Cloudflare Turnstile Issues

  • Resolved everade

    (@everade)


    3 years, 1 month ago

    There seem to be multiple issues with your Cloudflare Turnstile implementation.

    • Login form CAPTCHA settings (Enable CAPTCHA on login page)
      This implementation is faulty when trying to login via the wp-admin page. Cloudflare Turnstile isn’t visible, but all login attempts will fail with: “ERROR: Your answer was incorrect – please try again.”
    • You’re forwarding an unknown parameter “?ver=…” to the Turnstile API. Should be removed.
    • There are many cases where i get warnings that Turnstile already has been loaded and may be imported multiple times. Even though AIO is the only plugin utilizing Turnstile.
Viewing 8 replies - 1 through 8 (of 8 total)
  • Plugin Support hjogiupdraftplus

    (@hjogiupdraftplus)

    3 years, 1 month ago

    Hi @everade

    1. Issue seems you do not enter correct Turnstile API key and Secret – It is know issue we are working on to solve it upcoming release have this solved. Let us know if that is not the case.
    2. ver= passed is AIOS plugin version number so at each plugin update the api file also get updated. I will create Internal ticket for this.
    3. Can you please provide more detail regarding warning. where you gets that warning ? If you have a page where multiple captcha fields are there let us know.

    Regards

    Thread Starter everade

    (@everade)

    3 years, 1 month ago

    1. I can reassure you, the API key and secret I’ve entered are correct. Otherwise the Cloudflare Turnstile wouldn’t work on any other page. It’s only broken for the WP-Admin page, everything else works.
    2. Hope this can be resolved, even if it’s not a critical issue.
    3. Yes my theme’s my-account page has the Sign-In and Sign-Up integrated on the same page. I noticed that the warning appears on all the my-account pages only, including sub-pages like /my-account/lost-password which either have none or just one Captcha (even after being logged in). So that’s indeed the culprit. Would be neat if the script wouldn’t be initiated twice if there are multiple instances on the same page.

    On another note:
    It would be great if the buttons would be disabled until Turnstile has validated. This would allow for Turnstile to be invisible, without confusing the end-users when they clicked the button too fast before Turnstile was able to approve the user as a human.
    The plugin “Simple Cloudflare Turnstile” was able to do just that.

    • This reply was modified 3 years, 1 month ago by everade.
    • This reply was modified 3 years, 1 month ago by everade.
    Plugin Support aporter

    (@aporter)

    3 years, 1 month ago

    Hi,

    For your first issue it sounds like a conflict with a plugin that recalls the WordPress auth code (e.g some sort of 2FA plugin or similar)

    This copy of the plugin should resolve that:

    https://gofile.io/d/Mf6oOv

    We are looking into issue 2 and 3 still.

    We will also look into implementing your other suggestion.

    Best Wishes,

    Ashley

    Thread Starter everade

    (@everade)

    3 years, 1 month ago

    I don’t use any other plugin that interferes with logins, at least not that i’m aware of. No 2FA and nothing similar. Maybe it’s an issue because i’m using Woocommerce?

    I just tested your copy, but the issue persists.

    Plugin Support aporter

    (@aporter)

    3 years, 1 month ago

    Hi,

    Could you send a list of your installed plugins?

    Best Wishes,

    Ashley

    Thread Starter everade

    (@everade)

    3 years, 1 month ago

    • All In One WP Security
    • Complianz | GDPR/CCPA Cookie Consent
    • Elementor
    • LiteSpeed Cache
    • Loco Translate
    • MailPoet
    • Polylang
    • Redux Framework
    • WooCommerce
    • WPForms Lite
    Plugin Support aporter

    (@aporter)

    3 years, 1 month ago

    Hi,

    I’m unable to reproduce the issue with the above plugins installed.

    Would you be able to send your sites login URL so I can investigate from my side?

    You can open a ticket here to send it privately:

    https://aiosplugin.com/premium-support/

    Enter zeros for the order number and link to this post.

    Best Wishes,

    Ashey

    Thread Starter everade

    (@everade)

    3 years, 1 month ago

    I figured the admin page login issue out!
    The problem was the feature «Rocket Loader™» from Cloudflare. Once de-activated everything worked as expected.

    • This reply was modified 3 years, 1 month ago by everade.
Viewing 8 replies - 1 through 8 (of 8 total)

The topic ‘Cloudflare Turnstile Issues’ is closed to new replies.