This website uses cookies to personalize your experience. By using this website you agree to our cookie policy.

file-uploader hack

Viewing 13 posts - 1 through 13 (of 13 total)
  • Author
    Posts
  • #10770
    ClaudiusClaudius
    Participant

    VaultPress tells me the following lines:

    This code appears to be a part of a file-uploader hack, which may allow malicious users to upload files to your server.

    /wp-content/plugins/ajax-search-pro/backend

    if

    (

    wd_asp
    (
    )
    ->
    instances
    ->
    rename
    (
    $_POST
    [
    ‘instance_new_name’
    ]
    ,

    $_POST
    [
    ‘instance_id’
    ]
    )

    !==

    false

    )

    #10771
    Ernest MarcinkoErnest Marcinko
    Keymaster

    Hi,

    It’s definitely a false positive detection. It’s not possible to send any files or malicious information via that code. It’s a simple statement for renaming the search instances.

    It’s passed to a verification handler, which is preceeded by a $wpdb->prepare statement, as well as the handler file only works for a logged in user on the back-end.

    #10786
    ClaudiusClaudius
    Participant

    Thanks for your answer!

    I have three more questions.
    How can I display more results than 10?
    And how can these results be displayed per page 10?
    And how do I get it to be scrolled inside a Multiselect dropdown box?

    Thanks Claudius

    #10793
    Ernest MarcinkoErnest Marcinko
    Keymaster

    Hi Claudius,

    How can I display more results than 10?
    You can set the limtis on the General Options -> Limits panel.

    And how can these results be displayed per page 10?
    For the isotopic layout the results count per page is calculated from the defined maximum row count and item width. To have 10 results, you will need 2 rows and 5 items per row. Since the default setting is 2 for the rows already, you will have to change (decrease) the item width on the Theme Options -> Isotopic results panel: http://i.imgur.com/n3PMzmx.png

    Please note that the width and the height are not “exact” values, only a starting point for calculating the final width/height. The plugin will try to resize the items to fit the width of the results container, but keeping the width/height close to those values defined.
    The lower the width of the items -> the more they fit into one row, and vice versa.

    Also note that on smaller displays the site width is different, and it could result in different number of elements per row, as the plugin tries to mantain readability and close range of the defined width.

    And how do I get it to be scrolled inside a Multiselect dropdown box?
    There might be a stylesheet disabling the overflow of the drop-down element. Try fixing it with the following custom CSS:

    [html]div.ajaxsearchpro[id^=’ajax’] select[multiple] {
    overflow-x: auto !important;
    overflow-y: auto !important;
    overflow: auto!important;
    }[/html]

    I hope this helps!

    #10795
    ClaudiusClaudius
    Participant

    Perfect, everything worked out.

    Two last questions.

    How to change the setting in a multiselect dropdown box so that the two options must be available and not one of the two?

    In a dropdown box without a multiselect and an “any possibility” you notice what?
    (E.g.:
    Deutsch, Englisch, Spanisch, Französisch||Any ??
    Deutsch||Deutsch
    Englisch||Englisch
    Spanisch||Spanisch
    Französisch||Französisch)

    Thanks Claudius

    #10802
    Ernest MarcinkoErnest Marcinko
    Keymaster

    Hi!

    How to change the setting in a multiselect dropdown box so that the two options must be available and not one of the two?
    You mean so the user has to select two options all times, but cannot select only one? Or the user has to select both of the options, if selects one of them?
    Unfortunately this is only possible by making some kind of custom script to handle these requirements, there are no options for conditional selections.

    In a dropdown box without a multiselect and an “any possibility” you notice what?
    For an “any” value, use an empty value as described in the documentation: https://goo.gl/vVwCqH

    Like so:

    [code]||Any
    Deutsch||Deutsch
    Englisch||Englisch
    Spanisch||Spanisch
    Französisch||Französisch[/code]

    #10803
    ClaudiusClaudius
    Participant

    Thank you so much…

    #10879
    ClaudiusClaudius
    Participant

    Good morning,

    I’ve set up a search called “actor”. First on the test page “https://de.neidig.org/such-test” and now I wanted to embed them on my homepage “https://de.neidig.org/”.

    Unfortunately, does not it work on this site?
    How can that be?
    Thanks Claudius

    #10882
    Ernest MarcinkoErnest Marcinko
    Keymaster

    Hi,

    There is a fatal javascript error coming from this theme file:

    [code]https://cdn.neidig.org/wp-content/themes/bridge/js/default.min.js?ver=1470122620[/code]

    Error console: http://i.imgur.com/qTrnIXu.png
    It’s blocking all further javascript execution in the jQuery scope. I highly recommend fixing it.

    There is a secondary scoped version of javascript included in the search, which might be able to bypass the error. On the Compatibility Options submenu, try changing the Javascript Source option to “Minified Scoped”: http://i.imgur.com/ov0RJAx.png

    This however might not work, and even if so, it won’t fix the actual problem, which originates in the theme JS file, which I still recommend fixing.

    #10883
    ClaudiusClaudius
    Participant

    Perfect, has worked with “Minified Scoped” 😉

    An another question:
    As soon as I activate the search my SSL certificate disappears. What can I do?

    Below the photo..

    Thank you so much

    #10885
    Ernest MarcinkoErnest Marcinko
    Keymaster

    Hi,

    It means that the images are stored in your database with a non https URL most likely.

    I suggest using this snippet in your functions.php in the active theme directory (copy from line 3):

    #10887
    ClaudiusClaudius
    Participant

    I have used the code at the end of “functions.php” and it works…

    Thank you very much

    #10888
    Ernest MarcinkoErnest Marcinko
    Keymaster

    You cannot access this content.

Viewing 13 posts - 1 through 13 (of 13 total)
  • The topic ‘file-uploader hack’ is closed to new replies.