Title: Cannot Approve Posts
Last modified: October 4, 2017

---

# Cannot Approve Posts

 *  Resolved [daveparkhurst](https://wordpress.org/support/users/daveparkhurst/)
 * (@daveparkhurst)
 * [8 years, 8 months ago](https://wordpress.org/support/topic/cannot-approve-posts/)
 * When someone comments on a post, we get an email to approve it. Url like this:
   
   Approve it: [https://newlifeethiopia.org/wp-admin/comment.php?action=approve&c=391#wpbody-content](https://newlifeethiopia.org/wp-admin/comment.php?action=approve&c=391#wpbody-content)
 * However, the IP Geo Block blocking message comes up.
 * The Moderation link works, however.
    [https://newlifeethiopia.org/wp-admin/edit-comments.php?comment_status=moderated#wpbody-content](https://newlifeethiopia.org/wp-admin/edit-comments.php?comment_status=moderated#wpbody-content)
 * I’m logged in when doing this. IP Geo Block is the most recent version. Any help
   appreciated.
 * The page I need help with: _[[log in](https://login.wordpress.org/?redirect_to=https%3A%2F%2Fwordpress.org%2Fsupport%2Ftopic%2Fcannot-approve-posts%2F%3Foutput_format%3Dmd&locale=en_US)
   to see the link]_

Viewing 1 replies (of 1 total)

 *  Plugin Author [tokkonopapa](https://wordpress.org/support/users/tokkonopapa/)
 * (@tokkonopapa)
 * [8 years, 8 months ago](https://wordpress.org/support/topic/cannot-approve-posts/#post-9555930)
 * Hi [@daveparkhurst](https://wordpress.org/support/users/daveparkhurst/),
 * This is normal behavior for now when you enable “**Prevent Zero-day Exploit**”
   at “**Admin area**“.
 * Please think about the case that you receive a fake email which includes malicious
   link covered by a legitimate url. When you are logged in as an admin and carelessly
   click that malicious link in your email, your site would be contaminated with
   because you have admin credential.
 * This type of attack is called “[Cross Site Request Forgeries](https://en.wikipedia.org/wiki/Cross-site_request_forgery)”
   aka CSRF which is usually combined with other type of attacks such as XSS or 
   SQLi.
 * If you think that this is inconvenient, please add the action `approve` into “**
   Exceptions**” at “**Admin ajax/post**“. I haven’t tested it, but it may be in
   effect.
 * Thanks for your kind understanding.

Viewing 1 replies (of 1 total)

The topic ‘Cannot Approve Posts’ is closed to new replies.

 * ![](https://ps.w.org/ip-geo-block/assets/icon-128x128.png?rev=1148568)
 * [IP Geo Block](https://wordpress.org/plugins/ip-geo-block/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/ip-geo-block/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/ip-geo-block/)
 * [Active Topics](https://wordpress.org/support/plugin/ip-geo-block/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/ip-geo-block/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/ip-geo-block/reviews/)

 * 1 reply
 * 2 participants
 * Last reply from: [tokkonopapa](https://wordpress.org/support/users/tokkonopapa/)
 * Last activity: [8 years, 8 months ago](https://wordpress.org/support/topic/cannot-approve-posts/#post-9555930)
 * Status: resolved