Support Forum
Support Forum
Offline
Hello,
When attempting to change the theme or visit any of the settings in the toolbox I receive the error message "Access denied - ajax nonce check failed
Do you need to log in? (Log in)" and I am redirected to the wp-admin login page.
I turned on debugging in wordpress and found the following error apparent on all pages I visit inside of wp-admin:
Notice: Undefined index: editor in ~/wp-content/sp-resources/forum-plugins/post-preview/sp-preview-plugin.php on line 38 *
* note: I replaced the fullpath to the webroot with a ~, when posting this warning message. It may or may not be related to the access denied message.
Any assistance you can provide in troubleshooting this problem is greatly appreciated.
Thank you.
Offline
unrelated... just a harmless notice...
the nonce failure usually happens when wp thinks your are logged out but may still appear to be logged in... can you try physically logging our and then back in?
no admin caching plugins, right?
Visit Cruise Talk Central and Mr Papa's World
Offline
Part of the problem, I believe, is that the WordPress team appear to have beefed up the logged in/logged out checks and, to my mind, gone a little over the top! I now have to log in again far more often that I used to under the latest version. And it is, quite frankly, a right pain.
The nonce check - and if you do not know what that is then basically it is a security key sent with each page request) seems to have a shorter lifespan than it used to. This means, that if you leave the WP admin on one of the forum admin panels say overnight and then come back to it in the morning and select a different forum admin panel from the accordion menu on the left then it can fail and force you to log in again.
The key to this is selecting the first target of the day from the actual WP menu on the far left which will have a different nonce check to the forum menu one.
This has been personally bugging me more and more and is one of the items being discussed by our team in reference to a forum admin overhaul. But - as I am sure you appreciate - that is not a quick and simple task!
 |
YELLOW
SWORDFISH
|
Offline
This happens every time, nomatter how long I've been logged in (even if only for a few seconds)
My suspicion is also related to the caching. I'll try disabling wp-supercache for authenticated users and see if that helps.
Offline
Still doing it, even if I turn off caching for known users.
WP version 4.1, SP version 5.5.3 Build 12176
Offline
Every time? Wow! I think once or twice a day is bad enough.
Any other security related plugins active?
|
YELLOW
SWORDFISH
|
Offline
lets make sure everything is same cookie domain... all page urls are consistent as to use of www or not? no mixed... and what about https? in use or not?? if so, no mixed content?
also, just to check... you said theme and toolbox admin panels... does that mean the rest work fine? or is it really all of them?
Visit Cruise Talk Central and Mr Papa's World
Offline
The issue is still occurring for us.
For now we've manually updated the database since my original post, in order to change the theme.
Trying to perform any forum actions results in a logout as well.
Everything is on the same domain. Accessing wp-admin from the non-ssl side. The site is living in a clustered environment, with wp-admin url's being passed to the "admin" server. Servers are running nginx and php5-fpm. With the SQL database being housed on a centralized server.
There are no security plugins installed yet which would effect the functionality of the simple-press plugin.
It seems that when we click on anything inside of the toolbox we get the wp-login.php page, and are simply able to click the back arrow to go back to the last page we were on, so it doesn't actually log us out.
On the forum I'm experiencing an issue where I'm unable to start a topic, despite being logged in. The button links to javascript:void(null).
Offline
void is correct... see: https://simple-press.com/docum.....wser-link/
you say not affecting simple press but curious how you know that?? trying to ascertain if some query args or posted data is being hijacked or blocked...that wouldnt be specific to simple press but any url...
I dont think you answered the question on other admin panels?
front end issue is very indicative of js conflict.. might read: https://simple-press.com/docum.....-conflict/
and with browser console open, try adding topic... any js errors reported in the console?
is this sp theme or your own custom theme? are pretty checkboxes in effect or the new css3 checkboxes in 5.5.4?
Visit Cruise Talk Central and Mr Papa's World
All RSS1 Guest(s)