hans2504
Forum Replies Created
-
Forum: Everything else WordPress
In reply to: REST API User EnumerationAt least you’re being condescending about it.
*drinks coffee*
Why do you think you know security better than OWASP?
This is secure, I guess…
[{"id":8,"name":"Andr\u00e9 Quitta","url":"","description":"","link":"https:\/\/blog.dembowski.net\/author\/andre\/","slug":"andre","avatar_urls":{"24":"https:\/\/secure.gravatar.com\/avatar\/72786c314ce5cff4240561bfda3c9fd5?s=24&d=dwapuuvatar&r=g","48":"https:\/\/secure.gravatar.com\/avatar\/72786c314ce5cff4240561bfda3c9fd5?s=48&d=dwapuuvatar&r=g","96":"https:\/\/secure.gravatar.com\/avatar\/72786c314ce5cff4240561bfda3c9fd5?s=96&d=dwapuuvatar&r=g"},"meta":[],"_links":{"self":[{"href":"https:\/\/blog.dembowski.net\/wp-json\/wp\/v2\/users\/8"}],"collection":[{"href":"https:\/\/blog.dembowski.net\/wp-json\/wp\/v2\/users"}]}},{"id":1,"name":"Jan Dembowski","url":"https:\/\/blog.dembowski.net\/","description":"","link":"https:\/\/blog.dembowski.net\/author\/jan\/","slug":"jan","avatar_urls":{"24":"https:\/\/secure.gravatar.com\/avatar\/dca16b1361966d42bbc04881219489d8?s=24&d=dwapuuvatar&r=g","48":"https:\/\/secure.gravatar.com\/avatar\/dca16b1361966d42bbc04881219489d8?s=48&d=dwapuuvatar&r=g","96":"https:\/\/secure.gravatar.com\/avatar\/dca16b1361966d42bbc04881219489d8?s=96&d=dwapuuvatar&r=g"},"meta":[],"_links":{"self":[{"href":"https:\/\/blog.dembowski.net\/wp-json\/wp\/v2\/users\/1"}],"collection":[{"href":"https:\/\/blog.dembowski.net\/wp-json\/wp\/v2\/users"}]}},{"id":2,"name":"Lily Dembowski","url":"https:\/\/lily.dembowski.net\/","description":"","link":"https:\/\/blog.dembowski.net\/author\/lily\/","slug":"lily","avatar_urls":{"24":"https:\/\/secure.gravatar.com\/avatar\/1da8db1cfe53fb3453daff3d80ebcf1f?s=24&d=dwapuuvatar&r=g","48":"https:\/\/secure.gravatar.com\/avatar\/1da8db1cfe53fb3453daff3d80ebcf1f?s=48&d=dwapuuvatar&r=g","96":"https:\/\/secure.gravatar.com\/avatar\/1da8db1cfe53fb3453daff3d80ebcf1f?s=96&d=dwapuuvatar&r=g"},"meta":[],"_links":{"self":[{"href":"https:\/\/blog.dembowski.net\/wp-json\/wp\/v2\/users\/2"}],"collection":[{"href":"https:\/\/blog.dembowski.net\/wp-json\/wp\/v2\/users"}]}}]Forum: Everything else WordPress
In reply to: REST API User EnumerationUser enumeration IS A RISK!!!!
https://securityriskadvisors.com/blog/post/user-enumeration/
http://www.gnucitizen.org/blog/username-enumeration-vulnerabilities/
http://security.stackexchange.com/questions/42872/user-name-enumeration
https://www.hacking-lab.com/cases/2100-web-security-username-enumeration/index.html
https://www.developsec.com/2016/07/28/how-serious-is-username-enumeration/We have already had a site brute forced due to this issue.
The line:
<?php if( $count == 4) {?></div><?php $count = 0;} ?>
is coming too late. You should do something like this:[ Code moderated as per the Forum Rules. The maximum number of lines of code that you can post in these forums is ten lines. Please use the pastebin]
Forum: Fixing WordPress
In reply to: What is a featured image?The featured image of a post is just an image that is associated with the post. Your theme can use that image however you like.
