BulletProof Security Forum

The CPT was created via a simple plugin I created.  The fields for each CPT were created via ‘ACF’ plugin.  The data is submitted front-end by a ‘Formidable Forms’ form.  Upon submission, the post is set to draft status. The title and url are then generated via code in functions.php when the post is approved and published. I know that when you save/update a post it passes thru the code in functions.php (to set the title/url) because if you change anything it will change the title or url. I was wondering now if this had any bearing – hope not because the site is a directory site which requires front-end submission (and editing) of these posts.

To register a cpt this is in a simple plugin:

// register custom post type for catteries
function bcats_create_post_type() {
// set up labels
$labels = array(
'name' => 'Catteries',
'singular_name' => 'Cattery',
'add_new' => 'Add New Cattery',
'add_new_item' => 'Add New Cattery',
'edit_item' => 'Edit Cattery',
'new_item' => 'New Cattery',
'all_items' => 'All Catteries',
'view_item' => 'View Cattery',
'search_items' => 'Search Cattery',
'not_found' =>  'No Catteries Found',
'not_found_in_trash' => 'No Catteries found in Trash',
'parent_item_colon' => '',
'menu_name' => 'Catteries',
);
//register post type
register_post_type( 'Cattery', array(
'labels' => $labels,
'has_archive' => true,
'public' => true,
'supports' => array( 'title', 'editor', 'author', 'thumbnail'),
'taxonomies' => array( 'cattcounty','cattarea','post_tag' ),
'exclude_from_search' => false,
'capability_type' => 'post',
'rewrite' => array( 'slug' => 'cattery' ),
)
);
}
add_action( 'init', 'bcats_create_post_type' );
// register custom post type for catteries - end

 

There is also code to create the necessary taxonomies:

// Register COUNTY TAXONOMY FOR Cattery Posts - Name cattcounty
if ( ! function_exists( 'cattcounty_taxonomy' ) ) {
function cattcounty_taxonomy() {
$labels = array(
'name'                       => 'CattCounties',
'singular_name'              => 'CattCounty',
'menu_name'                  => 'CattCounty',
'all_items'                  => 'All CattCounties',
'new_item_name'              => 'New CattCounty Name',
'add_new_item'               => 'Add New CattCounty',
'edit_item'                  => 'Edit CattCounty',
'update_item'                => 'Update CattCounty',
'view_item'                  => 'View CattCounty',
'add_or_remove_items'        => 'Add or remove CattCounty',
'items_list'                 => 'CattCounty list',
'items_list_navigation'      => 'Items list navigation',
);
$args = array(
'labels'                     => $labels,
'hierarchical'               => true,
'public'                     => true,
'show_ui'                    => true,
'show_admin_column'          => true,
'show_in_nav_menus'          => true,
'show_tagcloud'              => true,
'query_var'                  => true,
'rewrite'                    => array( 'slug' => 'county-cattery' ),
);
register_taxonomy( 'cattcounty', array( 'cattery' ), $args );
}
add_action( 'init', 'cattcounty_taxonomy', 0 );
}

 

Once the post is saved, the title and url are created with this in functions.php
// should create custom POST TITLE FOR CATTERY from name and postcode
function custom_post_title_generator( $post_id ) {
$my_post = array();
$my_post['ID'] = $post_id;
$cattname    = get_field('short_catteryname');
$postal    = get_field('catt_full_postcode');
$fullcattname  = get_field('full_catteryname');
$slugtitle  = $cattname . ' - ' . $postal;
$title     = $fullcattname;
$slug    = sanitize_title( $slugtitle );
if ( get_post_type() == 'cattery' ) {
$my_post['post_title'] = $title;
$my_post['post_name'] = $slug;
}
// unhook this function so it doesn't loop infinitely
remove_action( 'acf/save_post', 'custom_post_title_generator', 20 );
// Update the post into the database
wp_update_post( $my_post );
// added this line to help try make it save properly - not sure if it helps - only the line and not the bracket below
add_action('acf/save_post', 'custom_post_title_generator', 20);
}
// run after ACF saves the $_POST['fields'] data
add_action('acf/save_post', 'custom_post_title_generator', 20);
// should create custom POST TITLE FOR CATTERY from name and postcode - END

Now, I have no idea if any of this relates to what your plugin does with htaccess, obviously. In terms of plugins, I had to add 3 whitelist rules for ‘hidden plugins’ which were (1 post-types) the cpt creation plugin, (2 britcats-google etc) google analytics code and (3 britcats-plugin) another plugin which from memory was used to specify who could modify certain posts.

The whitelist code (just copied and pasted from bps) is britcats-google-analytics.php, britcats-plugin.php, post-types.php. I can’t think what else might be useful. My hosting company just changed the memory limits to 512k from 256k but it hasn’t made any difference.

I just looked in cpanel and can see hundreds of errors. I’ve edited the domain name and the server ip numbers. I’m sure many are repeats but they all seem so similar it’s hard to tell.

[Sat Aug 27 16:02:08.559131 2016] [authz_core:error] [pid 3052] [client xx.xx.xx.xx:43547] AH01630: client denied by server configuration: /home/domainname/public_html/cats/wp-content/plugins/bulletproof-security/admin/mod-test/mod_authz_core-nc-denied.png, referer: https://www.domain.com/cats/wp-content/plugins/bulletproof-security/admin/mod-test/mod_authz_core-nc-denied.png
[Sat Aug 27 16:02:06.502608 2016] [access_compat:error] [pid 28818] [client xx.xx.xx.xx:43544] AH01797: client denied by server configuration: /home/domainname/public_html/cats/wp-content/plugins/bulletproof-security/admin/mod-test/mod_access_compat-od-nc-denied.png, referer: https://www.domain.com/cats/wp-content/plugins/bulletproof-security/admin/mod-test/mod_access_compat-od-nc-denied.png