tansk

Forum Replies Created

Viewing 14 replies - 1 through 14 (of 14 total)
  • Forum: Plugins
    In reply to: [WP Photo Album Plus] Security Check Failure when Adding Comments to Photos
    Thread Starter tansk

    (@tansk)

    7 years, 6 months ago

    Yes running Table VIII A-13 fixed it. (A13 is for albums, A14 is for Photos).

    Thanks again.

    Forum: Plugins
    In reply to: [WP Photo Album Plus] Security Check Failure when Adding Comments to Photos
    Thread Starter tansk

    (@tansk)

    7 years, 6 months ago

    1. The URL to reach the photo has this :

    … 14ceffc1a6&occur=1&single=1&album=869bf4a5ddec&photo=1879bb206039

    2. The Comment Widgets shows this when I click on the same photo :

    …recently-commented-photos-2/wppaspec/oc1/ct10/ab/pt1879bb206039

    3. Somehow, the album id is missing after the /ab. If I manually modify it to

    …recently-commented-photos-2/wppaspec/oc1/ct10/ab869bf4a5ddec/pt1879bb206039 , the photo is found

    4. Its not critical for me as I developed a short_code function that shows a table of recent comments made in the last 14 days, with columns of Photo image / Comments excerpt / Author /Date .
    The Photo images has a href link with the url format in point 1, and works well.

    Hence I dont need to use the Comments widget, but happy to help you test if needed.

    • This reply was modified 7 years, 6 months ago by tansk.
    Forum: Plugins
    In reply to: [WP Photo Album Plus] Security Check Failure when Adding Comments to Photos
    Thread Starter tansk

    (@tansk)

    7 years, 6 months ago

    CommentWidget :
    Link type : fullsize photo in a slideshow
    Link Page : Recently Commented Photos
    New Page : untick
    PSO : untick

    Forum: Plugins
    In reply to: [WP Photo Album Plus] Security Check Failure when Adding Comments to Photos
    Thread Starter tansk

    (@tansk)

    7 years, 6 months ago

    Yes it works. Great. Thanks.

    I’m not sure if this is a bug or specific to my site.

    When using the encrypted links (Table IV, 6.1 & 6.2), the WPPA + Comments on Photos widget cannot retrieve the photo. I get an error message of “No photos found matching your search criteria.”

    When not using the encrypted links the widget works OK.

    The WPPA + Last Ten Photos widget works with both encrypted and plain links

    Forum: Plugins
    In reply to: [WP Photo Album Plus] Security Check Failure when Adding Comments to Photos
    Thread Starter tansk

    (@tansk)

    7 years, 6 months ago

    Great. Will look out for it.

    Thanks.

    Forum: Plugins
    In reply to: [WP Photo Album Plus] Security Check Failure when Adding Comments to Photos
    Thread Starter tansk

    (@tansk)

    7 years, 6 months ago

    Jacob,

    I am OK with using the crypts for both the albums and the photo ids.

    Do make the bypass setting. Many thanks.

    Will this also handle the bypass for ratings?

    I’ll look into the invalidation of old emails (Table VIII) later on whether I should set them on.

    Forum: Plugins
    In reply to: [WP Photo Album Plus] Security Check Failure when Adding Comments to Photos
    Thread Starter tansk

    (@tansk)

    7 years, 6 months ago

    Thanks for spending so much time on helping with this. I now understand why the nonce approach does not work as the user may click on it a day later and a different nonce is generated.

    The new approach you suggested will not work for me as I want to log the user who made the comment. The landing page does ask for an email & a name – but I dont think the users will want to key the info in each time they want to make a comment.

    How about adding a ‘permanent nonce’ as an alternative.

    This can be an unique wppa-salt value visible in the WPPA setup and one can embed a url_salt into the URL to verif against it. (ie …&url_salt=2837424651&…)

    Then in the wppa-ajax, line 442 can be

    if (( ! wp_verify_nonce( $nonce, ‘wppa-nonce-‘.$mocc ) ) or !wppa_verify_salt(wppa_salt, url_salt))

    Will this work? Is this a possible approach – for the next release?

