|
Suhaib Siddiqi
|
May 7, 2014 at 8:38 pm
I had Nonce check Fail problem after I started using Themify.me Event theme https://eventespresso.com/topic/cannot-export-attendees-excel-sheet/. Which Themify fixed and replied following. However when a user register an event from Front End, it is not saved.
Hello Suhaib, first, this has been fixed and will be included in a framework update due today or tomorrow.
Second, since it regards security and I want you to know that the themes are safe to use, I just want to make clear that this is not a nonce issue because in fact, the action that exports the attendee data in Event Espresso has no security checking. It simply loads this url
wp-admin/admin.php?event_espresso&export=report&action=payment&type=excel&all_events=true
without making any check. Now, we also have an export variable in our framework, and this is where the conflict was: since unlike Event Espresso, our export action is run through a nonce checking for security, it ended up as an invalid check, since it was EE who initiated the action (and on top, without a nonce that could be verified), so its export action couldn’t be processed.
We have added an extra checking to confirm that it’s our export action and not other to only then proceed to check the nonce. We’re very sensitive about your security so that’s why I wanted to clarify the issue.
I apologize for the inconvenience, and as mentioned, the patch will be published today or tomorrow.
Best,
|
|
Dean
|
May 8, 2014 at 6:09 am
Hi,
I downloaded the latest Themify.me Event theme and tested it out with EE 3.1.36.5 and had no issues with registering an attendee. Can you provide a link to an event on your site so I can make a test registration there?
I’ll raise a developer ticket to look into the nonce issue.
|
|
Suhaib Siddiqi
|
May 8, 2014 at 6:58 am
Hi Dean,
It is not Registering for event, it is Front End Event Registration form. You can go to http://bostondesiconnection.com/submit-event/, first Register as a Subscriber then go again to http://bostondesiconnection.com/submit-event/ after login. Try to create an Event from front end. It will not appear under hhttp://bostondesiconnection.com/view-events/
|
|
Suhaib Siddiqi
|
May 8, 2014 at 7:02 am
The Themify.me had adjusted the Themify Framework code to make it compatible with Event Espresso.
|
|
Sidney Harrell
|
May 9, 2014 at 10:07 am
Is your view-event page using a category in the event list shortcode? Can you see the events created in the admin? Can you turn on wp-debug and try a front-end submission to see if you get any errors?
|
|
Suhaib Siddiqi
|
May 9, 2014 at 12:34 pm
Hi Sidney
The view-event page is not using a category in the event list shortcode
There is no event created in the admin. I noticed your login but no created events in the Admin.
I did turn on the debug,
define( ‘WP_DEBUG’, true );
define(‘WP_DEBUG_LOG’, true);
Then try to create an event from front-end submission, no debug out put either on the screen or no debug.log created in /wp-content/ or any other directory, including /. It gives 404 Page not found error.
|
|
Lorenzo Orlando Caum
|
May 11, 2014 at 5:04 pm
Hello,
Could you replace any existing debugging macros with this one and re-test:
define('WP_DEBUG', true);
if (WP_DEBUG) {
define('WP_DEBUG_LOG', true);
define('WP_DEBUG_DISPLAY', true);
@ini_set('display_errors', 0);
}
—
Lorenzo
|
|
Suhaib Siddiqi
|
May 11, 2014 at 9:48 pm
Hi Lorenzo,
Did that, still same, it return 404 Page not found error. and event is not created.
|
|
Dean
|
May 13, 2014 at 12:30 am
Hi,
Were there any error messages?
Can you check the debug log that should of been generated – wp-content/debug.log.
|
|
Suhaib Siddiqi
|
May 13, 2014 at 5:02 am
Dean,
There were no errors and debug.log was not created. I got only 404. Page not found.
|
|
Suhaib Siddiqi
|
May 14, 2014 at 11:23 am
Hello,
Themify also tried troubleshooting the problem. They sent me following response. The problem is Front End plugin. See below the response from Themify Support.
Hi Suhaib, we've debugged this extensively and found the following. This might be a bit technical but it will allow you to contact the plugin developer with a proper foundation.
The situation was that you're using Event Espresso and a extension that allow registered users to create events and submit them. When you used TwentyTen or a similar standard theme, it was working. When you used Event, it didn't.
We reproduced this issue, and indeed, with a standard theme it was fine, but not with Event, that leaded to a 404 page when the event was submitted.
The thing is that whenever you register a custom post type, it becomes a reserved query variable, and queries can't have a variable with its name. Since TwentyTen doesn't register any post type it's fine (actually it doesn't register anything).
However, Event registers the "event" post type. So, if the Event theme is active and a url has an "event" variable like the example URL below, WordPress returns a 404 page.
http://example.com/?event=something
Well, this is exactly what the plugin is doing when it submits the event and reloads the page, right there in the first variable shown in the image below
This, and nothing else, is the source of the issue. The "event" variable could have been named "event_name" or "event_title" (like "event_desc" a couple of lines below) and everything would have been fine.
You'll have to contact the plugin developer, explaining this situation. If they name the variable other than "event" everything will be fine.
Best,
|
|
Suhaib Siddiqi
|
May 14, 2014 at 11:28 am
This PNG image was sent by Themify Support with the above message. http://www.bostondesiconnection.com/event-espresso.png
|
|
Dean
|
May 16, 2014 at 6:52 am
Hi,
Thank you, I will raise a developer ticket to look into the issue.
|
|
Suhaib Siddiqi
|
May 16, 2014 at 8:01 am
Hi Dean,
I look forward to a fix soon.
|
|
Suhaib Siddiqi
|
May 18, 2014 at 8:14 pm
Can we get this fixed ASAP? It is affecting my customers.
|
|
Dean
|
May 19, 2014 at 6:35 am
Hi,
I have added it to the developer queue and they will look into it as soon as possible. I will add your comments to the ticket.
|
