Failed to Comment via wordpress default form

I tried submitting a test comment and I saw the same thing. The serve is responding with a 406 Not Acceptable error. Looking at the response body in the network console shows the message:

An appropriate representation of the requested resource could not be found on this server. This error was generated by Mod_Security.

This issue has come up before. The issue is Mod_Security is misconfigured to block requests that contain the __amp_source_origin query parameter.

You can see the same if you try adding it to an AMP page directly: https://digitallylearn.com/indias-first-pressurized-heavy-water-reactor-upsc-ias/?__amp_source_origin=https%3A%2F%2Fdigitallylearn.com

You can see that the issue was resolved previously by contacting Bluehost support and asking them to add __amp_source_origin to the list of allowed query parameters. See https://ww.wp.xz.cn/support/topic/your-submission-failed-the-server-responded-with-code/#post-11924818

In looking at the browser’s network console, I can see that the response is returning with the error message: “Blocked as suspected bot.” See screenshot below.

In doing a search through GitHub, it appears this is being caused by the MOJO Marketplace (mojo-marketplace-wp-plugin).

It appears that plugin is requiring JavaScript to be active in the browser to identify non-bots. This is not a reliable signal anymore. Akismet and Antispam Bee have both opted to not output JavaScript on AMP pages (see PR), and MOJO Marketplace needs to not only do this but also not fail submissions when JS was not running on the client.

One possible workaround would be to trick the plugin into thinking the that the hidden JS field was provided. The following code placed in a custom plugin should do the trick:

function fake_mm_spam_process_hidden_field( $data ) {
	// Forcibly set the js-spam-prevention post data to prevent mm_spam_process_hidden_field() later from failing.
	$_POST['js-spam-prevention'] = md5( $_SERVER['HTTP_USER_AGENT'] . $_SERVER['REMOTE_ADDR'] );
	return $data;
}
add_filter( 'preprocess_comment', 'fake_mm_spam_process_hidden_field', 5 );
add_filter( 'registration_errors', 'fake_mm_spam_process_hidden_field', 5 );

But I recommend reaching out to the plugin author to fix this issue. It’s important not only for AMP pages but also for any user who has JavaScript turned off.

—-

Screenshot of failure:

• This reply was modified 5 years, 9 months ago by Weston Ruter.

@shikher231 Glad your issue was resolved. We would appreciate a plugin review.