GravityView WordPress Plugin Logo

Gravity Forms Importer CSV File Failed to Upload

, , , , ,

Using the Gravity Forms Import Entries 2.0 plugin, (which was developed by the team at GravityView) you can easily bulk import hundreds or thousands of Gravity Form entries in minutes with any properly formatted comma separated value (CSV) file.

I’ve used this plugin a handful of times and it is well worth the licensing cost having paid for itself after the first use. However, I ran across an issue when attempting to upload a CSV file that contained html content and or https links. Each time I attempted to upload such a CSV I received a “CSV file failed to upload” error. In this article I write on how to get around this upload error.

 

Read more

Gravity Forms Logo

Gravity Forms Renaming Uploaded Files Breaking Links

, , , , , ,

The premium WordPress plugin, Gravity Forms has a built in security feature which “self heals” the Gravity Forms uploads folder by renaming files containing certain file name extensions. This “self healing” function is routinely called from a Gravity Forms created cron-job and scans for files that may be malicious but it doesn’t actually analyze the file to verify if it is malicious or not. Rather, it simply renames the discovered file based off the file extension with no notice to you that it has been renamed or has altered any files in the uploads directory.

Below we’ve listed the file name extensions that are monitored for their existence and will be automatically renamed if discovered.

 

Read more

Apache Logo

Redirect from HTTPS to HTTP

, , ,

There are situations when you may want to redirect your website traffic from HTTPS to HTTP. To accomplish this simply add the following lines of code to your website’s .htaccess file (assuming your website is on an Apache webserver):

 

 

This will redirect all your website traffic from “https://” to “http://”

 

Read more

Disable XML-RPC on WordPress Website

Disable access to XMLRPC in WordPress

, , , , ,

The following kinds of attacks on WordPress websites, specifically targeting xmlrpc.php, have received increasing press coverage since 2015:

[su_list icon=”icon: bug” icon_color=”#157BAE”]

[/su_list]

If you (via an app) or your website (via a plugin) are not using the xmlrpc functionality then it may be wise to disable access to xmlrpc.php

There are several free and premium plugins to choose from on the official WordPress repository. Remember, disabling access to the xmlrpc file may break API functionality that your applications or plugins rely upon.

Later in this article will show you how to disable access to the xmlrpc without using any WordPress plugins.

 

Read more

WordPress Content Management System Icon

Update Your WordPress Database Prefix for Better Website Security

, ,

When you install WordPress, it creates a few database tables beginning with the prefix of “wp_“. Despite being provided the option to change the prefix upon installation, many simply do not. Hackers anticipate this when constructing their malicious code and executing their attacks.

The good news is that you can change the default table prefix, post-install. This helps prevent some malicious code from executing but by no means is this perfect. This can be likened to taking a oral supplement to help prevent catching a cold.

 

Read more

WPFront User Role Editor Plugin

Multisite Security Flaw in WPFront User Role Editor

, , , ,

Recent events showcase that the team managing WordPress is committed to security.

Plugins are removed from the WordPress.org plugin directory once WordPress is made aware of any security related issues related to a plugin or theme within their directory and have verified their authenticity.

 

WPFront User Role Editor Withdrawn

This is what happened on Jan. 20th, 2019 to the WPFront User Role Editor, which has been temporarily withdrawn from the WordPress.org plugin directory. It was reported and verified to have an exploitable security flaw but only when installed on a WordPress website utilizing Multisite installation.

 

Read more

GoDaddy Real User Metrics Javascript Injection Removal

GoDaddy Injecting Real User Metrics into Customer Websites

, ,

The popular domain registrar, GoDaddy, is injecting Real User Metrics (RUM) JavaScript into its US based customer websites. Without notifying them first!

Issues with GoDaddy Real User Metrics

In some instances this injected JavaScript code may slow your websites’ performance or even render it inoperable. This bit of information is straight from GoDaddy’s own website.

 

Read more

WooCommerce WordPress eCommerce

WooCommerce Vulnerability Recently Fixed

, , , , , ,

A design flaw within the WordPress permission system and the eCommerce plugin, WooCommerce, could allow someone to alter account privileges on your WordPress website.

According to new research by Simon Scannell, a researcher for PHP Security firm RIPS Tech, when WooCommerce is installed it will create a Shop Manager role. The Shop Manager user role has the “edit_users” WordPress capability/permission enabled. This capability allows users to edit any WordPress user.

 

Read more

Website Listing Service SCAM Letter from Domain Listing Company

SCAM, Website Listing Service Letter from Domain Listings

, , , , ,

We recently received an email from a client inquiring about a suspicious letter from a company called Domain Listings LLC that they received in the mail.

A closer look at this letter (near the center) reveals that it is a “solicitation” and “not a bill.”

What should I do If I get a letter from Domain Listings?

Read more

UltimateMember WordPress Plugin Hacked

UltimateMember Plugin file class-um-mobile-detect.php False Positive with WordFence Security

, , , ,

Recently the WordFence security plugin for WordPress falsely detected a file within the UltimateMember plugin as malware. Removing this will will crash your website. Should you accidentally remove this file before reading that it is a false positive, simply restore it by downloading the plugin again and uploading the removed file.

Filename: class-um-mobile-detect.php

 

Read more