Wordpress Contact form update B20070407

April 11, 2007 | Published in: Out of the Blue | Tags: 0

From Mike C – I made several small modifications in the wp-gbcf_form.php to even further enhance security. I also modified the mail header to extract the character set from the blog settings instead of hard-coding it. It was hard-coded utf-8, and on most blogs will remain as such, but now that can be modified if the webmaster has selected another charset for their blog. The documentation file, wp-gbcf_help.php, was also updated.

You can download the new version here.

Found this post useful? Why not buy me a coffee!

Related Entries

  • No related posts found

Sorry, the comment form is closed at this time.

The comments are closed.

About this site

Blue Anvil is the online web design journal & portfolio of , a web designer from Norfolk, England. Read More »
ThemeSlice
  • Featured work - More

    • Beefjack
    • Integrity
    • theotaku.com
  • Latest Tweet - More

    • Out of the blue - More

      • Switched: From Shared to VPS

        It’s been about two weeks now since I made the transition from a shared reseller hosting account to a VPS (Virtual Private Server) account – impressions so far, excellent performance but fiddly to configure.

        The reason I wanted to change from shared hosting was the fact the server was always being hacked (even though ALL my scripts were secure), there was frequent downtime, support blamed me for problems every time, and it was slow as hell.

        Those used to a shared hosting environment would probably not know where to start when faced with configuring a VPS. Luckily, a lot of it was pre-configured when I received my account – certainly some of the major security holes were patched. I was not satisfied with those however. As a victim of hacking in the past (previous host swears it was not there fault, something I don’t believe) I took extra care to secure it as a much I could – configuring brute force detection, the firewall, installing mod security (excellent rules for that here: http://www.atomicorp.com/wiki/index.php/Atomic_ModSecurity_Rules) and going though multiple guides (like this one: http://www.webhostingtalk.com/showthread.php?t=468168) with a fine-tooth comb.

        The result? My pages are loading at least 6 times faster, I have had no down time (or at least have not noticed any), and I feel in control and happy. No longer am I at the mercy of shared hosts :)

        If your interested, I chose ServInt as my provider as they offered a great deal, as well as being a managed service (so I’m not on my own if I screw things up). I was tempted by the bells and whistles of Media Temple, but felt the ServInt service was better value.

      • Download Monitor 3.2.2 Maintenance Release

        Download Monitor has received some more love and has been updated. Here’s the change log from the new version:

        • Small bugfix in uploader.php – cat ID
        • Changed stats graph calculation – thanks lggemini
        • Changes to headers in download.php to avoid caching
        • File Browser fixes – $root was clashing with something….
        • exclude_cat works in all sections of download_page now
        • Removed hardcoding of /uploads/
        • Added action to download.php – should be able to use it to stop a download if you want – maybe limiting downloads per day or something? Whatever you want…
        • Made it so if you post new file on ‘edit’ screen, the post date is updated.
        • Fixed the ‘blank meta’ section which blanks out custom field values when nothing is set.
        • Moved ‘allow_url_fopen’ check.
        • Someone said downloads don’t work with spaces in the name. They do! Wasting my time sonny…
        • All work and no play make jolley a dull boy
        • Had to rename capabilities so they work. Apologies if you have to set this up again! Cheers to Mark Dingemanse.
        • {category_ID} custom format tag added. Useful if you want to send someone to its category on the DL page I guess. Also added {category_other} so when no category is set “other” is shown – this is because the download page can show an ‘other’ section if you want it to.
        • You can now manually edit the post date on the edit download screen.

        If you have edited capabilities for download monitor user permissions, you’ll have to again sorry! This is because I named them too long. Also, you should check your forced downloads still work because there was a logic error meaning they may not have been forced after-all…

        Enjoy.

      • Mahousive update to Download Monitor (3.2)

        Today I completed the update for the Wordpress Download Monitor Plugin – many tweaks, fixes, and features added. There were no changes to the database structure so people upgrading should be fine. Here is the list from the change log:

        • {user} tag added for custom formats
        • ‘autop’ option fix
        • Download page buttons applied with CSS so they are easier to customise/translate.
        • Fix for pagination bug after editing a download
        • Category output fix on edit downloads screen
        • Category urls on download page use ID rather than name to prevent errors when cats have the same names.
        • exclude_cat added to download_page shortcode
        • Localised ‘hits’ ‘date’ ‘title’ on download page
        • Option to disable the download logging
        • Read file ‘chunked’ some people found large files were corrupted so this should help (fingers crossed)
        • Added show_tags option to download page – displays x amount of tags on the download page.
        • File Browser root setting and download.php logic/mime types modified thanks to Jim Isaacs (jidd.jimisaacs.com)
        • Interface Improvements
        • Bulk edit categories, custom fields, tags, member only downloads
        • Added roles for download monitor admin – should be able to use with a role manager plugin if you want anyone other than admin to access the admin section e.g. http://wordpress.org/extend/plugins/capsman/
        • Change redirect after add
        • Edit Cat names/parents
        • Dedicated tags and thumbnails fields (they still use meta table though)

        And yes, those category link bugs are fixed at long last, and you can edit category names finally. Phew!

      • Wordpress Spam Stopper Plugin Updated

        Spam stopper has been updated to v3.1 – and most of it has been recoded. Here’s the full list of changes:

        • Added changelog to readme.
        • Email validation bug squashed
        • Cached comments now work; if user forgets to fill in antispam or makes a mistake (and the JS does not catch it) the users comment will not be lost.
        • Redone entire code to make it more efficient
        • Admin section added for changing the antispam question
        • Form ID and honeypot trap added to form
        • Fully localized

        You can get the plugin from wordpress.org: http://wordpress.org/extend/plugins/spam-stopper/

        For support, please keep my comments clean and post on either the wordpress forums or my forum.

        To help support spam-stopper you can make a donation (buy me a coffee, or several) or rate it on wordpress.org. Thanks!