I wrote a plugin that displays all products in a woocommerce store in admin settings option, now I want to add a link to download the products as CSV file. The problem is, when I click the link I get a permission error saying I don’t have permission to view this page. Here’s my code: … Read more
This is probably a stupidly simple question to some 🙂 I’ve created a new linux instance on Amazon EC2, and as part of that downloaded the .pem file to allow me to SSH in. When I tried to ssh with: ssh -i myfile.pem <public dns> I got: @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @ WARNING: UNPROTECTED PRIVATE KEY FILE! @ … Read more
We use wordpress like a CMS and would very much like to allow users to have a “homepage”. Ideally they’d be prevented from mucking up the whole site. Is there a simple way to limit users editing rights to a single page? I’m currently using the Members plugin to do other permission-based stuff, so it’d … Read more
For auditing issue, I only want a post can be trashed, but not deleted – for all users. So I have a plugin like add_action(‘before_delete_post’, function($id) { wp_die(0); }); But seems not all delete action are ajax, so it will be show a black screen with return an error page with result “0” Feature wise … Read more
During the vanilla WP core load the current user is being set up in $wp-init() which is after theme load and before init hook. This is in line with good practice of functionality getting hooked to init or later. However it is also common practice to call related functions, such as current_user_can() earlier than that. … Read more
I am working on a multi-user WordPress setup and have made it so a particular type of user can only see and interact with posts, images, pages etc that they have authored. The code to make this happen looks like this: add_filter(‘pre_get_posts’, ‘current_author_posts’); function current_author_posts($query) { if ($query->is_admin && current_user_can(‘artist’)) { global $user_ID; $query->set(‘author’, $user_ID); … Read more
Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers. Want to improve this question? Update the question so it’s on-topic for Stack Overflow. Closed 10 months ago. Improve this question I’ve been given sudo access on one of our development RedHat linux boxes, and I seem to find myself … Read more
I just got WP running on my own server. I am not trying to lock things down more. What permissions should the db user have to my WP db? 5 s 5 If you did want to lock things down…. a normal wordpress site will usually only require the database user to have SELECT, INSERT, … Read more
I just installed node and npm through the package on nodejs.org, and whenever I try to search or install something with npm, it throws the following error unless I sudo the command. I have a feeling this is a permissions issue? I am already the admin. npm ERR! Error: EACCES, open ‘/Users/chietala/.npm/-/all/.cache.json’ npm ERR! { … Read more
I’ve read articles about protecting wp-config.php using .htaccess as well as setting the correct file permissions but I want it all in one place. What should my .htaccess file look like and what folders is it safe to have 777 vs 755 permissions? 4 Hardening WordPress on the WordPress Codex is a very good article … Read more
