Forum Replies Created

Viewing 15 replies - 406 through 420 (of 18,946 total)
  • Moderator threadi

    (@threadi)

    Which widgets are you referring to exactly? Even at high resolutions, I can see the “Latest on Instagram” section in the footer. Are you talking only about that one, or also about the others that I can normally see in the sidebar?

    Otherwise, I would agree with @markrh that the sidebar simply moves down on smaller resolutions. This is likely a setting in your theme to ensure all content is visible even on smaller screens. If you have questions about this, I’d recommend contacting the support team for the theme you’re using, since they’re responsible for the front-end display: https://ww.wp.xz.cn/support/theme/kale/

    Moderator threadi

    (@threadi)

    I have many projects running on Debian-based servers and have never seen a message like this before. I can’t find the text you mentioned in the WordPress core either: https://github.com/search?q=repo%3AWordPress%2FWordPress%20curl%20vulnearabilities&type=code

    My guess is therefore that this is coming from a plugin you’re using. You might be able to tell by the button next to the message or by the details provided.

    If you don’t see that, check which plugins you’re using. I’m guessing a security plugin is the cause of this.

    Moderator threadi

    (@threadi)

    I can only reproduce the issue described in Chrome-based browsers, such as Edge. There are no problems with this in Firefox.

    If I understand correctly, the affected content loads with a delay. However, this also happens when JavaScript is disabled in the browser, which is highly unusual.

    If you look at the source code of the affected section, you’ll notice that it’s completely broken. There are HTML elements there that don’t belong.

    Unfortunately, you’re currently using Matheson Pro, a commercial theme. It apparently uses custom input fields as well as content output in the frontend. Unfortunately, we can’t help you with that here in the forum. You therefore have the following options:

    • Contact the support team for the commercial theme you’re using: https://themes.bavotasan.com/contact/
    • As a test, you could also deactivate the plugins you’re using to rule them out as the cause.

    By the way, you’re also using a plugin that blocks right-clicks and supposedly protects the page’s source code. On the one hand, this makes it difficult for people who want to help you to examine the website. On the other hand, this can also be easily bypassed, which is why I was able to perform the analyses mentioned above. It’s also theoretically possible that this plugin is causing the problem since it interferes with the entire operation of the website. Just a guess.

    Moderator threadi

    (@threadi)

    First of all, I’m not sure why you specifically want to use double quotes here. According to the HTML standard, single quotes are also allowed. But from a perfectionist’s perspective, I can at least understand the question. 🙂

    For the robots tag, the output in this format comes from the WordPress code itself. It’s defined here: https://github.com/WordPress/WordPress/blob/master/wp-includes/robots-template.php#L49

    Of course, you can’t – and shouldn’t – modify this file. One solution, however, could be the sledgehammer approach, which I’m reluctant to use but consider a last resort for something like this:

    function custom_replace_quotes( $buffer ) {
    // Here you can change the HTML content
    return str_replace( "'robots'", '"robots"', $buffer );
    }

    add_action( 'template_redirect', function() {
    ob_start();
    ob_start( 'custom_replace_quotes' );
    });

    This involves modifying the robots tag. The other tags would then need to be adjusted in a similar way since they are dynamically generated by the core.

    If you’d like to see a change in the core regarding this, feel free to submit a ticket to the developers here: https://core.trac.ww.wp.xz.cn/newticket

    Moderator threadi

    (@threadi)

    I’d also like to see a screenshot of that. See also: https://ww.wp.xz.cn/support/forum-user-guide/block-editor/#adding-screenshots

    Also temporarily disable all plugins and, as previously recommended, switch to a default theme such as TwentyTwentyFive.

    Moderator threadi

    (@threadi)

    That sounds strange. Do you mean the list of posts, or when editing a post? Feel free to share a screenshot of it: https://ww.wp.xz.cn/support/forum-user-guide/block-editor/#adding-screenshots

    Otherwise, I’d suspect that a plugin you’re using is the cause. Try deactivating all plugins and then reactivating them one by one until the display goes wrong – that’s how you’ll find the culprit.

    Moderator threadi

    (@threadi)

    The reason for the error should be visible in the error log. You can find it in your hosting area. If necessary, the support of your hosting can help you.

    Alternatively, you could also enable debugging in WordPress. How to do this is described here: https://developer.ww.wp.xz.cn/advanced-administration/debug/debug-wordpress/ – also here the support of your hosting can help you if necessary to edit the file accordingly.

