. Lightboxes don’t create new pages, they just visually show content in a “popup”. Your browser URL does not change.
2. Something I’ve seen in the past is specifically with Elementor page builder. If you are using that, sometimes Elementor can have broken templates and print the content to your page twice, with the second being in a hidden div.
3. “However, I’m getting a message that just appeared, even though everything was working normally”
   Do you mean quizzes that you already had working on a page, are now showing this message? If so, then the question we need to ask is: “what changed?”. HD Quiz hasn’t changed how quizzes are printed, so perhaps you changed something on your end? A new theme, different plugin update, etc.

Once again, if you can provide a link to a page with this issue, I can take a look and confirm what’s going on

Hi bjpbkk,
this was already reported last week and is being worked on.

Just note that this was reported as “Low priority – No impactful threat”, so there is nothing you need to worry about in the meantime. No secure data or information is leaked at all, and the vulnerability cannot be used to gain further access. The only thing an attacker can gain from this is the question HTML – which they can also get by just viewing the actual quiz.

Still, it is unintended access nonetheless, and has already been patched – just awaiting approval before publishing.

Here is the official patchstack report so that you don’t have to take my word on it 🙂

https://patchstack.com/database/wordpress/plugin/hd-quiz/vulnerability/wordpress-hd-quiz-plugin-2-0-9-broken-access-control-vulnerability

Please confirm that this functionality is working correctly.

All I can do is confirm that it works for me across my test environments, and let you know that you are the only user to report any issues with that feature.

Some things to try:

• Under the HD Quiz Settings page, there is a feature called “Replace the_content filter for quizzes”. Try disabling this. A theme function, or function from another plugin, might be interacting with it in a bad way.
• Try the basic WordPress debug steps of temporarily switching themes and disabling all other plugins to see if that helps.
• You have not provided a link to a page with the issue (if issue persists, please provide a link so I can at least attempt to see what the issue might be for you) so I cannot take a look at anything, but something else to look at is if you are caching content using a CDN or something like CloudFlare. You might want to clear those caches as well

Hi mehdis,
thank you for the review!

This is not something that is a feature of HD Quiz, but it should be possible to extend it in this way.

Off the top of my head, the process would look like this. I’m rolling my own lightbox here since I don’t know if you are already using a lightbox plugin or similar.

The first thing to do is edit the quiz settings and set the result potion to “below”. This is to stop the site from scrolling to the top of the quiz on completion, which would feel weird since you are using a lightbox.

Now we need a way to clone the results so that we can place it into a custom lightbox. We can use the hdq_after action to add custom JS and CSS to the page to do this. We can then add a custom function to the hdq_submit list to tell HD Quiz to run a function once the quiz completes – in our case, to show the lightbox.

Here is a mockup of everything in action. You’ll probably want to play around with the styles to make it look better for your theme and site.

/* First, we create the lightbox */
function hdq_lightbox()
{
?>

	<style>
		.hdq_results_wrapper {
			display: none !important;
			width: 1px;
			height: 1px;
			overflow: hidden;
			opacity: 0;
		}

		#hdq_lightbox {
			display: none;
			position: fixed;
			top: 0;
			left: 0;
			width: 100%;
			height: 100%;
			background-color: rgba(255, 255, 255, 0.95);
			place-items: center;
			z-index: 9999999999999;
		}

		#hdq_lightbox.active {
			display: grid;
		}

		#hdq_lightbox_content {
			max-width: 800px;
			width: 100%;
			padding: 4rem;
			position: relative;
		}

		#hdq_lightbox_close {
			position: absolute;
			top: -1em;
			right: -1em;
			width: 2rem;
			height: 2rem;
			background-color: red;
			color: #fff;
			line-height: 2rem;
			display: grid;
			place-items: center;
			border-radius: 50%;
			cursor: pointer;
		}
	</style>

	<script>
		const hdq_lightbox = {
			init: function() {
				// create the lightbox with result content
				const hdq_res = document.getElementsByClassName("hdq_results_wrapper")[0];
				const hdq_res_html = hdq_res.innerHTML;
				const hdq_lightbox_html = '<div id = "hdq_lightbox"><div id = "hdq_lightbox_content"><div id = "hdq_lightbox_close" role = "button" title = "Close results">x</div>' + hdq_res_html + "</div></div>";
				hdq_res.insertAdjacentHTML("afterend", hdq_lightbox_html);

				document.getElementById("hdq_lightbox_close").addEventListener("click", function() {
					hdq_lightbox.close();
				})
			},
			open: function() {
				// figure out which result to show
				const score = HDQ.VARS.hdq_score;
				let status = false;
				let percent = (score[0] / score[1]) * 100;
				if (percent >= HDQ.VARS.quiz.quiz_pass_percentage) {
					status = true;
				}

				const results = document.getElementById("hdq_lightbox");				
				if (status) {
					results.getElementsByClassName("hdq_result_pass")[0].style.display = "block";
				} else {
					results.getElementsByClassName("hdq_result_fail")[0].style.display = "block";
				}
				const result_el = results.getElementsByClassName("hdq_result")[0];
				result_el.innerHTML = ${score&#091;0]} / ${score&#091;1]}  - <span class = "hdq_result_percent">${percent.toFixed(2).replace(/&#091;.,]00$/, "")}%</span>;



				const el = document.getElementById("hdq_lightbox").classList.add("active");
			},
			close: function() {
				const el = document.getElementById("hdq_lightbox").classList.remove("active");
			}
		}
		hdq_lightbox.init();

		function hdq_lightbox_open() {
			hdq_lightbox.open();
			return {};
		}
	</script>
<?php
}
add_action("hdq_after", "hdq_lightbox");

/* Now, we activate the lightbox once a quiz completes */
function hdq_onsubmit_lightbox($data)
{
	array_push($data->hdq_submit, "hdq_lightbox_open");
	return $data;
}
add_action("hdq_submit", "hdq_onsubmit_lightbox");

thanks Ekaterina,
I’m out at the moment but I’ll be able to take a look and get you the solution later today

What if you change themes?

Even using the theme preview should be enough to test. It sounds to me like whatever theme you are using is not compatible with embeds and or is modifying the previously mentioned filters.

It’s 100% impossible for either of those above changes to affect the clickability of a button.

You must have something else broken on your site setup/server (for example, I see that your SSL certificate is down at the moment, and the homepage provides a 403 Forbidden error – assuming this problem is on the “mcqs” site you previously posted).

Beyond what I’ve already recommended, all I can offer more is general debugging steps. Clear all of your caches (browser, site, host, dns, anything else), and do the basic WordPress debug steps (disable all plugins except HD Quiz, use a default WordPress theme, check to see if uploads are still broken for you).