Wordpress Discussion
- Started
- Last post
- 164 Responses
- rupedixon0
Hey Guys, I've got a question about making a really simple contact form for a WP theme I'm developing...
As a rule I have been avoiding any unnecessary plug-ins or third party stuff (less bloated, more secure etc.), but it looks like it might be a good idea to use a contact plug-in (gravity/ninja/not really sure!) because they may be more secure.
Is this right or would a hand-coded form be just as secure relying on the inbuilt WP security...
This is the first theme I have developed so any good contact or security advice is welcome.
thanks
- gravity forms ftwPonyBoy
- security on a form? what data is being sent?fadein11
- I've recently started using CalderaForms on a lot of my sites. It's great.noneck
- CalderaForms is a complete form designer tool isn't? it's a really heavy tool. if you want something easy and effective use contact-from7.sted
- if you need advanced features use gravity.
don't waste your time to do this from scratch. you can bundle the plugins with the themested - oh yeah... contact form7 is nice... and it's packaged-in w/ a number of themes now... although I find myself resorting back to gravityPonyBoy
- Thanks guys, 'contact form7' was in my shortlist, so was 'fast secure contact form', but I liked 'c f 7' more...rupedixon
- @fadein11, just concerned about the form being used to send spam etc...rupedixon
- ah - you just need captcha or similar then.fadein11
- I'll throw another vote for Contact Form 7dee-dubs
- If you build yourself, beyond simple captchas/nonces, you need to be careful to sanitize user input. No SQL, no scripts, virus checking uploads, etc.monNom
- look into SQL injection, XSS, XSRFmonNom
- dbloc0
Best plugin for delivering different sized images for mobile/tablet & desktop.
- This is a question by the way.dbloc
- doesn't Wordpress support srcset for img elements out of the box in v4.4?spot13
- https://make.wordpre…spot13
- Built in.ArmandoEstrada
- perfect. I'll look into thisdbloc
- thanks all!dbloc
- fadein111
Wow - had to come in here to cool off. That politics thread is getting even more depressing.
Anyway - has anyone here much experience of moving a wordpress woocommerce site from http to https.
It's a site from last year that needs updating to https. I have built sites from https in the beginning but need to upgrade this one.
Any pointers? pitfalls? etc.
I have read a few articles. Doesn't seem too bad. But the site does a lot of business so obviously has to be done right.
Thanks for any help in advance.
- scour the theme for http:// references other than that it's pretty straightforward. SEO is a pretty big consideration too I guess.Mattjanz3n
- yup, seos get fucked for a bit, eventually the https move will improve them thoughmoldero
- thanksfadein11
- hey fadein11 saw this.. https://www.producth… might be usefulMattjanz3n
- ArmandoEstrada1
Foundation is the responsive grid. You do things in rows and create columns.
So your mark up will look like:
<div class="row">
<div class= small-12 columns>
YOUR CONETENT
</div>
</div>So anything you throw inside there will respond according to your column width setting.
Check the grid examples here. And Block Grids are fucking awesome. I cant believe Bootstrap doesn't have something like this natively.
- ArmandoEstrada0
Here is my copy of a theme I created with _S and added Zurb Foundation grid only. This does NOT have all the url stuff, so if you want to add components just do a custom Zurb export and replace. Im no expert, so use this as is.
- wow! thanks! I'll try!oey
- <- url stuff= Zurb Stuff, like buttons styles etc.ArmandoEstrada
- haven't quiet figured out how to do that but I will be in 4 hour daily modus after the weekend.oey
- ArmandoEstrada1
_S + Zurb Foundation == Awesome Custom sites...
- Yeah good combo there too!nocomply
- the plot thickens :)oey
- this is more stuff to learn than I thought...oey
- so you guys are basically telling me to build a theme.oey
- and use _s as starting point and build it using a framework like foundation, genesis or the beaver. right?oey
- hm...oey
- Yeah that's right. But that's because we do this stuff all the time. That Beaver Builder route will get you the furthest the fastest though.nocomply
- Most off the shelf commercial themes are garbage in my experience.nocomply
- thanks nocomply that's really a lot but very valuable and practical advice from someone who knows. that's gold.oey
- but let me get this straight, i can invest in the beaver and use it for other clients? like the client i have now will pay the server, domain and...oey
- take care of renewing. will pay for the theme, etc...oey
- ah! checking that they have a yearly plan of 99€ that doesn't allow WP multisites and a pro plan of 199$. hm...oey
- thanks too Armando!oey
- and components is a group of defined themes based on _S right? so i can try those too.oey
- nocomply1
@oey
I generally recommend against the specialty themes that you linked to. In my experience those cause more problems than they solve due to feature bloat, poor code quality, lack of updates to remain compatible with the roadmap of WordPress, etc...
