Update: I got a fast accurate response below, so thanks, & this is closed.

I did look the instructions up online, and the article is from August 2026, so I don't know if it's my theme or what (Generate Press), but under appearance, there is no Reading under Settings.

So

I had it set correctly, but someone installed a plugin on my site to add a sort of store type thing, and now he set the items for sale on the index page and I want my original page back.

Why would the "Reading" be missing from the Settings area?

Thanks

Hello Everyone,

I built a free WordPress plugin for selling event tickets and checking guests in at the door. I'm the author.

Events and Tickets with QR Check-in — GPLv2 on WordPress.org. No paid tier, no per-ticket fee, no account to create with me.

What it actually does:

- Sets your event up by asking you questions — what kind of night, what the room looks like, how you get paid — instead of dropping you on a settings page.

- Sells the room you actually have: tables, rows or free seating, price categories and zones. A seat can't be sold twice.

- Asks for the name of every person coming. Each guest gets their own QR ticket as a PDF, by email.

- Checks people in from any phone at the door — camera, photo or keypad. A ticket works once, and a live count shows who's inside.

- A floor view keeps sold, seated and arrived apart, so you watch the room fill in real time.

- Card payments through Stripe, straight to your own account — or offline payment (bank transfer, cash) if you prefer.

- Six languages in the download: English, French, Spanish, Portuguese, German and Arabic — emails, dates and the printed ticket included, with Arabic drawn right-to-left on the ticket.

It was born in a real venue, with a real door and a real queue outside, and works just as well for dinners, concerts and conferences.

Pleas Download on : https://wordpress.org/plugins/bitforgenet-guest-tickets/

new functionalities coming soon

Thank you!

Hi everyone

I’m having an issue with my hero banner graphic on an e-commerce site built with Elementor. The top of the image (text and top section of the graphics) keeps getting cut off on tablet/desktop viewports.

Setup details:

Widget: Image Carousel inside a Flexbox Container

Original Image Size: 1920 x 850 px

Image Resolution in Elementor: Set to "Full"

What I’ve tried so far:

Set Image Fit to both Cover and Contain in the Carousel style settings.

Turned Equal Height ON in the Content tab.

Toggled Full Width ON/OFF under Image Style.

Adjusted the outer Container Min Height (tried up to 850px+).

Despite these settings, the upper part of the graphic remains cut off/cropped inside the frame.

Has anyone run into this ratio issue before? What is the best way to force the carousel frame to display the full height of the 1920x850 image without clipping the top? Or should I be using a different widget/approach for hero banners like this?

Screenshots attached showing my settings and how it currently renders. Thanks in advance for any help!

I ran a website on a .co.uk domain. I purchased the .com domain and then transferred the website over. I then let the .co.uk domain name lapse and no longer own it.

The administration email address for the .com website was for the old .co.uk email address. Is there a way to force the change on the website to the .com email address as the normal way of doing it doesn’t work as I need to confirm on the old .co.uk email address.

All and any help is greatly appreciated.

Hi everyone.

Recently I've been making all of my websites with claude. Making custom themes, building everything from scratch. The performance has been great in comparison to using elementor.

I wanted to know how other are managing, and a bit worried to know when claude is making the custom themes and mu-plugins folders, what specific security measures should I keep in mind?

We built a chat plugin for WordPress years ago. Real-time messaging between members, one-to-one and groups. Then I never released it. It sat on my drive, and every so often I'd open it, decide it wasn't ready, and close it again.

A month ago I finally committed to finishing it. I've spent the last few weeks on the boring part: rewriting the notification layer, adding moderation, fixing bugs that had been there since 2022.

And now I'm stuck on the one thing I never thought about in all those years: what to give away for free.

My last plugin's free version was too complete. People used it happily for years and never had a reason to pay. I don't want to repeat that. But a free tier nobody installs converts nobody either, and I honestly can't tell where the line is.

The specific problem: my audience is community sites, and BuddyPress already ships free 1-to-1 messaging. If my free tier is just DMs, there's no reason to install mine. Free has to clearly beat what they already have, but if it beats it by too much, nobody upgrades.

Everything it does:

One-to-one and group chat, replies, forwarding, editing, starred messages, mentions, reactions, typing indicators, read receipts, presence, images, files, video, voice messages, GIFs, archive, mute, block, conversation requests, reporting, moderation queue with strikes and bans, browser push, unread summary email, dark mode, RTL, floating widget, full-page inbox, BuddyPress integration, real-time delivery or polling with no external service.

Where I've landed so far:

* Free: groups, 1-to-1, mentions, mute, archive, starred, forwarding, images, dark mode, reporting

* Paid: real-time delivery, moderation tools, push, voice messages, reactions, editing, typing indicators

What I keep going back and forth on:

* Groups. The strongest upgrade driver, but also the only real reason to install this over BuddyPress core. Gating them feels like removing the hook.

