Search Results for 'update'

I’m losing money, and a lot of time to fix it. And, by now, I’m not secure to updated the theme with this suppose “secure” new version. I’ve bought a licence of an anti-malware, and even the service said the “automatic cleanup of the site failed”. So, I had to contact the Malcare service for the “manual cleanup” of the malware, which is inside the Newspaper Theme. I don’t feel confident to updated, that’s it.

A few people have submitted requests for tagDiv to create a Block that would make it easy to add a “Table of Contents” to the theme. I have personally tried “Easy table of contents” plugin and other plugins, just as tagDiv suggested in earlier responses.
However, in 3 recent instances, those two TOC plugins corrupted my headers during an update to a new plugin version. Therefore not useable.
In addition, Newspaper ver. 12 just did the same header disaster yesterday. I was forced to reset my tagDiv license key, clear the cache, then revert to the earlier version to get my site back.
It is clearly all related to the table of contents plugin, which begs the question, “Why won’t tagDiv create a block for us to insert a compatible table of contents within their Theme?”
Thereby allowing us to delete the WP table of contents plugin that conflicts with the Newspaper Theme. Reminder to support similar inquiries to mine dates back well over one year…
Thank you for your quick response, K

Thanks for submitting request for Block to add Table of Contents. I have tried easy table of contents and others just as tagDiv suggests.
in 3 instances, they have corrupted my headers during an update.
In addition, Newspaper ver. 12 just did the same header disaster yesterday. I was forced to reset my license key, clear cache, than revert to earlier ver. to get my site. back
I think it is all related to table of contents, which begs the question “Why wont tagDiv create a block for us to insert a compatible table of contents” allowing us to delete the WP plugins that are a conflict with this Theme??
thank you

Even after two updates I haven’t seen the post submission subscription plan. If I want to give subscription plan to the users who are willing to post on my news website then how can I allow that and how can I track the subconscious start end date and limitations on number of Post he does as per subscription plan.

Hi,

ok. thats fine.

Can you please let me know if I can add blocks to tag div composer directly without plugin?

Also, on theme update, will the new blocks work?

thanks

Okay, I just found your patch, and it is NOT a patch. It’s a bandaid at most. In td-composer/legacy/common/wp_booster/wp-admin/panel/panel_core/td_pannel_data_source.php:610 you have simply added in

// don't allow eval( / String.fromCharCode( as option value if ( td_util::strpos_array( $option_value, array( 'eval(', 'String.fromCharCode(' ) ) !== false ) { $option_value = ''; }
this does not fix the core problem of an unauthenticated user being able to use admin-ajax.php and your td_ajax_update_panel action and td_magic_token to inject anything they want. What if they just change their method and obfuscate their code, it will pass right by this “check” and sites will once again be infected.

Okay, I just found your patch, and it is NOT a patch. It’s a bandaid at most. In td-composer/legacy/common/wp_booster/wp-admin/panel/panel_core/td_pannel_data_source.php:610 you have simply added in

			// don't allow eval( / String.fromCharCode( as option value
	        if ( td_util::strpos_array( $option_value, array( 'eval(', 'String.fromCharCode(' ) ) !== false ) {
		        $option_value = '';
	        }

this does not fix the core problem of an unauthenticated user being able to use admin-ajax.php and your td_ajax_update_panel action and td_magic_token to inject anything they want. What if they just change their method and obfuscate their code, it will pass right by this “check” and sites will once again be infected.

• This reply was modified 3 years by nearview.

Is there a changelog for which files were updated? Is this a security issue in TD Composer or Theme itself?

Hi Calin, I bought my licence for 9 webs the 10th July 2017 and use it without problems and now, this change?
When I bought, I ask you for time, and you tell me the licence is forever, and I use it for years and updates till now… so, this has changed yesterday? I think is not fair if I have to buy now 5 licences.
Asis

He wanted to say that before updating to new version, you have to delete the code if is in the custom JavaScript and custom HTML fields in theme panel > custom codes. I updated yesterday, will see if it works (hoping to work or we will drive crazy).

Hi,I don’t disable any plugins during updates, of course.
Did I understand your question correctly?

you guys have still not addressed this issue in your latest 12.1.1 update.
wow