Forum Replies Created

Viewing 15 replies - 1 through 15 (of 53 total)
  • Thread Starter PCS Web Hosting LLC

    (@wetapplemedia)

    Looks like this issue is fixed. Thank you!

    Thread Starter PCS Web Hosting LLC

    (@wetapplemedia)

    Thank you this is great!

    Thread Starter PCS Web Hosting LLC

    (@wetapplemedia)

    This issue is still not fixed.

    [Fri Jan 17 06:33:43.452496 2025] [fcgid:warn] [pid 1318407:tid 139685934384896] [client 123.123.123.123:0] mod_fcgid: stderr: PHP Warning:  file_exists(): open_basedir restriction in effect. File(/1220484899) is not within the allowed path(s): (/var/www/vhosts/domain.com/:/tmp/:/usr/share/httpd/pcs_global_files/) in /var/www/vhosts/domain.com/httpdocs/wp-content/plugins/contact-form-7/includes/file.php on line 304, referer: https://domain.com/test-form/
    [Fri Jan 17 06:33:43.452540 2025] [fcgid:warn] [pid 1318407:tid 139685934384896] [client 123.123.123.123:0] mod_fcgid: stderr: PHP Warning: file_exists(): open_basedir restriction in effect. File(/1220484899) is not within the allowed path(s): (/var/www/vhosts/domain.com/:/tmp/:/usr/share/httpd/pcs_global_files/) in /var/www/vhosts/domain.com/httpdocs/wp-includes/functions.php on line 2061, referer: https://domain.com/test-form/
    [Fri Jan 17 06:33:43.452548 2025] [fcgid:warn] [pid 1318407:tid 139685934384896] [client 123.123.123.123:0] mod_fcgid: stderr: PHP Warning: is_dir(): open_basedir restriction in effect. File(/) is not within the allowed path(s): (/var/www/vhosts/domain.com/:/tmp/:/usr/share/httpd/pcs_global_files/) in /var/www/vhosts/domain.com/httpdocs/wp-includes/functions.php on line 2072, referer: https://domain.com/test-form/
    [Fri Jan 17 06:33:43.452554 2025] [fcgid:warn] [pid 1318407:tid 139685934384896] [client 123.123.123.123:0] mod_fcgid: stderr: PHP Warning: copy(): open_basedir restriction in effect. File(/a-file.pdf) is not within the allowed path(s): (/var/www/vhosts/domain.com/:/tmp/:/usr/share/httpd/pcs_global_files/) in /var/www/vhosts/domain.com/httpdocs/wp-admin/includes/class-wp-filesystem-direct.php on line 309, referer: https://domain.com/test-form/
    [Fri Jan 17 06:33:43.452560 2025] [fcgid:warn] [pid 1318407:tid 139685934384896] [client 123.123.123.123:0] mod_fcgid: stderr: PHP Warning: copy(/a-file.pdf): Failed to open stream: Operation not permitted in /var/www/vhosts/domain.com/httpdocs/wp-admin/includes/class-wp-filesystem-direct.php on line 309, referer: https://domain.com/test-form/

    Despite these errors, the email somehow gets to the destination it seems. However, it would be great to not have these errors without turning off “open_basedir” protections.

    Thread Starter PCS Web Hosting LLC

    (@wetapplemedia)

    comment retracted sorry

    Thread Starter PCS Web Hosting LLC

    (@wetapplemedia)

    Update: It appears Track Geolocation Of Users Using Contact Form 7 is trying to save the attached file to the root of the server instead of the allowed “uploads” directory?

    I am getting these warnings with PHP 8.3 as well:

    [Mon Jan 13 10:22:18.261280 2025] [fcgid:warn] [pid 826382:tid] mod_fcgid: stderr: PHP Warning:  Undefined array key "nonce" in /var/www/vhosts/genericdomain.com/httpdocs/wp-content/plugins/track-geolocation-of-users-using-contact-form-7/inc/admin/class.tglcf.admin.action.php on line 277
    [Mon Jan 13 10:22:18.261285 2025] [fcgid:warn] [pid 826382:tid] mod_fcgid: stderr: PHP Warning: Undefined array key "form-id" in /var/www/vhosts/genericdomain.com/httpdocs/wp-content/plugins/track-geolocation-of-users-using-contact-form-7/inc/admin/class.tglcf.admin.action.php on line 278
    Thread Starter PCS Web Hosting LLC

    (@wetapplemedia)

    I’m afraid I only posted a fix for the current XSS Vulnerability problem. I use PHP 8.2.

    And I don’t have any way to update the plugin for everyone. Best you can do is apply my patch.

