Home › Forums › Product Support Forums › Ajax Search Pro for WordPress Support › file-uploader hack
- This topic has 12 replies, 2 voices, and was last updated 9 years, 6 months ago by
Ernest Marcinko.
-
AuthorPosts
-
November 8, 2016 at 12:44 pm #10770
Claudius
ParticipantVaultPress tells me the following lines:
This code appears to be a part of a file-uploader hack, which may allow malicious users to upload files to your server.
/wp-content/plugins/ajax-search-pro/backend
if
(
wd_asp
(
)
->
instances
->
rename
(
$_POST
[
‘instance_new_name’
]
,$_POST
[
‘instance_id’
]
)!==
false
)
November 8, 2016 at 1:02 pm #10771Ernest Marcinko
KeymasterHi,
It’s definitely a false positive detection. It’s not possible to send any files or malicious information via that code. It’s a simple statement for renaming the search instances.
It’s passed to a verification handler, which is preceeded by a $wpdb->prepare statement, as well as the handler file only works for a logged in user on the back-end.
November 9, 2016 at 10:14 am #10786Claudius
ParticipantThanks for your answer!
I have three more questions.
How can I display more results than 10?
And how can these results be displayed per page 10?
And how do I get it to be scrolled inside a Multiselect dropdown box?Thanks Claudius
November 9, 2016 at 12:44 pm #10793Ernest Marcinko
KeymasterHi Claudius,
How can I display more results than 10?
You can set the limtis on the General Options -> Limits panel.And how can these results be displayed per page 10?
For the isotopic layout the results count per page is calculated from the defined maximum row count and item width. To have 10 results, you will need 2 rows and 5 items per row. Since the default setting is 2 for the rows already, you will have to change (decrease) the item width on the Theme Options -> Isotopic results panel: http://i.imgur.com/n3PMzmx.pngPlease note that the width and the height are not “exact” values, only a starting point for calculating the final width/height. The plugin will try to resize the items to fit the width of the results container, but keeping the width/height close to those values defined.
The lower the width of the items -> the more they fit into one row, and vice versa.Also note that on smaller displays the site width is different, and it could result in different number of elements per row, as the plugin tries to mantain readability and close range of the defined width.
And how do I get it to be scrolled inside a Multiselect dropdown box?
There might be a stylesheet disabling the overflow of the drop-down element. Try fixing it with the following custom CSS:[html]div.ajaxsearchpro[id^=’ajax’] select[multiple] {
overflow-x: auto !important;
overflow-y: auto !important;
overflow: auto!important;
}[/html]I hope this helps!
November 9, 2016 at 1:48 pm #10795Claudius
ParticipantPerfect, everything worked out.
Two last questions.
How to change the setting in a multiselect dropdown box so that the two options must be available and not one of the two?
In a dropdown box without a multiselect and an “any possibility” you notice what?
(E.g.:
Deutsch, Englisch, Spanisch, Französisch||Any ??
Deutsch||Deutsch
Englisch||Englisch
Spanisch||Spanisch
Französisch||Französisch)Thanks Claudius
November 9, 2016 at 2:36 pm #10802Ernest Marcinko
KeymasterHi!
How to change the setting in a multiselect dropdown box so that the two options must be available and not one of the two?
You mean so the user has to select two options all times, but cannot select only one? Or the user has to select both of the options, if selects one of them?
Unfortunately this is only possible by making some kind of custom script to handle these requirements, there are no options for conditional selections.In a dropdown box without a multiselect and an “any possibility” you notice what?
For an “any” value, use an empty value as described in the documentation: https://goo.gl/vVwCqHLike so:
[code]||Any
Deutsch||Deutsch
Englisch||Englisch
Spanisch||Spanisch
Französisch||Französisch[/code]November 9, 2016 at 2:45 pm #10803Claudius
ParticipantThank you so much…
November 16, 2016 at 8:30 am #10879Claudius
ParticipantGood morning,
I’ve set up a search called “actor”. First on the test page “https://de.neidig.org/such-test” and now I wanted to embed them on my homepage “https://de.neidig.org/”.
Unfortunately, does not it work on this site?
How can that be?
Thanks ClaudiusNovember 16, 2016 at 10:44 am #10882Ernest Marcinko
KeymasterHi,
There is a fatal javascript error coming from this theme file:
[code]https://cdn.neidig.org/wp-content/themes/bridge/js/default.min.js?ver=1470122620[/code]
Error console: http://i.imgur.com/qTrnIXu.png
It’s blocking all further javascript execution in the jQuery scope. I highly recommend fixing it.There is a secondary scoped version of javascript included in the search, which might be able to bypass the error. On the Compatibility Options submenu, try changing the Javascript Source option to “Minified Scoped”: http://i.imgur.com/ov0RJAx.png
This however might not work, and even if so, it won’t fix the actual problem, which originates in the theme JS file, which I still recommend fixing.
November 16, 2016 at 10:58 am #10883Claudius
ParticipantPerfect, has worked with “Minified Scoped” 😉
An another question:
As soon as I activate the search my SSL certificate disappears. What can I do?Below the photo..
Thank you so much
November 16, 2016 at 11:36 am #10885Ernest Marcinko
KeymasterHi,
It means that the images are stored in your database with a non https URL most likely.
I suggest using this snippet in your functions.php in the active theme directory (copy from line 3):
November 16, 2016 at 12:22 pm #10887Claudius
ParticipantI have used the code at the end of “functions.php” and it works…
Thank you very much
November 16, 2016 at 12:25 pm #10888Ernest Marcinko
KeymasterYou cannot access this content.
-
AuthorPosts
- The topic ‘file-uploader hack’ is closed to new replies.