Unfortunately my new installation of X triggered Mod Security on my server (UK2.net) and my website went down every time I used the customizer. The tech guys at UK2.net recoded for me, and although customizing ‘X’ is no longer triggering a shutdown, the fonts are not displaying. The background image (which worked previously) is also not now displaying.

It seems that, sadly, your great theme is incompatible with UK2.net. Please advise.
Thanks

Elizabeth
elizabethjanebaldry.com

Thanks for writing in! The issue that you have mentioned can cause due to an outdated security rules that might not be the best case for dynamic applications like the WordPress Customizer. We explain this in a bit more detail here: http://theme.co/x/member/kb/solutions-to-potential-setup-issues-customizer/

You could ask from your hosting provider to set up rules similar to this:

Ask your web host to do the following

edit whitelist.conf in mod security here:

/usr/local/apache/conf/modsec2/whitelist.conf

Add

<LocationMatch "/wp-admin/post.php">
SecRuleRemoveById 300015 300016 300017
</LocationMatch>

<LocationMatch "/wp-admin/admin-ajax.php">
SecRuleRemoveById 300015 300016 300017
</LocationMatch>

<LocationMatch "/wp-admin/page.php">
SecRuleRemoveById 300015 300016 300017
</LocationMatch>

Hope that helps.

I have passed on your recommended code to my webhost and they have kindly added the requested mod security exceptions.
Unfortunately I still can’t change the fonts with the customizer.

Sorry but I’m now ready to give up with X. It’s a great theme, but seems to be incompatible with my web host.

X is the second theme I’ve bought. I didn’t have any problems customizing the fonts with the first theme.

Let me know if you have any other ideas. I’d still like to make it work if possible.
Thanks

Elizabeth

We’re sorry to hear you’re having an issue, Would you mind providing us with login credentials so we can take a closer look? To do this, you can make a post with the following info:

– Link to your site
– WordPress Admin username / password
– FTP credentials

Don’t forget to select Set as private reply. This ensures your information is only visible to our staff.

If you will view your site’s source code from any browser, you will see this

<link rel='stylesheet' id='x-font-custom-css' href='//fonts.googleapis.com/css?family=Lato:400,400italic,700,700italic|Lily+Script+One:700|Lato:300|Lora:300&subset=latin,latin-ext' type='text/css' media='all' />

I chose Lora font for the logo, and it’s shows on that code which means the customizer works. What’s not working is that the url composition and it won’t load by the google.

http://fonts.googleapis.com/css?family=Lato:400,400italic,700,700italic|Lily+Script+One:700|Lato:300|Lora:300&subset=latin,latin-ext

If you visit it, you will not find Lora font. But if you visit this http://fonts.googleapis.com/css?family=Lora it exists. So it could be something with the coding that composed that url.

I tried it locally using Lora font too, and here is the correct url.

http://fonts.googleapis.com/css?family=Lato:400,400italic,700,700italic|Lily+Script+One:400|Lato:400|Lora:400&subset=latin,latin-ext

The issue is you did not choose font weight for your fonts. 700 Font weight does not exist for Lily and 300 font weight does not exist for Lora.

Please choose your font weight, (default font size should be use even if you did not select any, but this issue is probably caused by your recent update that cause data matching for font weight.)

Hope this helps.