In my opinion, it's much better to start with a more minimalist theme with a vetted codebase from a trusted vendor and layer in the additional functionality that you need through plugins (which is where that stuff belongs).
I recommend http://beaverbuilder.com/ to a lot of folks in your situation. It's a page builder plugin, but they also offer their own theme which plays nicely with it. It's really flexible and you can get a ton of mileage out of it. It also has a huge user base and a good development/support team behind their product. In short, they're not going anywhere. (And no, they don't pay me to promote their stuff.)
- ah! thanks nocomply! i understand what you mean. still I would prefer to modify the html and css by myself and not use drag and drop page builders.oey
- checking the beaver right now.oey
- I was thinking that maybe it's just better to use a minimal theme as well but with high customizing possibilities .oey
- You can still do a lot of manual customization to your theme even when using Beaver Builder. I do that all the time.nocomply
- But if you're going to use a minimalist theme and customize it yourself, I like working with Genesis - http://my.studiopres…nocomply
- It's got a bit of a learning curve though. If you want to avoid that I'd go with a child theme based on the default twentysixeen, twentyseventeen, etc.. themes.nocomply
- Or for super-minimal try http://components.un… or http://underscores.m…. When I build completely custom themes I start with underscoresnocomply
- i was checking on the genesis framework yesterday.oey
- vero_vandal1
I love WP Commander
https://cmscommander.comRun by a guy in Germany, makes controlling multiple WP sites easy.
- https://cmscommander…vero_vandal
- I've found ManageWP to be really great. Does CMS Commander do anything better?Nathan_Adams
- ^ probably notvero_vandal
- https://wpvulndb.com…Mattjanz3n
- fadein110
Quick question - I need to pull out a value from mySQL database (custom field) in wordpress.
I am thinking of using the code below. Unfortunately I do not have access to the site currently so I am sending an updated file to the administrator.
Anyone know if the syntax below looks okay? I just need to pass a value to PHP variable so I can do an if/else statement:
<?php
$jobactive = $wpdb->get_var("SELECT Job_Active FROM activejobs");
if ($jobactive = "2") {
echo do_shortcode( '[contact-form-7 id="115493"]' );
} else {
echo do_shortcode( '[contact-form-7 id="133"]' );
}?>
- thanks in advance by the way!fadein11
- I believe it should be:
if ($jobactive == 2)
no quotes if 2 is an integer and if you're trying to check and not set the varspot13 - thanks yep - picked that up now. Still doesn't work but because of the database fields :( waiting to get a copy of the database.fadein11
- Mattjanz3n0
is there a mailing list that sends notices of core wp updates? I looked quickly on the wp site and turned up bumpkis. I got stung by some malware on a client site today and cannot go on like this. I want to setup some automation around these core updates - not actual automated upgrades but an offer to perform the proper update process.
- or is it bupkisMattjanz3n
- the site admin is emailed when updates are available.fadein11
- I was hoping there was some kind of wp community email sent before the release. That would give us time to schedule the work etc.Mattjanz3n
- If you use RSS feeds you can follow the official WP updates feed.noneck
- I use iThemes Sync to manage all the updates on my client sites. I've even turned it into a nice little revenue stream.noneck
- mekk2
Oey,
I like you. This is why I want to give you this honest advice:
Obviously you have absolutely no experience in the dev field, it seem like you haven't heard of proper alternatives. Your simple domain questions reveal that you have no understanding of databases and DNS.
Your client wants stuff that is not doable with stock Wordpress and you have to rely on extensions and it seem like you aren't able to template well.
"Should I use a theme?
Is it lazy?
Do it from scratch with HTML/CSS and JS?"^ Man.. is this the way we approach projects? How would you react if your car mechanic works like that?
My advice to you is don't take on this task, you will have a lot of trouble with the client, even more if she is your housemate and is within your friendship circle.