    • This reply was modified 7 years, 6 months ago by tansk.
    Forum: Plugins
    In reply to: [WP Photo Album Plus] Security Check Failure when Adding Comments to Photos
    Thread Starter tansk

    (@tansk)

    7 years, 6 months ago

    I have just tried using the landing page suggestion – the url succesfully logs into the site thru my direct login routine, and calls out the photo (I prefer this layout than type=xphoto shortcode which I have been using).

    On adding the comments I get the same security check failure. The nonce value got changed.

    URL :
    9027a&moccur=1&wppa-nonce=ffa9aaf8ce&wppa-occur=1&wppa-single=1&wppa-album=17&wppa-photo=164

    Echo code in 441 :
    XXXXXX 1 e172344621 164XXXSecurity check failure

    Again the ffa9aaf8ce value is received as e172344621 , I think if we can solve this, both approaches will work.

    • This reply was modified 7 years, 6 months ago by tansk.
    Forum: Plugins
    In reply to: [WP Photo Album Plus] Security Check Failure when Adding Comments to Photos
    Thread Starter tansk

    (@tansk)

    7 years, 6 months ago

    I am getting some odd results.

    Here’s what Im using to generate the nonce :

    $mocc=1;
    $wppa_value = wp_create_nonce(‘wppa-nonce-‘.$mocc);
    $wppa_token=”&moccur=”.$mocc.”&wppa-nonce=”.$wppa_value;

    I then add the token to the URL : (137 is the photo_id)

    URL …. 69e9027a&moccur=1&wppa-nonce=6fdc8660cf&parameter=137

    I then do a check on the values passed at line 441 in wppa-ajax.php
    echo “XXXXXX “.$mocc .” “.$nonce .” “.$photoid ;

    if ( ! wp_verify_nonce( $nonce, ‘wppa-nonce-‘.$mocc ) ) {
    _e( ‘XXXSecurity check failure’ , ‘wp-photo-album-plus’);

    The value that is echoed are :
    XXXXXX 1 e20fa4b7c7 137XXXSecurity check failure

    The wppa_nonce value is somehow modified from 6fdc8660cf to e20fa4b7c7

    • This reply was modified 7 years, 6 months ago by tansk.
    • This reply was modified 7 years, 6 months ago by tansk.
    Forum: Plugins
    In reply to: [WP Photo Album Plus] Security Check Failure when Adding Comments to Photos
    Thread Starter tansk

    (@tansk)

    7 years, 6 months ago

    Thanks for the fast response.

    My situation is this… I run an alumni site and the system pushes out a weekly email which includes 2 random photos. I’m giving them the ability to click on the photo, which will autolog them into the site, leading to that photo so that they can add comments to it.

    Forum: Plugins
    In reply to: [Auto Post Scheduler] Weekly Post Updates
    Thread Starter tansk

    (@tansk)

    8 years, 3 months ago

    To net it out, I just need a feature where the same newsletter can be automatically sent out every week though it has not been changed.

    Forum: Plugins
    In reply to: [bbPress Notify (No-Spam)] Customised Topic and Reply URLs
    Thread Starter tansk

    (@tansk)

    8 years, 3 months ago

    That exactly what I’ve been looking for. Many thanks. Super.

    Forum: Plugins
    In reply to: [bbPress Notify (No-Spam)] Customised Topic and Reply URLs
    Thread Starter tansk

    (@tansk)

    8 years, 3 months ago

    Yes it worked for both the topics and replies.
    – Topics notification will be email to all subscribers which works wonderfully.
    – However, for replies, I like it to be emailed only to those who either subscribed to the forum, the topic or those who ask to be emailed on replies. How do I do this? Can I filter the list and have it replace those in the subscriber role? There was some earlier discussion but I could not find a solution as yet. Thanks again.

    Forum: Plugins
    In reply to: [bbPress Notify (No-Spam)] Customised Topic and Reply URLs
    Thread Starter tansk

    (@tansk)

    8 years, 3 months ago

    Vinny, Thanks for fast reply. I’ve managed to get it working using a combination of bbpnns_reply_url and bbpnns_filter_email_body_for_user using a placholder.

    • This reply was modified 8 years, 3 months ago by tansk.
Viewing 14 replies - 1 through 14 (of 14 total)