While it is outside the scope of plugin support to get deep into the use of MySQL to handle the querying of user data, there are some basic concepts that can be presented to help you build the applications that you need to handle users. And the fact that WP-Members relies on the existing WordPress database schema means that you can find many related articles and tutorials on the web.
Continue Reading →Uncategorized
Wordfence announces critical vulnerability in Litespeed Cache
Recently, the Wordfence Threat Intelligence team announce a critical vulnerability in the Litespeed Cache plugin. This is a privilege escalation vulnerability, which means that an attacker who gains access as a low level user can exploit the vulnerability to gain admin rights on an affected site.
I am pointing this out because I know a lot of WP-Members’ users also utilize cache plugins, which can include Litespeed Cache. If you’re one of those users, please make sure that you update your version of Litespeed cache to a version higher than 6.3.0.1 as all other versions are vulnerable.
You can read more about this reported vulnerability here:
WP-Members PayPal Subscriptions 0.9.9
The WP-Members PayPal Subscriptions extension version 0.9.9 has been released. This update contains some important changes from the previous production version. All users should update.
Continue Reading →WP-Members Advanced Options 2.3.0
WP-Members Advanced Options version 2.3.0 was released today. This version includes some updates, some improvements, and a new feature.
Continue Reading →WP-Members User Tracking 1.4.5
The User Tracking extension has received an update and this was pushed out to production this morning. The new version is 1.4.5 and it includes a number of updates.
- Fixes a bug that causes an invalid page link when clicking a individual user. Previous versions were pointing to users.php. This version corrects it to index.php. All previous versions have this bug and should update.
- Updates to load default settings if no settings are loaded. This is particularly for initial activation and setup in production systems where debugging is enabled. If no previous settings were saved, it would display undefined variable notices. This is more of an annoyance than a bug, but never-the-less, it is corrected in this update.
- Updates to replace
wpmem_create_formfield()
withwpmem_form_field()
. The former is an older, obsolete function in WP-Members core. That function will be completely obsolete in future versions of WP-Members starting with 3.5.0, which is due out this month. You’ll need to update User Tracking to 1.4.5 to be compatible with WP-Members 3.5.0 going forward. (It will remain compatible with earlier versions of WP-Members).