Stay N' Alive - Latest Comments in New FBFoundations Features and Updates

Re: New FBFoundations Features and Updates

David Anthony Orr — Fri, 13 Nov 2009 19:37:41 -0000

same with me.. absolutely nothing happens.

Re: New FBFoundations Features and Updates

Jesse Stay — Mon, 09 Nov 2009 04:21:09 -0000

Bruno, no PHP - it's just CSS. You should just be able to edit the
style.css file in your theme's main directory and set the style for the
share button accordingly. I haven't looked at it enough to be able to say
which class or id you need to change though.

Re: New FBFoundations Features and Updates

Bruno Amaral — Wed, 04 Nov 2009 18:21:39 -0000

I am going to take a wild guess and say it's a theme issue and not necessarily a problem with the plugin. Jesse, what would be the php code to include in the theme file?

Re: New FBFoundations Features and Updates

Jesse Stay — Fri, 30 Oct 2009 14:45:52 -0000

Are you seeing the login buttons in the upper-right and above the comments
at all? Are there any Javascript errors being produced if not?

Re: New FBFoundations Features and Updates

Jesse Stay — Fri, 30 Oct 2009 14:36:14 -0000

Thanks Otto - I'll look to getting this stuff added. I like the popup, so
not sure that will ever get removed, but it is off by default.

Re: New FBFoundations Features and Updates

alex — Tue, 27 Oct 2009 21:39:25 -0000

I installed the plugin,
added my api key

copy codes from FB

nothing happens

Re: New FBFoundations Features and Updates

Otto — Tue, 27 Oct 2009 10:30:26 -0000

Thoughts:

You don't need to include the jquery js file in the plugin any more, since you're using the enqueue script method.

Your options subpanel still has major security issues. Basically, without nonce or user cap checking, somebody could modify your settings. Since the api_key isn't validated and output on the page itself, you have a cross-site-scripting vulnerability. It would be fairly easy to hack your site with this hole, all somebody would need is a valid login to the site (not an admin login).

If somebody does use the popup feature, it always pops up for people who disable cookies by default (or who force them to be session only, which is pretty common place). Kind of misfeature, I feel.

The title and description thing is neat, however it's possible that some sites already have this information. Should really be optional, for those two at least. The medium and image source stuff is fine, can't see those interfering much.

WordPress 2.9 includes new ways of specifying video includes, which end up using embeds. It might be worthwhile to add support for video_src too.