Recently Browsing 0 members
No registered users viewing this page.
By Kiwi Chris
I have a role that has page edit, view, and clone permissions on a specific template.
If a page using the template is locked by a user in a role with lock/unlock permissions on the template , the only button alongside it in the page tree is view, for users who don't have lock/unlock permissions.
If however, I also give the role page-lock permission on the template, they then get additional buttons, edit, copy, and unlock.
I don't actually want to give this role unlock permissions, but I do want the copy (clone) button to display alongside the page in the page tree.
Elsewhere, I've discussed how I've worked out how to create a hook to unlock the copy, but I want to keep the original page so a user without lock permissions can't unlock from the page tree it to make changes.
Question: What method should I hook into to intercept any attempt to change the lock status?
Hello forum, this is my first security related post, so I'm a bit of a newbie.
I understand that when I have direct front-input from user I should sanitize the input, but how about when I use a secret key for showing a API for a third-party supplier? Should I sanitize the input->get() key?
I've tested this issue and I tried ?key=<?php echo $page->field; ?> And without adding any sanitization it comes back: /?key=<?php%20echo%20$page->field;%20?>
So can I rely on this, or should I still use $sanitizer just in case?
Thanks for the help!
I try to add page-edit-own and page-delete-own permissions, but it's strange...
If a add the custom permissions it looks like both are children of page-edit respectively page-delete. I played with added / revoked permissions, but I can't get it work, that a user of a role just can delete own content.
First the user can't delete any content and now the user can delete own and foreign pages 🤪
Is there a tutorial to learn more about the PW permissions?
Or do I have to rename the permissions to page-own-edit and page-own-delete to be independent from page-edit and page-delete?
By angelo, italy
I've always used WP but I want to swtich to PW. I'm not sure ....
I'd like to know if it's possible to create a website for an online photo contest.
The participants of the competition could create their own account, in which they upload their photos. The photos uploaded remain visible only to themselves and the judges.
From their account they can make the "entrance fee" payment.
The judges of the competition can create their own account... entering they see the photos of the participants and vote photos
At the main page I imagine the title of the competition, a button to read the regulation, and a button to register.
The website should be in Italian and English.