Don't take on tasks you have no Idea of. It will end badly for everyone involved I promise. Please learn first before you start charging money.
Be aware with the vast amount of wordpress extensions out there - it's like the Android App Store, full of scam, full of malware, full of stuff that only works in Pro version. Mostly horror code.
I'd like to add my comment from three pages above here: http://www.qbn.com/reply/3801802…
Some commenters there asked a few days later on qbn how to do basic HTML stuff.- Hi mekk! I really appreciate your sincerity and pragmatism. I totally understand what you mean and that's why I posted in the thread.oey
- I really would like to do it but it's a bit a too big gig with personal relations mixed. I will take the next two weeks to check and decide.oey
- by checking I mean play a bit with some WP stuff and read more about it plus vs minus points, check tutorials, etc...oey
- thanks again!oey
- feel free to ask questions, I can help with frontend stuff :)mekk
- thanks mekk...I decided not to go forward with that project.oey
- but i accepted one to do a website for a recording studio of a friend of mine. Ikeep you posted and will ask for advice...for sure ;)oey
- wordpress plugins are rarely full of malwarefadein11
- hotroddy0
What would be the best way to implement a slideshow gallery like the one below where links update on each slide?
- I meant URL path updates with each slidehotroddy
- you just mean link each slide differently?dbloc
- Yeshotroddy
- not sure this is what you are looking for but this is a BRILLIANT custom slideshow maker plugin. https://revolution.t…microkorg
- most of the sliders allow you to add a link to the slide. I usually just use cycle2 but there are may on the market.dbloc
- Ranger0
I've got a problem with a now unsupported plugin but it's the only one I can find that does what I need. It worked fine when the theme used an ID for the header but since a big update the theme now uses a class instead.
How can I add an ID back into the header div within Wordpress?
- edit and add what you need in the header.php in the theme directory...(or in the file where your header div is).uan
- pockets0
so a record label hit me up for some custom wordpress work..
"So this portal would be accessible via username and password from our main page http://ribbonmusic.com/, and would lead to the artists to access their publishing info
We have this master spreadsheet where we have all the info, payments, and songs for writers/artists, their syncs and where
Ideally would be cool if each writer or their management could download like an excel with the info too"i replied:
"Ok sounds good, I got a couple of questions:
For the users or 'artists', will they need to be able to create their own accounts with usernames and passwords or will that be managed only by the administrator?
As far as the information that is accessible to the artists goes, will there be any sort of payment/invoicing system involved or will the information be static to the user where only the administrator will have control of what gets presented to them?
Yes, downloading their info onto a spread sheet will be no problem.
Lastly, is there any samples,layouts or mock-ups of how the portal should like like?"
what would u charge? the bands on the label are somewhat big, 30-50k followers each, deafheaven won album of the year...RATATAT is on their label also.. Im assuming they hey money but what would you quote them at?
- have*pockets
- They likely don't have as much money as you think. If it's all static content and your not having to pull that information coming from muliple different sourcesshellie
- icksney on the realsnay nameseh.detritus
- You can probably close this fast for 15-20k. But they should spend money interfacing with publishing accounting.shellie
- Depending on what they use i imagine it could be a shit show. Tunecore, organic, and others don't make their shit available to developersshellie
- But at least you can have them avoid inputting everything twice between label side accounting (quickbooks) and the site they canshellie
- Possibly avoid the staggering request from management and lawyers to show them the numbers.shellie
- Oh yes and realistically management will need to be able to add/edit splits, input the contributors PRO like BMI or ASCAP and relevant contact info for those coshellie
- (what Detrius said)Gnash
- *contributors. Also keep songs as drafts until all relavant info is included. It sucks to exploit music with loose endsshellie
- Will there be a client side login that accesses these artist catelogs (with song, info and splits) for the purposes of browsing their music for licensing?shellie
- If so make sure there's a place to submit song key, genre, and searchable keywords per song. Music supervisors love that shit.shellie
- Email me if you want help writing that pitch deck. Ive worked at labels almost all my life. If they know what's good for them they should spend 50-60k buildingshellie
- A useful tool that will save them man hours and make their catelog insanely searchable and generate money too.shellie
- Also they should store relevant signed split agreements and sample clearances.shellie
- I have an example of a master split sheet but there's definately some tables I would add, if they're going to go through the trouble.shellie
- need ur email shellie...arent you in LA ?pockets
- Shhelie at about dot me. I live in nyc now. But I'll be in LA on sat - 27th.shellie
- Whoops typo. Shellie at about dot me. damn i have a headache.shellie
- shellie brings it home :)Gnash
- bruh do you have a day job? Drop me that line and I'll give you my number.shellie
- sentpockets
- mg330
Has anyone ever had the following problem occur?
