Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

ACF Plugin no longer available on WordPress.org

advancedcustomfields.com

Post reply on HN
Print view View original

101–110 of 151 posts

Re: ACF Plugin no longer available on WordPress.org

#101

Post by mthoms »

sgdfhijfgsdfgds wrote: post #55
didgeoridoo wrote: post #20

This is particularly bananas as ACF is basically table stakes for doing anything beyond blogging. I’d assume most websites that make actual money are thoroughly dependent on it. To twist the knife on a personal spat, Mullenweg just blew up uncountable businesses on a double-holiday weekend. At this point, seriously, fuck that guy.

> This is particularly bananas as ACF is basically table stakes for doing anything beyond blogging. Not sure about this. I'd assume most Wordpress sites that make actual money are dependent on WooCommerce and Easy Digital Downloads, and maybe Gravity Forms/WP Forms for member subscriptions. None of these are reliant on ACF, and there's any number of WP plugins like this that do the whole job of some website niche or…

Counterpoint. Just have a look how many times ACF is mentioned (for example) in this thread [0]. ACF is massively popular. The fact you've never used it, for as long as you've been involved, is extraordinarily rare. I'm really surprised to hear you say that (but good for you if you've got the time and chops to never resort to it! That's awesome).

https://www.reddit.com/r/Wordpress/comments/1cc0aor/what_are...

I might be wrong, but as best I can tell from some quick searching, ACF is the most mentioned.

Re: ACF Plugin no longer available on WordPress.org

#102

Post by wpinsider »

system2 wrote: post #97
luckylion wrote: post #75

Earlier quoted context omitted.

Right, but why did that break? As far as I can tell that part hasn't been touched in the hostile takeover. https://plugins.trac.wordpress.org/browser/advanced-custom-f... It's still $this->add_field_filter( 'acf/format_value', array( $this, 'format_value' ), 10, 4 ); The file was last changed 7 weeks ago by deliciousbrains/wpengine and specifically the filter part is the same on their github.

Whatever they did, it didn't work. Maybe we are over-custimizing it but it is not unheard of to use ACF with multiple other plugins such as WP Code and custom scripts.

Strongly recommend installing the genuine ACF from www.advancedcustomfields.com - the WP Engine and ACF teams have provided timely updates (even fixed Automattic’s spurious security issue in less than a day) and have uploaded a permanent fix to MM’s malicious hack of ACF to create SCF.

Re: ACF Plugin no longer available on WordPress.org

#103

Post by ChallengeEup237 »

batuhanicoz wrote: post #99
system2 wrote: post #97

Earlier quoted context omitted.

Whatever they did, it didn't work. Maybe we are over-custimizing it but it is not unheard of to use ACF with multiple other plugins such as WP Code and custom scripts.

The initial release of SCF only applied security fixes, changed the plugin name and removed upsells. I don't think there is any change that might cause the issue you are having. If you can share the problem you are experiencing on Making WordPress Slack (#secure-custom-fields channel), I'm sure relevant people would love to help out ASAP. I work at Automattic and I can get you in touch with people from WordPress.org…

So you guys don't get sued any further for essentially hijacking a distribution channel and pushing an unauthorized version?

If I were an employee of A8C I wouldn't be touching this code with a ten foot pole - employees can still be found guilty of criminal wrongdoing even if their employer told them to do something.

Re: ACF Plugin no longer available on WordPress.org

#104

Post by that_guy_iain »

maxbond wrote: post #18

To me this is indistinguishable from an account takeover attack executed by an insider. I doubt any prosecutor would be interested, but to my eyes WordPress.org has violated the CFAA by accessing WordPress instances outside the bounds of their authorization. They were authorized to modify WordPress instances in ways ACF prescribed, not in ways of their own choosing. I'm not saying I'd like to see Mullenweg in chains,…

Well, they're literally getting sued with one of the counts being computer fraud so it's going to end up in front of a judge at some point.

Re: ACF Plugin no longer available on WordPress.org

#105

Post by jantissler »

kyriakos wrote: post #66

This would be the same as Google replacing Spotify with Youtube Music on Play Store and pushing Youtube Music in its place on all Android devices. Its insane.

Even worse: It would be Google taking Spotify‘s app and renaming it YouTube Music. That’s what Matt did. They didn’t develop a new plugin and put it in place of ACF. They just took the existing one and pretend it’s theirs. It’s horrifying. How am I supposed to trust a system that’s governed by a single person that thinks this is okay?

