Green

Hi @nintechnet ,

Ah, thanks! I looked into the docs, but I couldn’t find out where the .htnina is, so I tried to add it to the wp-config.php. Now I realize that’s because I’m running in “WordPress WAF” and it’s good to go. Am I correct?

On the other hand, I will report to the Jetpack team maybe with the content in this support ticket. I hope something will be discovered.

Green

Hi @saad-sohail ,

No, I didn’t feel this issue has been resolved, I just have no time to look into it further again while I’ve found this topic status has turned to Resolved after months later.

Since there’s been another report align this topic, I would try to change the status to Unresolved and let the official developer notice back to it.

Hello @maneshtimilsina ,

I’ve re-checked the related settings of both plugins, and have done some tests.

In conclusion, I activated both of the plugins NinjaFirewall with Login Protection and Advanced Google reCAPTCHA plugin on the live site.

I’ve unchecked the option “Enable for Login (Applies for default login, WooCommerce & Easy Digital Downloads logins) of the Advanced Google reCAPTCHA plugin to avoid the error message caused by trying to log in with the wrong password of the old site too many times. But, I made the options including Enable for Register, Enable for Lost Password, Enable for Comment Form, and Enable for WooCommerce Register stay activated.

So, these two plugins can exist at the same time on this WooCommerce site now as my original plan to make the site be more professional no matter on the back end or the front end with a balance user experience.

Thank you very much,
Green

Hello @nintechnet ,

In fact, I can’t produce similar reCAPTCHA error messages on the staging site which is with the NinjaFirewall plugin and the Advanced Google reCAPTCHA plugin both activated in recent days.

I’m not sure whether the number of visitors who try to log in or reset their passwords matters.

I’ve done step1and step2, I found there are two differences between the Firewall Policy restored before and after.

1. Block attempts to publish, edit or delete a published post by users who do not have the right capabilities (recommended)
   checked -> unchecked
2. HTTP_REFERER server variable – Sanitise HTTP_REFERER: YES
   NO -> YES

PS. Before restored to default ->After restored to default.

Is any of them might relate to this situation?

May I check this option “Block attempts to publish, edit or delete a published post by users who do not have the right capabilities (recommended)”?

I’m trying to activate on the live both of staging site and live site. The Advanced Google reCAPTCHA plugin has been remained deactivated temporarily.

I think I will try not to restore the configuration but make a new setting if I need instead for avoiding other unknown causes.

Thanks,
Green

Hello @nintechnet ,

Yes, I have already disabled the login protection of NinjaFirewall since I submitted this ticket.

As you can see in the screenshot below.

https://imgur.com/DN2KKEO

The reCAPTCHA failed message appears when the login protection option of NinjaFirewall is disabled (and with the settings follow the suggestion from your previous reply), but the issue doesn’t appear when the NinjaFirewall plugin is deactivate. That’s why I think there could be some cause and settings that need to be adjusted for making sure the Google reCAPTCHA work as usual.

May I create a temporary login link for you to helping me check it through the backend of my staging site? I tried to search an email for setting the login link, but there’s no email listed on your official site.

Here’s the /my-account/ page link of my staging site in the environment I mentioned (Advanced Google reCAPTCHA and NinjaFirewall are both activated, the login protection of NinjaFirewall is disabled): https://staging-yourzcomtw-staging.kinsta.cloud/my-account/

Please set this reply as private if you can.

Thanks,
Green

Hello @nintechnet ,

Sorry, I’ve just found that I forgot to upload other screenshots with the error message of Google reCAPTCHAR before your reply.

The rest related screenshots has been added to the same imgur link, please see it on: Imgur: The magic of the Internet

Thanks,
Green

Hello @nintechnet ,

The live site is running public now, so it’s hard to test on it through try & error one by one. Currently, I disabled Advanced Google reCAPTCHA and NinjaFirewall both.

I’ve created a staging site from the current live site, NinjaFirewall plugin is disactivated and Advanced Google reCAPTCHA plugin is activated. I did some test with different emails to try to login and click the “forgot password?” to ask to reset the passwords. There is no that kind of issue happen with Advanced Google reCAPTCHA activated under this environment.

Will it be helpful if I send an info of staging site with another set of Google reCAPTCHA for you?

Thanks,
Green