    Thread Starter PCS Web Hosting LLC

    (@wetapplemedia)

    This is how the very end of the file should look. Maybe you are missing the small function that comes after the code change?

    https://piperhosting.net/downloads/screenshot-20221222.jpg

    Thread Starter PCS Web Hosting LLC

    (@wetapplemedia)

    I figured out how to fix it if someone is interested. Hope the admins take notice. Read here:

    https://github.com/sureswiftcapital/Simple-Calendar/issues/355#issuecomment-1362491694

    Thread Starter PCS Web Hosting LLC

    (@wetapplemedia)

    Just to be clear, the plugin seems to work just fine for me with PHP 8.1.x

    Although, I upload using FTP and skip the whole uploader section of the plugin.

    Thread Starter PCS Web Hosting LLC

    (@wetapplemedia)

    2.5.4 seems to fix this! Thank you! 🙂

    Thread Starter PCS Web Hosting LLC

    (@wetapplemedia)

    Looks like version 2.5.3 continues to have issues:

    Updates were not installed for the following items:
    
    1. Website "TestSite" (https://<redacted.com>): Failed to reset cache for the instance #7: PHP Warning: Trying to access array offset on value of type null in /var/www/vhosts/<redacted.com>/httpdocs/wp-content/plugins/svg-support/functions/mime-types.php on line 22
    Warning: Trying to access array offset on value of type null in /var/www/vhosts/<redacted.com>/httpdocs/wp-content/plugins/svg-support/functions/mime-types.php on line 22
    PHP Fatal error: Uncaught TypeError: array_intersect(): Argument #1 ($array) must be of type array, null given in /var/www/vhosts/<redacted.com>/httpdocs/wp-content/plugins/svg-support/functions/mime-types.php:28
    Stack trace:
    #0 /var/www/vhosts/<redacted.com>/httpdocs/wp-content/plugins/svg-support/functions/mime-types.php(28): array_intersect()
    #1 /var/www/vhosts/<redacted.com>/httpdocs/wp-includes/class-wp-hook.php(310): bodhi_svgs_upload_mimes()
    #2 /var/www/vhosts/<redacted.com>/httpdocs/wp-includes/plugin.php(205): WP_Hook->apply_filters()
    #3 /var/www/vhosts/<redacted.com>/httpdocs/wp-includes/functions.php(3546): apply_filters()
    #4 /var/www/vhosts/<redacted.com>/httpdocs/wp-includes/block-editor.php(216): get_allowed_mime_types()
    #5 /var/www/vhosts/<redacted.com>/httpdocs/wp-includes/class-wp-theme-json-resolver.php(297): get_default_block_editor_settings()
    #6 /var/www/vhosts/<redacted.com>/httpdocs/wp-includes/class-wp-theme-json-resolver.php(561): WP_Theme_JSON_Resolver::get_theme_data()
    #7 /var/www/vhosts/<redacted.com>/httpdocs/wp-includes/script-loader.php(3205): WP_Theme_JSON_Resolver::get_merged_data()
    #8 /var/www/vhosts/<redacted.com>/httpdocs/wp-includes/script-loader.php(3401): {closure}()
    #9 /var/www/vhosts/<redacted.com>/httpdocs/wp-includes/class-wp-hook.php(308): {closure}()
    #10 /var/www/vhosts/<redacted.com>/httpdocs/wp-includes/class-wp-hook.php(332): WP_Hook->apply_filters()
    #11 /var/www/vhosts/<redacted.com>/httpdocs/wp-includes/plugin.php(517): WP_Hook->do_action()
    #12 /var/www/vhosts/<redacted.com>/httpdocs/wp-settings.php(639): do_action()
    #13 /usr/local/psa/admin/plib/modules/wp-toolkit/vendor/wp-cli/vendor/wp-cli/wp-cli/php/WP_CLI/Runner.php(1291): require('...')
    #14 /usr/local/psa/admin/plib/modules/wp-toolkit/vendor/wp-cli/vendor/wp-cli/wp-cli/php/WP_CLI/Runner.php(1212): WP_CLI\Runner->load_wordpress()
    #15 /usr/local/psa/admin/plib/modules/wp-toolkit/vendor/wp-cli/vendor/wp-cli/wp-cli/php/WP_CLI/Bootstrap/LaunchRunner.php(23): WP_CLI\Runner->start()
    #16 /usr/local/psa/admin/plib/modules/wp-toolkit/vendor/wp-cli/vendor/wp-cli/wp-cli/php/bootstrap.php(77): WP_CLI\Bootstrap\LaunchRunner->process()
    #17 /usr/local/psa/admin/plib/modules/wp-toolkit/vendor/wp-cli/vendor/wp-cli/wp-cli/php/wp-cli.php(27): WP_CLI\bootstrap()