* Reactions: They cost me nothing to run, but they're what makes a group feel alive. Paid or free?

* Moderation: I split it: collecting reports is free, acting on them is paid. Shipping a free chat with no way to report abuse didn't feel right.

* Limits instead of locks. Capping free groups at around 10 people instead of blocking them, so the wall only shows up once the community actually grows.

Which feature on that list would you actually pay for?

Plugin link: https://wordpress.org/plugins/jevshield-ai-anti-spam/ (free tier: 100 checks/month)

The problem I'm solving: most contact-form spam today isn't bots — it's human-written. 10-15 emails a day like "Dear webmaster, we sell high-DA backlinks" (each slightly reworded so keyword filters miss them), plus "your domain will be suspended in 24h" phishing scares and Bitcoin extortion demands. CAPTCHAs and Turnstile can't help — they check the visitor's browser, not the message.

So I built JevShield: instead of checking browsers, it uses AI to read the actual message and classify intent. It filters the human spam, and as a side effect scores genuine inquiries 0-100 on buying intent (budget, timeline, "book a call") so real quote requests get flagged for fast response instead of rotting in the inbox.

Works with Contact Form 7 / WPForms / Elementor / native comments. No puzzles for visitors, ever.

Genuinely want to know:
1. Is human-written form spam actually a problem for you, or do Akismet/Turnstile already cover it?
2. Would the "intent score for real leads" angle matter to you, or is pure spam-blocking enough?
3. What would make you switch from what you use now?

Happy to answer technical questions (rules-vs-AI fallback, latency, data handling — no data stored unless you opt in).

Hi all, long-time lurker here. I manage a few WordPress sites (client work + my own), and the thing that drove me insane wasn't bots — Turnstile handles those fine.
It was the human-written spam. 10–15 emails a day: "Dear webmaster, we sell high DA backlinks," each slightly reworded so keyword filters miss them. Plus the occasional "your domain will be suspended in 24h" phishing scare, and DMCA extortion attempts demanding Bitcoin. All typed by real people, all invisible to CAPTCHAs.
So I built JevShield: instead of checking the visitor's browser, it reads the actual message with an AI model and classifies the intent. It blocks the human spam, and as a side effect scores genuine inquiries 0–100 on buying intent (budget, timeline, "book a call") so real quote requests get flagged for fast response instead of rotting in the inbox.
It's on wordpress.org (jevshield-ai-anti-spam), free tier is 100 checks/month, works with Contact Form 7 / WPForms / Elementor / native comments. No puzzles for your visitors, ever.
I'm not here to sell — genuinely want to know:
1. Is human-written form spam actually a problem for you, or do Akismet/Turnstile already cover it?
2. Would the "intent score for real leads" angle matter to you, or is pure spam-blocking enough?
3. What would make you switch from what you use now?
Happy to answer technical questions (how the rules-vs-AI fallback works, latency, data handling — no data stored unless you opt in).

Hello friends,

AirTel is one of the best ISP in India. Generally, we have better speed for every site.

It's quite slow on airtel but not on Jio hotspot data.

https://preview.redd.it/ws7ykobmr0sh1.png?width=805&format=png&auto=webp&s=7a4cfb8767c90d466f710b571724cdf7e1d2f0d1

If you're on airtel, you may be facing this problem while visiting WordPress Dashboard or downloading plugins.

Jio

https://preview.redd.it/s2jj5djrt0sh1.png?width=895&format=png&auto=webp&s=7ea38fe4593e9bf71094f1f1cfed8b52b2b18be3

Slow in Asia-Pacific region

https://preview.redd.it/ia7tyt5lz1sh1.png?width=798&format=png&auto=webp&s=963ba0a9369210456a7a5fe2d9e18cb1df42ff63

Also see https://speedvitals.com/ttfb-test?result=3bP1bs6d

Thanks

I submitted my first plugin to the wordpress.org directory at the end of August and it was approved on 8 September, after five rounds. Almost none of the delay was code quality. Writing it down because most of what held me up is the kind of thing you only find out when it happens to you.

1. The name was rejected twice, and that cost the most

The first submission was auto-rejected within a second: a display name or permalink cannot begin with "wp". Fine, I renamed.

The second attempt cleared the automated scan and then a human turned it down. "Toolkit" is a generic description, and "Ultimate" is a promotional modifier rather than a distinctive identifier. Two lines in that reply were worth the whole round:

• "The absence of an exact match in the directory does not make the name distinctive." Checking that your name is free is not the test.
• "Other published plugins do not set a precedent for this submission; some were accepted under earlier standards." I had a list of near-identical names approved as recently as last year. It does not count.