On one of my sites, when I try to update any plugin, I get an internal server error, and the site goes into maintenance mode, and I'm unable to get out of it unless I go into the file system and delete the maintenance file. I have debugging turned on, but nothing is coming up.
There are two related error log messages I keep seeing:
[05-Dec-2016 17:35:53 UTC] PHP Fatal error: Maximum execution time of 30 seconds exceeded in url.com/wp-content/plugins/bette... on line 524
[29-Nov-2016 19:47:18 UTC] PHP Warning: An unexpected error occurred. Something may be wrong with WordPress.org or this server’s configuration. If you continue to have problems, please try the <a href="https://wordpress.org/support/">support forums</a>. (WordPress could not establish a secure connection to WordPress.org. Please contact your server administrator.) in url.com/wp-includes/update.php on line 306
I can't figure out how to get these plugins to update. Any ideas?
- Have you tried (temporarily) turning off iThemes Security, and seeing if the problem still occurs?Nathan_Adams
- Tried that, didn't work. Did a little looking around and updating execution timeout in php.ini did the trick.mg33
- Host has been screwing up lately, server issues. Got to be the case and needed more time for updates to process I guess.mg33
- it's a common issue, unfortunately there are some factors what affect the update run time, and the most common error is that the php exectimeout is to low (30s)sted
- slinky0
i need some recommendations for hosting companies that do really well with WordPress sites... right now we have client site set up on SiteGround.com and not too happy with how slow server has become and their support is not that great.
- fast, backups, but not cheap
https://mediatemple.…moIdero - I use itmoIdero
- yup I use (mt)dbloc
- I hear WP Engine is gooddbloc
- SiteGround geez those are some next level scumbags... 1and1 lol :) and good luck moving the sites...sted
- Sted, have personal experience with siteground?slinky
- wp and sharedhosting, and both suck. don't know what network connection they have but if you don't use cloudflarecdn it's like using a hosting in australiasted
- and if you registered a domain @ shitground be prepared that they will do almost everything to keep you as clientsted
- we have a couple hundred sites on getflywheel.com I wrote in a different thread some more details about them.Mattjanz3n
- I still use MT for all my sites, never have issues...dconstrukt
- I like FlyWheel's websitedbloc
- fast, backups, but not cheap
- dconstrukt0
curious if anyone's tried this plugin... looks pretty cool.
- Looks like it would add a ton of bloat to your site.noneck
- oey0
Hi,
was asked by a housemate of mine if I had any interest to make the web page for the Theater Academy she's working for.
They already have a page made with Wordpress and would like to continue to have it in Wordpress because they want to update it themselves.
Actually she had asked me before if I would recommend any other CMS instead of Wordpress and I replied that for what she was describing there was no alternative to it.
What they would like to do is to update the page with past events, announce future events, update photos, update info for courses, blog entries, online contact, forms...everything they want to do by themselves.
Easy to use and reliable.
Thing is that I never did so from scratch, it would be my first serious job and they just quit on a webdesigner who was working for them and he has like 20 years of experience.
It wasn't working for them and they need someone that can do what they need, something that for me seems more that I can immediately offer specially cause they need it now.
They want to change what they have which for them is sort of okay in looks but not okay for them to use.
They would have something totally new.
I'm checking how I could possibly approach this.
Should I use a theme?
Is it lazy?
Do it from scratch with HTML/CSS and JS?Should I transfer the domain to my server and have it there?
I could I use all the pages they have with the events and photos into a new webpage and so on...I just finished my training and seems a good opportunity.
I did some minor things for friends in Wordpress.I think I should take the gig but would like to ask you waht kind of advice you can give me in matters of method and approach.
I don't have a clue how long this can take and how I could make a deal and how much to charge as well.
I live in Germany by the way and I'm happy with all the input I can get to be able to go for it!
