Here’s an interesting experiment: Go to wordpress plugins listing page, notice the activate, deactivate links all have a nonce part in the request. In a second tab, log out of the site, and go back to plugin listing page. After awhile, the page realizes it’s not logged in, and pops up a log in screen. … Read more
I recently thought I’d protect a WP site’s /wp-admin folder with Apache’s basic auth to provide a crude but somewhat effective additional layer of security (as a second line of defense should the WP install accidentally go out of date or an exploit emerge). However when I did this, I immediately noticed that the site’s … Read more
My (shared) web host recently sent me this: “Our server monitoring systems keep indicating high server load persistently maintained by your website (…). Most of the hits are to the /www/www/wp-admin/admin-ajax.php script. We would advise the following: Do not stay logged into the WordPress dashboard through the day. Once you finish your work, you should … Read more
After I check heartbeat.js file I found that by default WordPress set heartbeat hasFocuse option to true, I want to change this option to false what can I do? What am I trying to achieve? I have a live notification and messages system working depending on heartbeat.js the problem that if I switch from my … Read more
How can I get correct action hook on publish_posts for multiple custom types ? I have a following problem, I can use this hook for posts or single custom post_type, but I don’t know correct hook for multiple custom post types: // Post publication for posts add_filter ( ‘publish_post’, ‘notify_published_post’ ); function notify_published_post( $post_id ) … Read more
I have a form that $_POSTs an input value, and user’s ID that saves the data to the database: // frontend form <form id=”form”> <input type=”radio” name=”location” id=”name1″ value=”1″> <label for=”name1″>Label 1</label> <input type=”radio” name=”location” id=”name2″ value=”2″> <label for=”name2″>Label 2</label> <input type=”radio” name=”location” id=”name3″ value=”3″> <label for=”name3″>Label 3</label> <input type=”hidden” name=”userid” value=”{userid}”> </form> // footer … Read more
I’ve read that Heartbeat can slow a WP site down and I’m assuming if our admins/store managers have a lot of admin windows/tabs open, this will exacerbate the issue. If yes, is there a condition to test and log the calls that Heartbeat makes so I can see if the site slowdown could be related … Read more
My aim is to use the Heartbeat API to check if new posts have been published since the blog’s homepage was loaded. If new posts have been published, I will display a link at the top of the screen “16 new posts” which, when clicked, will insert the new posts into the DOM. My problem: … Read more
By default running content through the_content filter automatically checks for oEmbed content. However when returning data through heartbeat_received the filter for oEmbed doesn’t seem to work. For example – function test_heartbeat_received( $response, $data ) { if( $data[‘test_heartbeat’] == ‘test’ ) { $content = “https://twitter.com/WordPress/status/456502643738030080”; // Doesn’t work global $wp_embed; $content = $wp_embed->autoembed( $content ); $response[‘test_heartbeat’] … Read more
I use the WordPress heartbeat to check a setting on my server from the front-end. If that setting has a specific value I want to stop bothering the server. There for I want to stop/pause the heartbeat. There are no other things depending on the heartbeat. I found wp.heartbeat.stop() over here, but it doesn’t work. … Read more
