Login / Register Problems

  • Resolved dimal

    (@dimalifragis)


    6 years, 11 months ago

    I installed today the plugin in Full WAF mode. Litespeed server. Default settings (i changed nothing apart from Login protection enabled with captcha).

    Problems during MY tests. Nobody can register. The errors logged are strange:

    CRITICAL 1424 GET /wp-login.php – Arbitrary file upload – [GET:action = register] (but i’m not trying to upload anything, just register)

    Trying to login:

    CRITICAL 1424 POST /wp-admin/admin-ajax.php – Arbitrary file upload – [POST:action = heartbeat] (not sure what that is)

    Thanks

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author nintechnet

    (@nintechnet)

    6 years, 11 months ago

    The problem comes from a security rule that was released 2 days ago.
    See https://ww.wp.xz.cn/support/topic/cannot-upload-files-after-update-to-v4-0/

    Simply update your security rules and everything will work as expected.

    If you are locked out and cannot log in, comment out NinjaFirewall’s directive in your .htaccess, then log in, update the rules and restore the .htaccess directive.

    Thread Starter dimal

    (@dimalifragis)

    6 years, 11 months ago

    Indeed that solved the problems i posted above.

    Also solved a problem when logging out and presented with a captcha form!.

    Thank you

    • This reply was modified 6 years, 11 months ago by dimal.
Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘Login / Register Problems’ is closed to new replies.