freelancer486
Forum Replies Created
-
Forum: Plugins
In reply to: [TinyMCE Templates] Visual Editor Breaks With WP 3.8.3 UpdateProblem is fixed with version 3.4.2 of TinyMCE Templates.
Confirmed to work with WP 3.8.3.
Thanks for the quick response!
Forum: Plugins
In reply to: [Black Studio TinyMCE Widget] Visual Editor Breaks With WP 3.8.3 UpdateMy bad. The problem seems to be with the WP core visual editor and not the plugin.
This does not seem to guarantee that the names displayed in WordPress for different users will be unique. Yes, I agree that WP enforces unique usernames and emails.
The issue is in allowing the “Display name publicly as” option to be displayed in your profile editor.
Unless you enforce that only user_login is displayed, you aren’t guaranteed that you won’t have malicious users trying to masquerade as “admin” or another user’s handle.
“Display name publicly as” seems to allow users to choose between their login name, their first name and their nickname.
Obviously you don’t want to enforce unique first names when registering users.
There does not seem to be any check for uniqueness when setting nicknames.
If nicknames were guaranteed to be unique and first names were removed as an option for the display name, then the problem would be solved.
Forum: Hacks
In reply to: How to make Displayname & nicknames UniqueI just tried moving the code to mu-plugins.
The site locks up with the following error logged.
PHP Fatal error: Call to undefined function get_userdata() in <mypath>/wp-includes/user.php on line 1466I have no idea how to proceed at this point.
Forum: Hacks
In reply to: How to make Displayname & nicknames UniqueKudos to you for attempting to resolve this problem.
Forum: Hacks
In reply to: How to make Displayname & nicknames UniquePerhaps I have another plugin interfering, but I’m not getting the expected on screen errors and I don’t think the checks are working when saving out the profile. I tried running the code with the blocks you suggested removed but it did not seem to affect the behavior in my profile screen for my test users.
I can set two users with the same nickname. When I view the forum, one of the users gets flipped back to their Username.
I just set a user’s Nickname to “admin”. When viewed in the forums that user is masquerading as admin.
When I set a third user’s nickname to “admin” and viewed the forum, the last user is now flipped to their username.
A robust model would not allow a user to choose a displayname that is in use by another user, nor another users login name.
We can’t have unintended confusion between users or intentional monkeyshines like users masquerading as an admin.
I can’t believe this is not part of the WordPress core.
Forum: Hacks
In reply to: How to make Displayname & nicknames UniqueSimilarly by messing with combinations of first name and nick name, I’ve been able to steal the display name of another user and force his back to to his username.
Forum: Hacks
In reply to: How to make Displayname & nicknames UniqueHi Vaughan:
I’m not sure the above code completely addresses the problem.
Here is what I did to circumvent the uniqueness test.
I had two users with display name of “Bob”.
I added the above code. It correctly changed one of these to the user’s email address, which is their username in this case.
I logged in as the second “Bob” user. I set his nickname to the email address of the first user then made that his display name.
Now I have two users with the display name of the first user.
Forum: Plugins
In reply to: [bbPress - Report Content] Not really working. No notificationsI agree that some sort of notification would be nice but email should definitely be an optional method to prevent flooding admins on high traffic sites.
Personally I’d like to see an entry in one of the dashboard panels, either in “At a Glance” or “Right Now In Forums”.
Same problem here. I have tried five different feeds from reputable sites that I know work in other RSS readers. (CNN, CBC, Slashdot, Sony, Network Solutions).
The preview shows the posts, but there are 0 items imported. No errors.
Plugin Version: 4.0.8
Wordpress: 3.8.1I’m experiencing the same problem. The meter “alarms” while still typing the second password and turns red with the mismatch message. If the passwords match, the red disappears, but the mismatch message does not, nor does the plugin analyze the strength of the password.
Using latest version of wpuf and WP 3.8.1.
The primary reason I’m using this plugin was to find an alternative way for users to update their profile, especially their password.
This thread has been open for a month with no response from the developer and reported previously, with the older threads just closed without resolution. Will look elsewhere for a similar plugin.