Hot answers tagged

18

READ FIRST: Payment Card Industry Data Security Standard Do you really looked over all risks of this? The field encryption is not what you need to worry about in this case. I don't even want to advise something about encryption, because I feeling really bad even about this idea. It's no good solution to keep CC info secure enough this way . To keep such ...


13

You can detect EE by couple parameters like form uniq for EE names/hidden inputs fields, category short names, page count segment, ACT segment or cookies prefix. Looks like BuiltWith is looking on cookies and if it see exp_ prefix (default EE prefix) - detected EE Set-Cookie:exp_tracker=a%3A1%3A%7Bi%3A0%3Bs%3A5%3A%22index%22%3B%7D; path=/ Set-Cookie:...


13

DO NOT STORE FULL CREDIT CARD INFO ON YOUR OWN SERVER. Even if encrypted, storing full credit card data on your own server is generally a very bad idea due to the security and legal ramifications should your website/database/server ever be compromised. Many places store the last four digits of the credit card on their server for quick access or ease of ...


12

I'll attempt to keep this answer opinion free! Your first stop should be the EE3 changelog, and also catching up on the EllisLab blog over the past 6 months. But you'll also need to look at the EE2 changelog to see all the changes since your version that are also included in EE3. The main changes are the infrastructure and Control Panel but it's where the ...


7

Here's a no add-on way of doing this. I'm assuming you're not trying to get pagination going. That would change things. {if segment_2 == ""}option A embed or direct code{/if} {if segment_2 != ""} {exp:channel:entries channel="products" url_title="{segment_2}" require_entry="yes" ... } option B embed passing all variables necessary - or just put code ...


7

You will get that error if you have secure forms enabled, and you submit a form without including a valid XID in the post. More here: http://ellislab.com/blog/entry/putting-the-secure-in-secure-mode-forms Add this to your form: <input type="hidden" name="XID" value="{XID_HASH}"> You can disable secure forms in your config, although this is not ...


7

Based on @Max Lazar's comment I was looking over our "logout" code vs. the code given in EE's documentation and I noticed this difference, we use this code: Log Out, but the docs say to use {path='logout'}. Does it matter? I solved the mystery. The question I made above ^^^ was key and I probably should have just tried it from the get go. Turns out it ...


7

I assume that EE's native file upload functions use the Upload class, but what exactly does the Upload class do to validate and sanitize? Does it check MIME type using some sort of actual file analysis, or does it simply rely on what the browser reads it as? The Upload class uses the $_FILES array and it does use $_FILES[]['type'], but we do some ...


7

Just to clarify, we definitely use a forked version of CI with security holes patched as we find them. We also apply any security patches to the public version of CodeIgniter. Don't update what's there as that would cause compatibility issues.


6

The grid field is a looping field, so if the field is in fact called beneficiaries, you should have: {beneficiaries} {beneficiaries:total_rows} {beneficiaries:field_total_rows} {/beneficiaries}


6

I think the closest you'll get is using the Henshu add-on, from Zenbu Studio. It's basically designed to implement bulk/inline editing in the edit entries list.


6

EllisLab has forked the official CodeIgniter version and are using their own internal one. I highly doubt you can replace this with the official one.


6

open file /system/expressionengine/third_party/ext.sh_member_group_tabs.php and change line 270: if (APP_VER >= '2.6.0') to if (version_compare(APP_VER, '2.6.0', '>=')) it is also needs to make search & replace for APP_VER >= '2.6.0' & APP_VER >= '2.8' and replace it with version_compare(APP_VER, '2.6.0', '>=') & version_compare(...


5

No ExpressionEngine isn't dead or abandoned, although it seems to have had a rocky road in the past year or so with some long term bugs not getting resolved, but it's still a strong commercial option. There's quite a few users who have voiced opinions (quite rightly), because of the direction and progress that EE has taken, that doesn't make it a bad CMS and ...


