• Resolved sjlevy

    (@sjlevy)


    I believe a recent WP-SpamShield update has introduced a web.config issue that doesn’t allow js/jscripts.php to load

    “HTTP Error 500.19 – Internal Server Error
    The requested page cannot be accessed because the related configuration data for the page is invalid.”

    I experienced this error across 3 separate IIS servers, each with its own WP installation. Additionally I spun up a fresh IIS VM and set up a clean WP installation (no other plugins), with full control directory permissions over the entire WP installation, and experience the same issue.

    In addition to the ‘not installed correctly’ message, this caused unusual behavior where individuals on the same network as the WP installation were able to submit forms, but users off-site were not. Users off site would receive the “ERROR: Sorry, there was an error. Please be sure JavaScript and Cookies are enabled in your browser and try again.” despite javascript and cookies being enabled

    It may also be helpful to have the ‘not installed correctly’ message show up globally across the WP dashboard, otherwise it might go unnoticed.

    Let me know if I can be of any further assistance in debugging

    https://ww.wp.xz.cn/plugins/wp-spamshield/

Viewing 7 replies - 1 through 7 (of 7 total)
  • Plugin Contributor redsand

    (@redsand)

    At the top of the support forum there is a sticky post that we ask users to read first because it guides you to excellent troubleshooting options we have already put together for our plugin users.

    Please take a few minutes to work through the Troubleshooting Guide and FAQs, as these solve over 90% of issues users have. (Please be sure to follow all the steps, not just read through them.)

    If the information provided doesn’t solve the issue for you, we’ll need a bit more info from you on the specifics, and we’ll need to email back and forth, so please head over to the WP-SpamShield Support Form, and take a moment to fill out a support request. That will allow us to help you diagnose this, find out what the real issue is, and get things working right for you.
    – Scott

    Please note that the WP-SpamShield Support page is our main support venue, not the WordPress forums here, so that will always be the best way to get a quick response and resolve any tech support issues.

    Thread Starter sjlevy

    (@sjlevy)

    Just a note to others having this issue

    I was able to remove or rename web.config in wp-content/plugins/wp-spamshield/js/, deactivate and reactivate the plugin to get an ‘installed correctly’ installation status

    Plugin Contributor redsand

    (@redsand)

    Just a note to others having this issue

    I was able to remove or rename web.config in wp-content/plugins/wp-spamshield/js/, deactivate and reactivate the plugin to get an ‘installed correctly’ installation status

    Actually, that won’t fix the core issue. If anyone else is having the same issue, please follow what I posted in my response above.

    – Scott

    Please note that the WP-SpamShield Support page is our main support venue, not the WordPress forums here, so that will always be the best way to get a quick response and resolve any tech support issues.

    Thread Starter sjlevy

    (@sjlevy)

    The developer points out that Windows/IIS is not supported which is understandable.

    The latest WP-SpamShield 1.9.8 update has removed all of the web.config’s introduced in 1.9.7.8 from the plugin directories. The plugin appears to be working correctly again on IIS (obviously minus the .htaccess restrictions)

    I had been trying to figure out why this 1.9.7.8 web.config directive would not work on my IIS configurations:

    <authorization>
        <allow users="*" />
    </authorization>

    Turns out it was because I needed to install the ‘URL Authorization’ feature, see the ‘Setup’ section of this doc: https://www.iis.net/configreference/system.webserver/security/authorization

    Additionally it looks like there were some syntax issues (at least with IIS version 8). IIS generates the authorization rule like this:

    <security>
        <authorization>
            <remove users="*" roles="" verbs="" />
            <add accessType="Allow" users="*" />
        </authorization>
    </security>

    Similarly a deny rule:

    <security>
        <authorization>
            <remove users="*" roles="" verbs="" />
            <add accessType="Deny" users="*" />
        </authorization>
    </security>

    The <remove> tag seems to be necessary to remove any inherited/default authorization.

    By replacing the 1.9.7.8 web.config directives with the new syntax above it was happy

    Plugin Contributor redsand

    (@redsand)

    Hi Sam,

    We responded to your support request via email. It makes it difficult to help you when you go back and forth between the main WP-SpamShield Support channel and here.

    I’m glad you were able to sort out one of your configuration issues.

    As noted in the Known Conflicts page, we do provide limited support for IIS:

    What does limited support mean? It means we will do our best to make sure the code is compatible with as many systems out there as possible, and when there are issues, we will do our best to help, but being that there are a lot more things that can go wrong when PHP is running on IIS, you need to realize that the issue may not necessarily be the plugin but the server configuration…

    Unfortunately, the nature of IIS just makes it a less-than-ideal system for running WordPress (and PHP in general). If a user requests help, we will do what we can to help.

    However, with a properly configured server, users can run WordPress and WP-SpamShield quite smoothly, and most do.

    Regarding your particular issue, please see the following from the Known Conflicts page’s IIS section:

    If you are using IIS, remember that one of the Minimum Requirements for the plugin is that your server is configured to use an .htaccess file.

    This can be done using Helicon Ape, which adds some valuable Apache functionality to IIS:

    “It literally implements Apache configuration model and nearly all Apache modules in a single IIS add-on, not only making IIS compatible with Apache, but also extending it`s functionality by a number of highly essential features. Includes following modules: mod_rewrite, mod_proxy, mod_auth, mod_gzip, mod_headers, mod_cache, mod_expires, mod_replace and others.”

    IIS’ equivalent to .htaccess is the web.config file. Both are directory-level overrides for certain server configuration settings.

    Allowing two separate directory-level override files to function on a server at the same time is generally not a good practice and can cause conflicts and other problems. Yet, many IIS servers running WordPress end up doing this. If your site is properly configured to use .htaccess, you need to ensure that your site is configured to NOT use web.config in your WordPress site directory and below. This can be accomplished a number of ways, one being the AllowSubDirConfig setting ( https://blogs.msdn.microsoft.com/sroun/2014/11/13/allowsubdirconfig-clarification/ ), which is similar to the Apache setting AllowOverride.

    Additionally, since you will be using .htaccess, URL Rewrite Module 1.1 should be disabled for the site, or alternatively, you can use the ‘iis7_supports_permalinks’ hook (with a function that returns ‘FALSE’) to tell WordPress that IIS does not support permalinks. Then it will fall back to the default setting of checking for an .htaccess file, and use the Apache style permalinks.

    We are happy to help, but again, the best way for us to do that is if you continue the thread started through the plugin’s main support channel – the WP-SpamShield Support page. If you have any further questions or issues, please continue there.

    – Scott

    Please note that the WP-SpamShield Support page is our main support venue, not the WordPress forums here, so that will always be the best way to get a quick response and resolve any tech support issues.

    Thread Starter sjlevy

    (@sjlevy)

    Thanks for taking the time

    Sorry for the trouble

    Plugin Contributor redsand

    (@redsand)

    Hey Sam,

    No worries! We just want you to have a flawless experience. πŸ™‚

    – Scott

Viewing 7 replies - 1 through 7 (of 7 total)

The topic ‘'not installed correctly' web.config issue’ is closed to new replies.