Actually, never mind. I just found the solution down further in the Social Media Icons block … the “Custom Social Icon” option.
Still, I would highly recommend adding Google as an option in the normal social media icons options. It’s very important for publishers.
This can be easily done using the following code snippet
function delete_tagdiv_reviews_post_types(){
unregister_post_type( 'tdc-review-email' );
unregister_post_type( 'tdc-review' );
unregister_taxonomy_for_object_type( 'tdc-review-criteria', 'tdc-review' );
}
add_action('init','delete_tagdiv_reviews_post_types', 100);
Okay, I just found your patch, and it is NOT a patch. It’s a bandaid at most. In td-composer/legacy/common/wp_booster/wp-admin/panel/panel_core/td_pannel_data_source.php:610 you have simply added in
// don't allow eval( / String.fromCharCode( as option value if ( td_util::strpos_array( $option_value, array( 'eval(', 'String.fromCharCode(' ) ) !== false ) { $option_value = ''; }
this does not fix the core problem of an unauthenticated user being able to use admin-ajax.php and your td_ajax_update_panel action and td_magic_token to inject anything they want. What if they just change their method and obfuscate their code, it will pass right by this “check” and sites will once again be infected.
Okay, I just found your patch, and it is NOT a patch. It’s a bandaid at most. In td-composer/legacy/common/wp_booster/wp-admin/panel/panel_core/td_pannel_data_source.php:610 you have simply added in
// don't allow eval( / String.fromCharCode( as option value
if ( td_util::strpos_array( $option_value, array( 'eval(', 'String.fromCharCode(' ) ) !== false ) {
$option_value = '';
}
this does not fix the core problem of an unauthenticated user being able to use admin-ajax.php and your td_ajax_update_panel action and td_magic_token to inject anything they want. What if they just change their method and obfuscate their code, it will pass right by this “check” and sites will once again be infected.
-
This reply was modified 3 years by
nearview.
Is there a changelog for which files were updated? Is this a security issue in TD Composer or Theme itself?
I see that the footer can not be edited on a page/post, is there a way to enable that same functionality for headers?
Just use ##year## in the footer. It will automatically update to the current year.
And a follow up … how do I now add additional sidebars for each category? Prior to cloud templates, I could create new sidebar for specific categories using the “Category” settings in the theme panel. But now that option to set / create a specific sidebar per category is gone. And I can’t create a new sidebar in the Appearance > Widgets area either.
@anamaria, could you share this in a format that doesn’t expire? I’d like to know how to make 5 columns as well. Thanks!
Hello @anamaria,
1.) No changes to the theme
2.) No changes to the host
It is not possible to setup a test environment for this specific bug as it only happens randomly without any direct cause. I am hoping you have a better solution.
Thanks.
The usual response is “turn off all other plugins and only use TagDiv” … not a very practical response!
We have noticed this as well on all sites running WooCommerce and the Newspaper theme. We downgraded to 10.3.9 and it fixed the issue.
Sure thing. Take a look at this screen cast to show you exactly what I am doing. If I am doing something wrong please let me know! https://s3.amazonaws.com/pramadillo/screencast_2021-02-26_08-48-52.mp4
I am trying to do the same thing. I have a header template that I created on one site which I would like to utilize on a different site. I have followed your instructions on copying raw base64 code from one site to another. However when I go that I get the dreaded message Error at rows: 3(models) : 1(dom). The model does not match the content Current state has involved an issue. You could try an UNDO operation (CTRL+Z / CTRL+SHIFT+Z)
We are not using any “custom shortcodes” or any raw HTML as indicated in https://forum.tagdiv.com/tagdiv-composer-not-working/
I also have copied content and post meta directly from database to database and the same issue persists.
Both sites are running same version of Theme and WordPress.
an easier way to do this is to simply hide them via css. Just add the following into your Live CSS
#wp-admin-bar-tdc_edit,
#wp-admin-bar-our_support_item,
#wp-admin-bar-tdc_page_mobile_template,
#wp-admin-bar-tdc_create_mobile_page,
#wp-admin-bar-tdb_template_load {
display:none!important;
}
Your support was less than helpful via email. The response is below. The answer is just to reset the theme panel and redo all of your settings… Not an acceptable answer.
Hi,
In most cases this problem can be solved using this guide https://www.wpbeginner.com/plugins/how-to-clean-up-your-wordpress-database-for-improved-performance/
Also in some cases the database is corrupted, for that you need to make a full backup and copy the theme settings and rest the theme panel settings, after that the check to see if the problem persists, if no, set the theme settings back and check again if the problem persists, then the settings for theme balel are corrupted and you must make new settings from a fresh theme.
Thank you for your understanding!
Alex N.
Done.
I too am having this same issue. We run the Newspaper Theme on roughly 10+ different sites, and all of them have a HUGE problem td_011_settings row. With the largest one being 1,064,079 bytes or 1.06 MB which is autoloaded on each request. Combine the that with td_011 row which is 86422bytes and you are almost at 2mb per request and that is just for those two entries. When looking at the import/export panel I see you are keeping backups of the settings panel. How do you remove some of the backups? Currently we have 6 backups some of which are dated from a year ago.
When I look through the actual raw data it appears that in my particular case on this site I am looking at it is duplicated 10x, I search for instance for a random ID tagid: \'1bPate1YIKjanN9rdVZc\' and it returns 10 results that one id is only listed on ONE portion of the site. The full length of that td_011_settings is over 12,000 lines long, and the JSON is broken on line 12321, if it wasn’t it wold be over 20k lines long.
Also, please do not respond to this ticket with “did you deactivate plugins, did you view article on speeding up WordPress, did you read articles on how to make you db smaller, etc, etc”, as all of those have already been done. This is happening on all of the sites we use the Newspaper theme on so it is NOT an isolated issue.
Thanks
Thanks, we’ll definitely check this out. Good suggestion!
Bettina, we know that. Can you at least acknowledge that this is an issue and bring it up to the dev team for consideration for a future release?
@bettina,
Why would I need them there? Can I submit a feature request that your devs simply add a filter to enable/disable that feature. The TagDiv block in the admin bar takes up about 30% of the entire admin bar so much the admin bar is on two lines.
So for all of those that are interested, there is a bug in the Standard Pack plugin on the plugins/td-standard-pack/Newspaper/page.php template.
On line 20 where it says
$td_page = td_util::get_post_meta_array($post->ID, 'td_page');
you should replace that with
if($post->ID === 0){
$page_id = get_queried_object_id();
$td_page = td_util::get_post_meta_array($page_id, 'td_page');
} else {
$td_page = td_util::get_post_meta_array($post->ID, 'td_page');
}
As when you are on a page which has any BuddyPress components on it, the $post variable is not set which means none of the page settings from TD are being used.
@Calin can you submit his to your developers so we don’t have to modify core code?
Thanks, Calin, but that sets the sidebar for ALL pages on the site. We still want the default sidebar on other pages on the site and only want to change the sidebar on just the BuddyPress pages (groups, activity, members). We tried changing the sidebar in the template settings on the actual pages themselves, but it appears BuddyPress is pulling in the default sidebar no matter what we do.
-
This reply was modified 5 years by
nearview.
Just to update, we are using a Child Theme with the Standard Pack plugin running latest version of Newspaper theme.
Have same issue. With BuddyPress you simply just set which page is the community page. When using the page template settings and selecting no sidebar it still shows the default side bar. I also have tried to replace the sidebar with a custom sidebar specifically for BuddyPress and it always shows the default sidebar.