5

This is as a result of the Strict URLs feature being enabled by default in EE2.6+ (previously it was opt-in, now it's opt-out). If you want the old behaviour back you can change it in Global Template Preferences


5

This happens because of the "else". If you use else, the conditional became advanced and it will be parsed after the modules. Try this: {if segment_3 != ''} {exp:query sql="SELECT a.cat_id, a.parent_id, b.cat_name FROM exp_categories a, exp_categories b WHERE a.cat_url_title = '{segment_3}' AND b.cat_url_title = '{segment_2}'"} {/if} {if segment_3 ==''} ...


5

Looks like you need Multiple Site Manager. But, if all your subdomains are part of the same website, there's a technique I use on multiple language websites that can help you. You have two possible setups. On the first one, your directories need to follow this structure: /system /domain.com /domain.com/images /domain.com/themes /domain.com/index.php /...


5

The {options:field_name} tag pair is actually a Safecracker tag, which only works with Field Pack 1.x out of the box. You can add Field Pack 2.x support by opening up system/expressionengine/config/config.php and adding these lines: $config['safecracker_option_fields'][] = 'fieldpack_checkboxes'; $config['safecracker_option_fields'][] = '...


5

Good on you for writing your first plugin. Use this as a starting point for your plugins, quick, easy and avoids missing something. pkg.io Create it, download, unzip and upload to third party folder, just like any other add on. Once you can 'see' it in the plugin/module list you're all set to add your code.


5

I use the Sitemap-Module V 2.6 from PutYourLightsOn. This caused the error. When I disable the module all is fine. The most recent version of this module is 2.6.2. I installed it, but the problem persisted. The message Message: Undefined index: field_id_sitemap__ping_sitemap gave me the hint to try to disable the sitemap module. I will ask the programmer ...


5

If you have MySQL access, you can run the following query: ALTER TABLE exp_channel_titles AUTO_INCREMENT = 1 You can also run this command from the CP using the Database Query Form under Tools > Data > SQL Manager > Database Query Form


5

I've seen this before as well and it seems to be something that can happen with Media Temple hosting when FastCGI is enabled. It looks like you're using MediaTemple so I'm guessing that's your issue. There are a couple threads in the EE Forums about this: Control Panel Giving JSON Responses in the Browser on Content Edit / Update Error When Submitting ...


5

Unfortunately, there wasn't a good answer in getting this to work with Matrix. Everything I tried still resulted in a page load time of 14.6 - 17.2 seconds. I worked with EllisLab all day Friday from like 2-9. We spent the day debugging templates, analyzing output, checking for red flags, etc.. I completely rebuilt the template using the native Grid field ...


5

This one's not worth tracking down the root of to be honest -- this is most definitely not what embeds are for, and I'm not surprised you're hitting an error when trying to load this giant hunk of PHP as an embed. My advice is to work with ExpressionEngine, not against it by cramming dozens of lines of PHP into a template. I'd look at moving your custom ...


5

Isn't this really an SQL or PHP question? I think you'd need to split the pipe delimited data up (say by using explode() to create an array) and then loop through it outputting a fragment of SQL each time and build your query up. SQL syntax would be (not the full query); WHERE parent_id = 4 OR parent_id = 7 ORDER BY Or: WHERE parent_id IN (4,7)


5

My answer assumes you are for example trying to pull channel data manually. I'm not entirely sure of the OOP / Foreign key part of the question. First you need to understand the exp_channel_titles and exp_channel_data tables. I will only go into the information that's relevant for basic database interaction. exp_channel_titles contains the basic entry ...


5

You can add disable_form="yes" to the {exp:store:product} tag to disable the creation of the form. (Docs.)


5

i've had the same thing today. in my case it was related to a php script in the templates that was trying to get images from flickr over the old api. However i have seen people mentioning it can also be caching related. So first thing would be to clear all caches


5

Well for your first question, Yes you can just copy the site through FTP, upload database, change path and start working. (Only thing you should care about is your PHP version for new server. Make sure you have PHP 5 instead of PHP 7. Reason behind this is EE2 is not compatible with PHP7) For your second question, Yes you can have as many test environment ...


5

If you know how to create a production or development server for EE2, you can create a staging server... if you don't know how to create a development or production server then go find that out first. The challenge with database driven CMS's however is not the servers, it is the database that drives the CMS. Before you can push changes that include any ...


Only top voted, non community-wiki answers of a minimum length are eligible