Re: ACF Plugin no longer available on WordPress.org

#106

Post by maxbond »

that_guy_iain wrote: post #104
maxbond wrote: post #18

To me this is indistinguishable from an account takeover attack executed by an insider. I doubt any prosecutor would be interested, but to my eyes WordPress.org has violated the CFAA by accessing WordPress instances outside the bounds of their authorization. They were authorized to modify WordPress instances in ways ACF prescribed, not in ways of their own choosing. I'm not saying I'd like to see Mullenweg in chains,…

Well, they're literally getting sued with one of the counts being computer fraud so it's going to end up in front of a judge at some point.

I doubt the case will make it to trial. I think they'll be settling in the next few weeks. But I did double check, and you're right of course, the complaint does allege they violated the CFAA when they cut off access from WP.org infrastructure.

Re: ACF Plugin no longer available on WordPress.org

#107

Post by foosantos »

system2 wrote: post #9

Oh god, this gave me a minor heart attack. We are using over 20 ACF fields for 150+ sites. I thought it was completely out of the WordPress ecosystem. I am glad they have the zip download and continuing auto updates. EDIT: I confirm our ACF plugins on sites are all switched to secure custom fields. This is so shady, it broke our snippets because we are using prepend and append texts to wrap our field values. Now they…

I've been monitoring the SCF forums as well on WPorg, and there have been no reports of issues since moving to SCF.

It would be fantastic if people could open a topic there or a thread on Slack if they face any issues.

Re: ACF Plugin no longer available on WordPress.org

#108

Post by foosantos »

foosantos wrote: post #107
system2 wrote: post #9

Oh god, this gave me a minor heart attack. We are using over 20 ACF fields for 150+ sites. I thought it was completely out of the WordPress ecosystem. I am glad they have the zip download and continuing auto updates. EDIT: I confirm our ACF plugins on sites are all switched to secure custom fields. This is so shady, it broke our snippets because we are using prepend and append texts to wrap our field values. Now they…

I've been monitoring the SCF forums as well on WPorg, and there have been no reports of issues since moving to SCF. It would be fantastic if people could open a topic there or a thread on Slack if they face any issues.

https://wordpress.org/support/plugin/advanced-custom-fields/

Re: ACF Plugin no longer available on WordPress.org

#109

Post by photomatt »

n3storm wrote: post #33
system2 wrote: post #9

Oh god, this gave me a minor heart attack. We are using over 20 ACF fields for 150+ sites. I thought it was completely out of the WordPress ecosystem. I am glad they have the zip download and continuing auto updates. EDIT: I confirm our ACF plugins on sites are all switched to secure custom fields. This is so shady, it broke our snippets because we are using prepend and append texts to wrap our field values. Now they…

pass the bill to matt when you finish fixing those broken wp.

I don't think anything about our update could cause the issues he describes and we've had no other reports, this is the only claim on the internet, and doesn't include enough technical details to tell if it's an actual bug or not.

If it's a bug, our bad and we'll fix ASAP. If it's a bug, it's a very rare one. There have been 225k downloads of the SCF plugin in the past 24 hours, implying a lot of updates. I would estimate at least 60% of the sites with auto-upgrade on and using .org for updates have done so already. https://wordpress.org/plugins/advanced-custom-fields/advance...

That said, I'm happy to pay system2 whatever he thinks his time was "spent" on a Sunday is worth. Just let me know an amount and where to send. You can contact me here: https://ma.tt/contact/ .

Re: ACF Plugin no longer available on WordPress.org

#110

Post by hashim-warren »

photomatt wrote: post #109
n3storm wrote: post #33

Earlier quoted context omitted.

pass the bill to matt when you finish fixing those broken wp.

I don't think anything about our update could cause the issues he describes and we've had no other reports, this is the only claim on the internet, and doesn't include enough technical details to tell if it's an actual bug or not. If it's a bug, our bad and we'll fix ASAP. If it's a bug, it's a very rare one. There have been 225k downloads of the SCF plugin in the past 24 hours, implying a lot of updates. I would est…

Matt, you say that you've had no other reports and this is the only claim on the Internet.

That's not true. You have users on the support forums reporting issues with SCF.

"this has caused an incident requiring unschedule maintenance on a weekend. I use this plugin on a couple hundred sites I help maintain, so this has been a very bad experience "

https://wordpress.org/support/topic/plugin-hijacked-on-weeke...

Post reply on HN