WordPress Repository Status

[herrvigg]

Issue by mrwweb
Saturday Aug 22, 2015 at 18:14 GMT
Originally opened as qTranslate-Team/qtranslate-x#222

---

I see in the 3.4.3 changelog that the plugin was temporarily pulled from the WordPress.org repository (and still is as of August 22, 2015). Can someone give a status update on whether the security concerns are valid, whether they've been fixed, and if/when we can expect the plugin back in the repository?

[herrvigg]

Comment by michael-milette
Sunday Aug 23, 2015 at 18:50 GMT

---

I am looking for the plugin as well.

[herrvigg]

Comment by Gersnij
Sunday Aug 23, 2015 at 21:48 GMT

---

Me too! I installled the plugin on one site, and need it once more..

[herrvigg]

Comment by MarcoNko
Monday Aug 24, 2015 at 15:49 GMT

---

I was looking for the plugin repository too, panic!
https://wordpress.org/plugins/qtranslate-x is not working,
when will it be back online?

[herrvigg]

Comment by ianchanning
Tuesday Aug 25, 2015 at 09:26 GMT

---

Everything seems to have gone very quiet on this. Given that qtranslate-x is the recommended replacement for mqtranslate which is fully deprecated as of WordPress 4.3 this becomes more urgent

[herrvigg]

Comment by adamlindqvist
Tuesday Aug 25, 2015 at 09:41 GMT

---

I'm also looking for the plugin! Hope to see it back soon.

[herrvigg]

Comment by ianchanning
Tuesday Aug 25, 2015 at 09:44 GMT

---

N.B. Anyone can download the master branch and upload the zip file to get the plugin back. You'll also need to unzip qtranslate-x-master.zip, rename it to qtranslate-x and rezip it if you want to make sure the plugin gets updated properly when it is reaccepted into the WordPress plugins directory.

[herrvigg]

Comment by Grafcom
Tuesday Aug 25, 2015 at 10:00 GMT

---

@mrwweb @michael-milette @Gersnij @MarcoNko @adamlindqvist and @ianchanning

We are currently investigating this, please have patience.
In the meantime you can use the solution described by @ianchanning.
Download here https://github.com/qTranslate-Team/qtranslate-x/archive/master.zip
Thank you!

[herrvigg]

Comment by Gersnij
Tuesday Aug 25, 2015 at 10:40 GMT

---

I'glad @mrwweb has commented today that there is hope we will have this plugin back. Thank you.
Still there is a risk using the bypass descibed by @ianchanning, since - at this moment - we have no clue whether it is a matter of days or months.

[herrvigg]

Comment by ianchanning
Tuesday Aug 25, 2015 at 10:53 GMT

---

@Gersnij i think it's pretty risk free. Any reason for the plugin being taken down was because of a bug in the very old qtranslate plugin - but it doesn't exist in the qTranslate-X plugin. As long as you rename the downloaded directory and re-zip it before uploading it to your site via 'Plugins > Add New' then the plugin will work normally and then you'll get prompted to update the plugin once it's added back into the WordPress plugins directory.

@Grafcom let me know if I can help at all

[herrvigg]

Comment by Grafcom
Tuesday Aug 25, 2015 at 11:12 GMT

---

@ianchanning
you have programming experience? Send me a private email to gu nu at mar ius - si roen d com
Thanks

[herrvigg]

Comment by Gersnij
Tuesday Aug 25, 2015 at 13:18 GMT

---

Are you sure it should work that way? I followed the instructions (download the master from the link, unzip, rename the folder and underlying folder to qtranslate-x, zip again, add new plugin via upload), but it says - in Dutch: unzipping, installing, package cannot being installed. No valid plugins found.

[herrvigg]

Comment by Grafcom
Tuesday Aug 25, 2015 at 13:29 GMT

---

@Gersnij
only the underlying folder (with the actual files) is the new (only) folder to zip. Then you get a new valid package.

[herrvigg]

Comment by Gersnij
Tuesday Aug 25, 2015 at 13:37 GMT

---

@Grafcom Thanks! Installation succesfull, as expected.

[herrvigg]

Comment by mrwweb
Tuesday Aug 25, 2015 at 15:28 GMT

---

I'm happy to install it via GitHub for now. I'm just looking for an
official confirmation that this is a temporary issue, that the plugin's
development will continue, and that someone is actively working to get it
back into the repository.

[herrvigg]

Comment by mvandemar
Friday Aug 28, 2015 at 16:36 GMT

---

For those who didn't notice the above activity, it appears to have been pulled due to a valid vulnerability, which @ianchanning is working on fixing here:

qTranslate-Team/qtranslate-x#230

[herrvigg]

Comment by richpav
Monday Aug 31, 2015 at 01:39 GMT

---

Until development restarts here, is @ianchanning 's fork the best to to use?

[herrvigg]

Comment by ianchanning
Monday Aug 31, 2015 at 14:36 GMT

---

I'm confident what I submitted should work and addressed the security concern that WordPress raised. I tested as best I could the fix I made, but I could have introduced a bug as this is my first time modifying the plugin.

• If you're worried about 100% functionality working - go with the current release version
• If you're worried about the fairly minor security flaw - go with my fork

[herrvigg]

Comment by Grafcom
Monday Aug 31, 2015 at 14:40 GMT

---

@ianchanning
on my test server your changes work, no errors discovered so far. :-)

[herrvigg]

Comment by mvandemar
Monday Aug 31, 2015 at 14:57 GMT

---

@Grafcom Have you resubmitted the plugin with @ianchanning's fix to Wordpress yet?

[herrvigg]

Comment by johnclause
Tuesday Sep 01, 2015 at 23:57 GMT

---

Sorry for the delay with security fix required by WP. The fix is now submitted and plugin should be back after WP approves it. I am closing it for now, we can still write into a closed issue and may re-open it again if needed.

[herrvigg]

Comment by johnclause
Friday Sep 04, 2015 at 16:08 GMT

---

https://qtranslatexteam.wordpress.com/2015/09/03/why-qtranslate-x-disappeared-from-wordpress-repository/

[herrvigg]

Comment by michael-milette
Friday Sep 04, 2015 at 21:29 GMT

---

It's back on WordPress.org!

See https://wordpress.org/plugins/qtranslate-x/

Have a great weekend!

 Michael

[herrvigg]

Comment by Gersnij
Friday Sep 04, 2015 at 22:16 GMT

---

Congrats. Nice job!