What passes is a coined word or a personal/brand identifier, and it has to be at the front, not the back. I ended up inventing one. Remember that the slug is permanent while the display name is not, so keep the slug short and brandable and put the descriptive part in the name.

2. Your prefix has to be more than four characters

Mine was three. That meant renaming namespaces, constants, option names, post type slugs, hooks, script handles and every public template function. Do it before you submit. If your plugin is already out there, this is a breaking change for everyone who uses it.

A trap I hit doing that rename, and this one applies whether or not you ever submit anything: WordPress builds a submenu page's screen ID from the menu title, not the slug — sanitize_title( $menu_title ) . '_page_' . $submenu_slug. I had that prefix hardcoded in 31 comparisons. After the rename not one of them matched, so every admin screen of the plugin lost its CSS and JS. No error, no warning, php -l clean. It just looked like the styling had evaporated.

3. You can no longer ship an editor for arbitrary CSS, JavaScript or PHP

I had a code snippets feature. The reply was blunt: plugins that let users save arbitrary custom CSS, JS or PHP are not accepted, please remove it.

I asked whether a CSS-only version would be acceptable, since that is narrower than what the Customizer already offers. No, and they named the Customizer as exactly the reason CSS is covered too.

If you have that feature, plan for it not existing in your free version at all.

4. Escaping happens at the point of output, and nothing goes inline

52 notices, two patterns behind them.

Escape where you echo, not where you build. A helper that escapes attributes earlier in the chain does not count, even when it is provably safe. I annotated 105 of those in one directory and proved the rendered HTML was byte-identical before and after, which is a good way to convince yourself you did not break anything while touching a hundred files.

Every <style> and <script> goes through the enqueue chain. I argued for one exception, an engine that printed CSS on wp_head at priority 99 so user CSS would land after the theme, and I was wrong: enqueuing at priority 999 keeps exactly the same order.

Two exceptions I explained in my reply and that survived: a block render callback returning HTML the theme developer wrote themselves, and a standalone page that builds a whole document and exits, the way core's wp_die() does.

Two things I broke myself while fixing the above

• **sanitize_text_field() strips percent-encoded characters.** /caf%C3%A9/ comes back as /caf/. Harmless on REMOTE_ADDR, fatal on a URL path: a redirect or a route with a non-ASCII slug silently stops matching, and nothing errors. Use esc_url_raw() for anything that is a URL. I introduced this by following the review instruction literally instead of choosing the function that fits the value.
• Core owns the id {metabox-id}-title. It gives every metabox heading that id. My box was ultivo-seo and my own title input was ultivo-seo-title, so two elements shared an id and getElementById returned the <h2>. The character counter sat at 0/60 with text in the field, and the live preview never followed that input. It went unnoticed for months because the field right below it had no collision.

One more, if your URIs point at your own domain

If the Author URI or Plugin URI is a domain that is not obviously connected to the email you registered with, they will ask you to prove you own it. A TXT record on the root is enough. Add it next to your SPF record: a root domain can hold several TXT records, and replacing the SPF one instead of adding to it breaks your mail.

None of this is a complaint. The reviewers were right on every point except the one where I pushed back and lost, and the plugin is better for it. But if I had known the name rule and the prefix rule before submitting, I would have saved about two weeks.

The plugin was Ultivo Toolkit, if anyone wants to see what came out the other end. Not linking it, that is not what this post is for.

I wanted to share my application for WordPress on macOS. I worked on a 1.x version for a long time but decided the app should have full Gutenberg compatibility and a native macOS feel. I also decided to make the GitHub repo public if anyone had questions about the architecture/privacy. I just wanted a free, no-frills Mac app that I wanted to use for WordPress. Keep in mind the app only supports self-hosted WordPress.

https://quill.siolon.com

Wordpress is impossible to wor wit .I have contacted their"customer service AI" over and over again for the last month. My payment is up to date, but I cannot edit or change anything on my website! Is there a human being out there who can help me? It is really hurting my business.

Hello. I need some help. I use wpml the latest version (5.0.2) and i try to change some settings as it shows on the screenshot. For some reason it can't be updated after clicking on save button even though the rest of settings work normally.

I find it harder than quoting a project with a detailed brief.

Sometimes a client knows they need a new website, but once you start asking about what he actually needs, there are still a lot of unanswered questions.

providing a fixed quote too early can backfire, but asking technical questions before giving any indication of cost can also lose the client.

How do you approach pricing when the scope is unclear?

Weird thing happening with a very basic anchor link on jim-flannery.com/music

Clicking "Watch" doesn't bring you down to the appropriate position on a mobile device. Yet, if you then scroll back up and click it a second time, it is correct.