- this job sounds perfect for a theme, I presume there is little budget. If you use a theme though be wary of complex all singing ones - they tend to be harderfadein11
- to customise as the code can be quite complex. 'Responsive' is a good basic starting point theme that is v.easy to work out.fadein11
- I don't normally use themes if budget allows but have worked on similar projects to this many times and sometimes starting with a basic theme will enable you tofadein11
- make some money and if you use a basic one you can make it look however you like. Add a slider, galleries etc... if that is what they want.fadein11
- No need to transfer to your server if they are happy with what they have - just get full control panel access to their hosting package.fadein11
- wow fadein11!! i read your comment before in some thread it would be lazy. I thank you very much for your input!!oey
- Concrete5 is an excellent alternative to Wordpress. It's all I use. I hate Wordpress.ESKEMA
- ok.sted
- If you're not sure because you've never done it, try it on your own first before committing. Take a weekend and hack something together to be suremonNom
- Better to be honest than to over promise and under deliver.monNom
- Thanks ESKEMA gonna check that. Client wants Wordpress though.oey
- thanks monNom really good suggestion. she knows me and we talked a bit and obviously I'm gonna be fully honest about it.oey
- Theme that uses calendar pro pluginHayoth
- calendar pro will work with any theme.fadein11
- or event manager - loads of options for the events... if you need to keep it simple just create categories for posts for future, current, past events etc. justfadein11
- keep things simple if little budget. underpromise and overdeliver if possible always.fadein11
- ha just read nomoms comment - totally. especially on little jobs like this - can end up being real losers if not careful.fadein11
- Create a detailed statement of work (SOW) detailing all project spects, rounds of revision on wireframes, design, dev, include budget & scheduleshellie
- Client deliverables & ur deliverables. Sign prior 2 start. Work off what your statement of work reads. Charge for anything out of scope as chang ordershellie
- I'm doing a project exactly like this for an interior designer. Wordpress cos they don't currently have any CMS and basic theme altered.shellie
- All their inspiration is competitor sites i know are built on wordpress themes. No need to totally reinvent the wheel if that's what they want.shellie
- Good luck, OeyGnash
- thanks you people!!! I will talk with my housemate, remind you that I have 70, and ask for her to draw a list of what they want.oey
- check it and then meet to discuss. for them also to show me what's not working and how they would it like to be working.oey
- really good advices. I'm really inclined to do it. but maybe have to convince them to invest in a theme and some plugins. all depends how much money per yearoey
- ...and all the functionalities they want. lets see how it works how with the meetings and I'll keep you posted!oey
- thanks again!oey
- Themes and plugins cost v.little so not really any investment. Just build the small cost into your quote.fadein11
- RW0
Anyone know of a WP theme that allows a simple large logo mid screen, with full screen BG image and then some social links underneath?
- Like a web page, you mean?detritus
- I guess... except that I need some WP functionality like Ecwid shop etc. Just want a theme that allows a Bg image and large logo overlay and social linksRW
- look up holding page templates on themeforest.commicrokorg
- Thanks will take a look now :)RW
- sounds like a simple splash page?pockets
- coming soon plugin with custom pagepockets
- this one is just perfect:
https://wordpress.or…sted - make your own :)dconstrukt
- microkorg0
To AKISMET or not to AKISMET?
That is the question!Is Akismet the best choice for helping to protect a wordpress based site?
Wordpress sites seem to be an easy target for hacking, spamming etc as once you've found a key to one site then you can perhaps get into a lot more.
Are there any other back door locks to be bolting on?
- remove admin logins, make sure the db suffix isnt wp_, install wordfence and securi, akismet couldnt hurt either..heard negatives about the 2 plugins i just...pockets
- mentioned but i think they are decentpockets
- Something like 70% of hacked installs are compromised because of out of date wp core or plugins. Updating your site is a huge security task.noneck
- ithemes security is solid, i use it on all my wp sites.moldero
- good wp hosts will give you backups for rollback, that's great too if all else failsmoldero
- Askimet is a spam prevention tool not a security plugin.fadein11
- by remove admin logins i take it you mean remove the login with "admin" as the username?microkorg
- it just helps prevent spam comments. you need to keep up[dating everything ASAP, thats how they get in ,with old stuff they find vulnerabilities in.dconstrukt