Kiran
Forum Replies Created
-
Posts
-
Hi Rigo,
I checked and seems all GD plugins are updated to recent version.
We never face similar issue from our side. Just let us know if you see issue again.Regards,
KiranHi There,
We have made changes so it will prevent to save html tags in description if “Disable HTML Editor” is enabled. It will be in in Pricing Manager v2.5.0.13.
Provide us FTP credentials if you want me to apply patch on your site.
Regards,
KiranThis reply has been marked as private.This reply has been marked as private.Hi There,
I have checked today my listing(https://huntingmama.com/dining/the-test/) which was created 4 days back and it still have 4 images uploaded during add listing.
Kiran
Hi Joel,
I have updated some changes, please try after clearing your browser cache.
Let us know how it goes.
Kiran
Hi There,
It is not possible without core customization to make title mandatory.
Kiran
This reply has been marked as private.This reply has been marked as private.Hi Joel,
Can you provide more details what issue it shows to you? Please provide screenshot or video capture so we can check from our side.
Regards,
KiranHi Alexander,
Dates are translated via WordPress default date functions. We have fixed it.
Please download this file https://raw.githubusercontent.com/AyeCode/geodirectory/8a137d9eb7eb4dd0c9b407b5c2f7dde7c050bd93/includes/custom-fields/output-functions.php and replace it overwrite at \plugins\geodirectory\includes\custom-fields\output-functions.php
Let us know how it goes & thanks for spotting.
Regards,
KiranThanks for letting us know.
Hi Scott,
In recent version we have escaped custom field values to prevent XSS (Cross-site scripting) attacks on website.
Cross-site scripting (XSS) is a type of computer security vulnerability typically found in web applications. XSS enables attackers to inject client-side scripts into web pages viewed by other users. A cross-site scripting vulnerability may be used by attackers to bypass access controls such as the same-origin policy.
See https://developer.wordpress.org/plugins/security/securing-input/ & https://developer.wordpress.org/plugins/security/securing-output/
Let us know how you are using scripts to display third-party plugins in custom fields. If possible i will provide you help/snippet to use filter instead of script tags. Allow to use script tags in input is not safe for website in terms of security.
Best Regards,
KiranHi Monfort,
You can achieve by using following PHP snippet. This snippet will set status of listing to “Pending” when it edited by user. You can edit content of email sent when listing is edit by author to add details about review listing data.
/** * Set post status to pending on listing edit. */ function gd_snippet_190923_pre_admin_post_edit_email( $email_name, $email_vars ) { $data = array(); $data['ID'] = $email_vars['post']->ID; $data['post_status'] = 'pending'; return wp_update_post( $data ); } add_action( 'geodir_pre_admin_post_edit_email', 'gd_snippet_190923_pre_admin_post_edit_email', 20, 2 );Regards,
KiranHi Mitch,
Try following PHP snippet.
/** * Redirect to specific url after add listing form submitted. */ function gd_snippet_ajax_save_post_message( $message, $post_data ) { $redirect_to = 'https://www.google.co.in'; // Redirect url ob_start(); ?> <script type="text/javascript">window.location = '<?php echo $redirect_to; ?>';</script> <?php $redirect_to_js = ob_get_clean(); $message .= trim( $redirect_to_js ); return $message; } add_filter( 'geodir_ajax_save_post_message', 'gd_snippet_ajax_save_post_message', 100, 2 );Regards,
Kiran