No idea why this is inconsistent, seems like the only anchor link on the site doing this and there's quite a few.

After opening an account with AppMySite, I experienced what I consider an extremely misleading and frustrating process, including constant stalling, lack of support, wasted time, and an arrogant attitude. After paying for the service, the level of support and service I received was completely unacceptable. This was an extremely disappointing and trust-destroying experience, and I absolutely do not recommend this company.

I write on my own blog and kept running into the same gap: a post would show 4,000 pageviews and I still had no idea whether anyone got past the intro. GA4 can track scroll, but by the time the number reaches me it has been through consent gating and sampling, and I wanted the raw rows somewhere I control.

So I wrote a small plugin for it. It's free on wp.org, GPL, no pro version, no account, no signup screen: https://wordpress.org/plugins/ango-scroll-analytics/

What it does: one script on single posts and pages. It records how far the page was scrolled per visit, and gives you visits, average, median and percentiles 5/10/25/50/75/90/100 on a wp-admin screen — phrased as "25% of visitors scrolled at least to X% of the page".

Three deliberate decisions, one of which will annoy somebody:

1. It measures depth through the scrollable height of the page, not the share of the article text. A short post that fits on one screen records 100%. That's why the numbers won't match your analytics tool.
2. A visit with zero scrolling still counts, as 0%. The percentiles describe everyone who arrived, not only the people who read to the end. There is a filter that drops "load-and-die" visits — page loads that never sent anything after the initial beacon, which on a live site are mostly bots and link previews — and it's on by default.
3. Your own logged-in visits aren't tracked. I added that after my own refreshing had quietly wrecked my first week of percentiles.

Everything sits in one table in your own database. The front-end script is ~2 KB gzipped, the endpoint is rate limited, no IPs are stored, Chart.js is bundled so wp-admin makes no external request, and deleting the plugin deletes its data.

Caveats, since you'd find them anyway: it went up on wp.org five days ago and I'm the only person who has used it in anger. It does no funnels, heatmaps or sessions and can't tell you why people leave. Stats are computed on the fly, so at hundreds of thousands of visits it would want caching — a normal blog won't notice.

Happy to answer anything about how the measurement works, including the parts that are my opinion rather than fact.

Ciao a tutti,

sono tre gg che sto impazzendo dietro a questo problema. Ho un sito con Elementor – Tema Otaku che, quando si collega un MAC DESKTOP, gli compare la schermata di autenticazione cloudflare.
Questa anomalia accade SOLO su mac desktop. Da mobile (IOS e Android) e WIN DESKTOP non ho nessun problema.
Il sito non ha nessun collegamento a Cloudflare.
Mercoledì il cliente mi segnala che aveva dei problemi e trovo un malware. Lancio da Cpanenl lo scan e intanto lo pulisco manualmente.
Ho installato sia Sucuri che Wordfence e non gli risulta nessuna anomalia.
Ho rifatto lo scan con Cpanel ed è tutto ok. Ho fatto fare un controllo al fornitore dell’hosting ed è tutto ok.
Come ultima mossa ho ripristinato il core e files di WP (mantenendo solo wp-config.php e wp-content) ma l’anomalia rimane.
Ho chiesto all’AI ma non mi ha dato altre soluzioni.

Avete qualche soluzione?

I have a page with an artical, at the bottom of that page I would like to post an image with a link that useres visiting the page on mobile devices or desktops other than windows don't see. I tried a JavaScript snippet but it returns an error in functions.php when trying to save it.

the snippet:

document.addEventListener("DOMContentLoaded", function() {

const isWindows = navigator.platform.indexOf("Win") !== -1 || navigator.userAgent.indexOf("Windows") !== -1;

if (isWindows) {

const targetElement = document.getElementById("windows-only-content");

if (targetElement) {

targetElement.style.display = "block";

}

}

});

how can i get a better solution?

How cost-effective are fully custom WordPress builds for clients in the long run?

On the one hand, the benefits are pretty clear: better performance, much more flexibility in design and functionality, cleaner code, and less dependence on third-party plugins (maybe using only couple official like woocommerce and so on).

On the other hand, custom builds can make maintenance more complex and expensive. With a typical plugin-based site, you can often update plugins, test the main flows, and move on. With a more custom-coded setup, even a seemingly small update can require proper staging, regression testing, and QA to make sure nothing breaks.

That obviously increases the cost of ongoing maintenance for the client.
So where do you draw the line?

At what point do the performance, flexibility, and reduced plugin dependency justify the higher maintenance cost and complexity?

For those of you building custom WordPress sites for clients, how do you approach this trade-off, and what types of clients/projects do you think actually benefit from going fully custom?