    #18 /usr/local/psa/admin/plib/modules/wp-toolkit/vendor/wp-cli/vendor/wp-cli/wp-cli/php/boot-fs.php(17): require_once('...')
    #19 /usr/local/psa/admin/plib/modules/wp-toolkit/vendor/wp-cli/wpt-wp-cli.php(31): require_once('...')
    #20 {main}
    thrown in /var/www/vhosts/<redacted.com>/httpdocs/wp-content/plugins/svg-support/functions/mime-types.php on line 28
    Fatal error: Uncaught TypeError: array_intersect(): Argument #1 ($array) must be of type array, null given in /var/www/vhosts/<redacted.com>/httpdocs/wp-content/plugins/svg-support/functions/mime-types.php:28
    Stack trace:
    #0 /var/www/vhosts/<redacted.com>/httpdocs/wp-content/plugins/svg-support/functions/mime-types.php(28): array_intersect()
    #1 /var/www/vhosts/<redacted.com>/httpdocs/wp-includes/class-wp-hook.php(310): bodhi_svgs_upload_mimes()
    #2 /var/www/vhosts/<redacted.com>/httpdocs/wp-includes/plugin.php(205): WP_Hook->apply_filters()
    #3 /var/www/vhosts/<redacted.com>/httpdocs/wp-includes/functions.php(3546): apply_filters()
    #4 /var/www/vhosts/<redacted.com>/httpdocs/wp-includes/block-editor.php(216): get_allowed_mime_types()
    #5 /var/www/vhosts/<redacted.com>/httpdocs/wp-includes/class-wp-theme-json-resolver.php(297): get_default_block_editor_settings()
    #6 /var/www/vhosts/<redacted.com>/httpdocs/wp-includes/class-wp-theme-json-resolver.php(561): WP_Theme_JSON_Resolver::get_theme_data()
    #7 /var/www/vhosts/<redacted.com>/httpdocs/wp-includes/script-loader.php(3205): WP_Theme_JSON_Resolver::get_merged_data()
    #8 /var/www/vhosts/<redacted.com>/httpdocs/wp-includes/script-loader.php(3401): {closure}()
    #9 /var/www/vhosts/<redacted.com>/httpdocs/wp-includes/class-wp-hook.php(308): {closure}()
    #10 /var/www/vhosts/<redacted.com>/httpdocs/wp-includes/class-wp-hook.php(332): WP_Hook->apply_filters()
    #11 /var/www/vhosts/<redacted.com>/httpdocs/wp-includes/plugin.php(517): WP_Hook->do_action()
    #12 /var/www/vhosts/<redacted.com>/httpdocs/wp-settings.php(639): do_action()
    #13 /usr/local/psa/admin/plib/modules/wp-toolkit/vendor/wp-cli/vendor/wp-cli/wp-cli/php/WP_CLI/Runner.php(1291): require('...')
    #14 /usr/local/psa/admin/plib/modules/wp-toolkit/vendor/wp-cli/vendor/wp-cli/wp-cli/php/WP_CLI/Runner.php(1212): WP_CLI\Runner->load_wordpress()
    #15 /usr/local/psa/admin/plib/modules/wp-toolkit/vendor/wp-cli/vendor/wp-cli/wp-cli/php/WP_CLI/Bootstrap/LaunchRunner.php(23): WP_CLI\Runner->start()
    #16 /usr/local/psa/admin/plib/modules/wp-toolkit/vendor/wp-cli/vendor/wp-cli/wp-cli/php/bootstrap.php(77): WP_CLI\Bootstrap\LaunchRunner->process()
    #17 /usr/local/psa/admin/plib/modules/wp-toolkit/vendor/wp-cli/vendor/wp-cli/wp-cli/php/wp-cli.php(27): WP_CLI\bootstrap()
    #18 /usr/local/psa/admin/plib/modules/wp-toolkit/vendor/wp-cli/vendor/wp-cli/wp-cli/php/boot-fs.php(17): require_once('...')
    #19 /usr/local/psa/admin/plib/modules/wp-toolkit/vendor/wp-cli/wpt-wp-cli.php(31): require_once('...')
    #20 {main}
    thrown in /var/www/vhosts/<redacted.com>/httpdocs/wp-content/plugins/svg-support/functions/mime-types.php on line 28
    Error: There has been a critical error on this website.Learn more about troubleshooting WordPress. There has been a critical error on this website.
    Thread Starter PCS Web Hosting LLC

    (@wetapplemedia)

    It no longer limits the number of IP address entries that can submit a form through Gravity Forms since version 1.5 came out.

    Running:
    Gravity Forms User Restrictions 1.0.3
    Gravity Forms 2.6.8
    WordPress 6.1.1
    PHP 8.1

    Thread Starter PCS Web Hosting LLC

    (@wetapplemedia)

    My mistake! Different plugin at fault!

    Thread Starter PCS Web Hosting LLC

    (@wetapplemedia)

    Thank you! Note to admin: you may want to link the changelog link in the WordPress Plugins page to your github repository releases page.

Viewing 15 replies - 1 through 15 (of 53 total)