Check out this page for more info:
http://codex.ww.wp.xz.cn/Post_ThumbnailsForum: Fixing WordPress
In reply to: lbog title not being displayedI think it’s actually acting as expected. If you go somewhere like http://baseshamai.com/design/hello-world/
You can see that the title is updating correctly. It’s showing baseshamai >> baseshamai probably because your home page title is baseshamai
Forum: Fixing WordPress
In reply to: H1 titleIf you can, revert the cufon properties, then use the pastebin to share your style.css and header.php file.
Forum: Fixing WordPress
In reply to: H1 titleYou (or maybe your theme?) are using cufon fonts. So some weird php generated css is messing with your code when it’s getting rendered. If you want to color it white, add a rule to your CSS:
h1 {
color: #ffffff;
}You might want to give it an ID:
<h1 class=”no-cufon” id=”someid”>some text</h1>
then in css:
h1#someid {
color: #ffffff;
}Forum: Fixing WordPress
In reply to: Rotating Header Image Help, Please!I just looked at your code (good thing you posted it afterall :p ). For my suggestion to work, you’ll need to use <?php header_image(); ?> as the source of your image tag like this:
<img src=”<?php header_image(); ?>”>
Forum: Fixing WordPress
In reply to: Rotating Header Image Help, Please!If you’re using a theme based on twentyeleven or twentyten you can upload your header images to /wp-content/themes/<your theme>/images/headers then log into wp-admin and go to Appearance > Headers select “Random” and save changes. It should load up all your headers and randomly select one at page load.
Forum: Fixing WordPress
In reply to: H1 titleNo. Wherever you put the <h1>your text</h1> should be replaced with <h1 class=”no-cufon”>your text</h1>
Forum: Fixing WordPress
In reply to: H1 titleYour theme is trying to do some inline CSS that is controlled by several PHP functions. I think you can bypass it like this:
<h1 class=”no-cufon”>text</h1>
Forum: Fixing WordPress
In reply to: Rotating Header Image Help, Please!There’s no need for you to post your entire header.php and style.css files. Nobody is going to read 700+ lines of code to try to solve this problem, but we can help without it 🙂
When you say ” I have a variety of images I have made for the header at the top of the site and I would like to rotate them.” do you mean that you want them to change every so often while looking at the page or do you want to display a different image on each page load? (both are possible, the latter is easier)
Forum: Fixing WordPress
In reply to: Error after theme updateI don’t see any reason we can’t help you, but I think you’ll get quicker responses from the theme vendor. Either way, there is not enough code here to debug. I think the reason people are reluctant to help is because the logical question is: can we see your code? Which might not be possible since you paid for your theme and the theme vendor probably doesn’t want you to be posting their code on an open forum since they are trying to sell that code.
All that aside, the problem is in plugin.php which indicates that either the theme is messing with stuff it shouldn’t, or one of your plugins is to blame.
Forum: Fixing WordPress
In reply to: H1 titleThere are several places where you could place your H1 tags. You could put them directly into the content of your posts/pages or you could put them into your theme. If you want to make sure that you always have an h1 tag, put something like this in your header.php
<h1>My WordPress Site</h1>
It’ll be better for SEO and accessibility if you make it a more page by page solution. You could use PHP to generate a page-specific heading in header.php:
<h1><?php echo $post->post_title; ?></h1>
or you could work it into your various template files.
Forum: Installing WordPress
In reply to: WordPress needs a REAL import/export toolYou’re way over working yourself in your migrations. The first thing I would suggest is that you start using a version control tool such as git or svn. Only commit the wp-content directory into your version control then the following process will get you there:
1. Upload a fresh copy of WordPress to your new host
2. delete the contents of the wp-content directory
3. Check out the wp-content directory from your version control system.
4. Dump your database from your old host
5. Import your database on your new host
6. Setup your wp-config file
7. Follow http://www.twincitieswebdeveloper.com/2012/04/wordpress-migration/
8. Write the real import/export tool that will shorten this list to 2/3 steps…Still… you’re right, we need a real import/export tool.