    In both cases you should be able to see what the cause is in the logfile. Often it is a plugin.

    Moderator threadi

    (@threadi)

    I’m not quite sure what you’re referring to. I’m guessing it’s this: https://www.sophos.com/en-us/blog/axios-npm-package-compromised-to-deploy-malware

    Axios is a JavaScript library used by npm. As far as I can tell, WordPress itself doesn’t use it: https://github.com/search?q=repo%3AWordPress%2FWordPress%20axios&type=code

    However, it is sometimes used by plugins and themes. Sometimes as a tool for blocks or other JavaScript-based interactions. So if you want to make sure your project isn’t affected:

    • Install all pending updates for plugins and themes
    • Check which plugins and whether your theme might use this package, and if in doubt, contact the respective support team
    Moderator threadi

    (@threadi)

    As far as I know, the security industry operates completely independently of WordPress and follows the principle of “first investigate how it happened, then clean it up” (at least depending on the specific case). Unfortunately, you’ve already cleaned up the site, which makes it difficult – if not impossible – to trace the path of the hack. As a result, you’ve essentially covered all tracks.

    Time is also an important factor. All access attempts can be traced (again, independently of WordPress) in the hosting provider’s log files. If too much time has passed since the hack, the log files containing the relevant data may no longer be available.

    WordPress itself does not provide any methods for checking what you’re looking for. As with any other software, you do this by examining what you have and identifying where things might have been manipulated, which then leads you to the point of entry.

    I would therefore recommend that you stop investing energy in this type of investigation and instead focus on securing the project at it currently status. See also: https://developer.ww.wp.xz.cn/advanced-administration/security/hardening/

    Moderator threadi

    (@threadi)

    The color information comes from your Astra theme. I would recommend that you contact their support forum: https://ww.wp.xz.cn/support/theme/astra/

    Moderator threadi

    (@threadi)

    I tried this out myself. After a while, I figured out what you were doing – unfortunately, you didn’t respond to my questions about it. So I’m guessing you’re adding the block for a “custom link”. With that approach, I can now follow the sequence of clicks shown in your video.

    But I think the solution would be very simple: instead of clicking on the block in the right sidebar after adding it, you can enter the URL directly where you added it. You don’t have to click at all, not even in the right sidebar.

    So: Add block > Paste URL from clipboard > Done.

    Of course, the current click sequence you’re using here is inconvenient. If you’d like to see this optimized, I’d recommend submitting it as an issue to the Gutenberg team: https://github.com/WordPress/gutenberg/issues – that way, their developers could optimize it in future versions.

    Moderator threadi

    (@threadi)

    Since you’re using a different language in the interface in your video, I’m not sure which block you’re adding here – the one that seems to disappear when you click on it? Do you know what it’s called in English? That would be important so we can reproduce the issue.

    Additionally: Make sure you haven’t activated any plugins in your project and use a default theme. That’s the only way to reproduce this as a potential issue. If you still have plugins activated, deactivate them and then try again. I would also recommend using a default theme like TwentyTwentyFive for the test.

    Moderator threadi

    (@threadi)

    I understand your confusion. It’s always frustrating to be passed back and forth. However, you’re using commercial software to solve your problem. No one here has access to that software and can therefore help you with it. In this case, their support team is the right person to contact. It’s also possible that you didn’t explain your issue clearly enough to their support team. My recommendation would be to try again and perhaps choose different words – after all, it took us several posts here to get to the heart of your actual problem.

    If their support team still can’t help you, you have two options:

    • Find someone who can look at your project with you in person. You can find someone like that here, for example: https://jobs.wordpress.net
    • Use a different plugin instead of MemberPress to meet your needs.
    Moderator threadi

    (@threadi)

    No, I haven’t noticed that yet. However, it’s very likely that a plugin in your project is interfering with the loading process. As a test, try deactivating all plugins except the Classic Editor and see if that helps.

    The theme could also be causing the issue – you could try switching to a default theme like TwentyTwentyOne to see if that makes a difference.

    Moderator threadi

    (@threadi)

    I think the note refers to the caching plugins you’ve installed. You can usually clear their cache in the backend.

    However, I would check again to make sure the emails aren’t actually coming from the old domain. When I visit it, I’m taken to a WordPress site that’s in maintenance mode. But there’s one running under the domain from which you’re receiving emails. I’m pretty sure the emails are coming from there, not from your live domain.

Viewing 15 replies - 406 through 420 (of 18,946 total)