interesting… that is not a message from simple press.. and as you know, you dont log into simple press, only wordpress…

anything of interest in the php error log?

No, not really.  A crawler error from Googlebot about accessing something they shouldn’t.  That’s it.

I find it curious that I can login via /wp-admin, but NOT through the redirect supplied in Simple:Press.  Only the login form shown in my Forum is the one that has this issue.  Seems like that’s a SP issue to me, especially since I just upgraded this morning…

Is there a way I can downgrade to test this and prove it’s SP?

not easily due to db update issues… if you look at that login form, its a standard wp form and its processed by wp…  there is no login to simple press just a there are no forum users – all are wp users…

do you have a link to site so we can look for issues? 

also, anything returned in the browser console when you try to login into the wp site?

no caching on your site?

Well, curiously–I updated a SECOND site today.  It’s having the exact same issues.  Different theme, same hosting provider (WPEngine).  Same WP.  Some of the same plugins, but not all.

I have caching on both sites.  Caches were completely flushed after upgrade.  No difference.  Tried on different browsers, incognito mode, private browsing windows…it’s all the same.  Not a cache issue.

I’m getting a 500 Error from my web host on the console.  Not very informative.

I’d like to send you a user to test with.  PM OK?

sure… be sure to send to yellow swordfish and myself… and link back to this topic so we know what its about…  would be best if the account was a full sp admin…

worth adding that after many, many thousands of upgrades of users to 5.7.1, no one else has reported a similar situation…

500 error in error console?? why would it have any http response like that????

I have no idea.  PM has been sent.

WPEngine investigated–this is what they said:

Still no direct error in the logs from this, and I can get to the wp-login.php directly with no issue, so it definitely looks like the (SimplePress) plugin is having an issue with that redirect during login.

I hear what you’re saying but the facts I have in front of me strongly point to SimplePress right now:

1. Happened after upgrade to 5.7.1
2. Was fine before that
3. No additional plugins or theme changes made
4. Trying to access the /wp-login URL outside of SP works
5. Trying to access the /wp-admin URL outside of SP works
6. Using the forum-provided Log In button, entering a user, does not.  Always shows the “Service Unavailable” error.
7. I see the same problem on a second, unrelated site that had the same upgrade today.

The login should be upgraded for a SP admin now.  Try it out–let me know what you see.

well, we dont do any redirect there… it simply POSTs to wp-login.php…  based on watching all the http headers…

and when trying to login, cloudflare is reporting a 500 error…  almost always those are logged…

and since its a server error, not sure what more info we can provide without receiving more info…

one other thing… any security add ons?  one odd thing I have never seen in the headers is this item:

Upgrade-Insecure-Requests: 1

no sure what that is and googling shows a bunch of not very helpful…  but makes it sound like the server wants the request to redirect some more secure, ie https?, but you are not using ssl…  perhaps your host will understand that better…

you are not using our js cache, so dont have to worry about stale js…

also, looking at the error log, I see this in there:

September 12, 2016 10:14 am | 512 | 4 | phpfile: /simple-press/sp-startup/site/sp-site-deprecated.php
line: 54
function: trigger_error
User Warning | The function sp_forum_api_support() has been deprecated and will be removed in a future update. Use the new function sp_forum_ajax_support() instead.

this tells me you have SP plugins that have not been updated and may not be compatible with the current version…  Can you please go to the wp updater and make sure you dont have any need sp plugins to update???

So how do you explain the fact that just navigating in the address bar to /wp-login works but SP’s POST fails?

The WPEngine server logs are showing nothing on the hosting side–I asked, they looked and nothing was registering, so I don’t know what else to provide there.  Cloudflare is a proxy service, so there’s no server-side logging they offer.  Looking at their firewall log, there’s no errors or challenge events they have recorded here.  Just in case, I dumped Cloudflare’s cache as well–no change.

We aren’t allowed to run any special security plugins on WPEngine like WordFence, so nothing there.

Is there anything else you can suggest here?

UPDATE:  I updated EVERY SP plugin today.  Every last one.  They’re all up to date.  That error’s timestamp may be older than the time when I updated, so you may be looking at a red herring error during the time of update of SP and the update of the SP plugins.  I just confirmed this on the WordPress Updates area.

please dont forget about posts 9 and 10 which are now on a previous page… some stuff for you…

I cant… nor can I explain why posting to a standard wp page causes a 500 error…

If there was a common error, 10’s of thousands of users would be screaming… of course, cant rule out something with SP, but then its still unique to your server and we need to keep digging for info…

btw… will continue some research…and perhaps @yellow-swordfish will have some ideas when he stops by…

this tells me you have SP plugins that have not been updated and may not be compatible with the current version…  Can you please go to the wp updater and make sure you dont have any need sp plugins to update???

If you carefully look at the timestamp of that error, it’s almost 12 hours ago.  I updated the plugins this morning.  That error is old and out of date.

As I noted, the WP Updater shows nothing needs to be updated right now.

okay, cool… which is why I asked you to check… being a unique situation, we just to check almost everything and anything… and try to collect as much data as possible…