JorgeW

Forum Replies Created

Viewing 7 replies - 1 through 7 (of 7 total)
  • Forum: Plugins
    In reply to: [Front End PM] How to exclude Admin from directory list
    Thread Starter JorgeW

    (@jorgew)

    7 years ago

    As a side note, showing user_login is not consider a security issue.

    Yes you are right Shamim and that’s weird.

    Let’s think it over once again, what is the user_login for?

    Well, precisely for that: to “log in” to an account (in combination with your password). If I’m not you, why should I know that parameter if I’m not going to login as you?

    So what’s the use for me of knowing a parameter (BTW, one of -mostly- only two login parameters) that I should NOT be using (logging in as if I were you) unless I would be trying to login to your account?!?

    Once I have your user_login I only need to find out your password to break into your account.

    This is precisely what I find a “security flaw”.

    • This reply was modified 7 years ago by JorgeW.
    Forum: Plugins
    In reply to: [Front End PM] How to exclude Admin from directory list
    Thread Starter JorgeW

    (@jorgew)

    7 years ago

    Wow… works perfectly!

    Beautiful solution to just what I needed.

    Thanks a lot Shamim.!!!

    Forum: Plugins
    In reply to: [Front End PM] How to exclude Admin from directory list
    Thread Starter JorgeW

    (@jorgew)

    7 years ago

    Hi Shamim,

    I just found that autosuggestion seems to look not for user_public_name (which is what appears in the Directory and therefore totally intuitive) nor for user_nice_name either (which could be used, although how would I know it?) but for user_login!?!

    I find this totally counterintuitive (how can I possibly know user_login? and for all users?) and a security flaw (I should NOT know other user_login).

    1.- Please confirm, is this true?

    2.- If this is so, how can I change it to user_public_name?

    Thanks.

    Forum: Plugins
    In reply to: [Front End PM] How to exclude Admin from directory list
    Thread Starter JorgeW

    (@jorgew)

    7 years ago

    Hi Shamim,

    Do you know how to use wordpress hooks?

    No, (not yet). I’m no developer, just a user.
    I would prefer not to get into learning, time issues 🙂

    Forum: Plugins
    In reply to: [Front End PM] How to exclude Admin from directory list
    Thread Starter JorgeW

    (@jorgew)

    7 years ago

    Initially I want to exclude a single admin (superadmin) user, but if there is an option to manage it at “admin role” level, I would be much interested to know both ways.

    Forum: Plugins
    In reply to: [wpForo Forum] Not getting notifications of new topic or post.
    Thread Starter JorgeW

    (@jorgew)

    7 years, 2 months ago

    Hi @gvectors-team,

    Finally early this morning we got positive results.
    The problem was at the server’s spam filter, it was adjusted to reject any email containing the word “subscribe”. This has been now modified and “New Reply” notifications to “subscribers” as well as to admins are being sent and received beautifully!!

    ————–

    BTW, you asked me to “disable all other plugins” especially SMTP related and “Then test it again.”

    This seems to be problematic, since the Debug Information in the Forum Tools explicitly recommends at the following detected error (once SMTP plugin has been deactivated):

    WordPress Email sending function wp_mail() doesn’t work! In most cases this is a server issue. We recommend you contact to your hosting service support team or open a support topic in ww.wp.xz.cn support forum. Also there are many good articles regarding this issue in web. For example – How to Fix WordPress Not Sending Email Issue

    In the link there it states “[…] we recommend using SMTP to send emails in WordPress.”
    —————-

    Anyway wpForo is working now just as offered and expected.

    Great plugin!!

    Thanks for wpForo and for stepping in.

    • This reply was modified 7 years, 2 months ago by JorgeW.
    • This reply was modified 7 years, 2 months ago by JorgeW.
    Forum: Plugins
    In reply to: [wpForo Forum] Not getting notifications of new topic or post.
    Thread Starter JorgeW

    (@jorgew)

    7 years, 2 months ago

    Hi @gvectors-team,

    Just to let you know:

    > Please check your spam-box. test with other users account.
    No mails in any spam-box of different users.

    > Also please navigate to Dashboard > Forums > Tools > Debug > Tables sub-tab and check database problems.
    – [ Tables ] No Problems Found in Database
    – [ Errors & Issues ] No issues, no errors, no recommendations.

    > Please disable all other plugins, […]
    – Only plugin, other than wpForo, is Easy WP-SMTP. But whenever I disable it, then there appears an error reported by [ Errors & Issues ]:
    EMAIL
    WordPress Email sending function wp_mail() doesn’t work!

    > Manually subscribe to one forum, … and test it
    – Test results (with and without Easy WP-SMTP plugin activated): NO topic update or reply notification emails received by any user nor admin.

    —————
    Observations:
    – Easy WP-SMTP plugin has (once activated and inside its settings) a Log file that keeps log of every email sent by WP or wpForo and there it clearly includes those notifications that were sent to subscribers as email.

    – I asked my host provider to check mail() functions of server and they say those functions are Ok. I’m letting them perform a few tasks on the forum site and on the forum itself, as users and as admin.

    Let us wait and see what they have to tell. I will be back as soon as they report.

    • This reply was modified 7 years, 2 months ago by JorgeW.
Viewing 7 replies - 1 through 7 (of 7 total)