Wordfence Blocking Application Secret and Auto Posting

  • mokana

    (@mokana)


    8 years, 2 months ago

    I am using a Word Press Auto Poster to post posts to an aggregation site.

    This auto poster uses the Application Passwords plugin.

    The Auto Poster Plugin is called WordPressomatic Automatic Post Generator.

    The Application Passwords is current.

    The auto poster works fine ONLY when Wordfence is Deactivated. I have Disabled it and tried Learning mode, but it blocks the auto posting. Only when I completely Deactivate Wordfence will the Auto Poster Work.

    The Auto Poster uses Application Passwords so I am confident with that level of security as all calls are made over https.

    I have whitelisted all the IPs but am still being rejected.

    What do I need to do in WordFence to enable this Auto Poster and Application Passwords PLuging combo to work?

Viewing 3 replies - 1 through 3 (of 3 total)
  • wfalaa

    (@wfalaa)

    8 years, 2 months ago

    Hi @mokana
    Did you get any related entry in Live Traffic regarding this issue? Perhaps “Blocked By Firewall” entry for example? I mean, how did you know that Wordfence “blocks the auto posting” and that you are “being rejected” because of Wordfence, any screenshots would be appreciated as it will help me narrowing it down to the exact reason why these requests are getting blocked.

    Thanks.

    Thread Starter mokana

    (@mokana)

    8 years, 2 months ago

    It worked before Wordfence was installed.

    It was then deactivated, and it would still not work.

    Only upon complete removal of Wordfence would it work.

    This iteration was tried several times under varying conditions. All results pointed right back to WordPress.

    Wordpress logs recorded the Auto Posting as a Bot. There was no success or failure recorded. Only the objective results of it only working when WordFence was removed.

    Wordpress has been completely uninstalled and it works. We cannot use Wordfence and are looking for other solutions.

    The auto poster makes a call to the Application Password to get an access code. it then makes a POST call. All calls over https. It all works until Wordfence is made part of the equation.

    Developer thought Wordfence is blocking WordPress API calls. Whitelisted. But still no change. Deleted Wordfence. Works fine.

    I am asking the developer of the Auto Posing Plugin for any more additional info.

    He did tons of testing and said it was Wordfence. I then did tons of testing and narrowed it down to Wordfence as well.

    Thread Starter mokana

    (@mokana)

    8 years, 2 months ago

    the response I received from the developer of the auto post is this:

    Hello,

    Yes, WordFence is blocking the WordPress REST API.

    The URL that gets the 404 HTTP error is: <your_website_url>/wp-json/wp/v2/posts – this is part of the WP REST API and it is working with Wordfence off.

    Example of this url on my page (working): http://coderevolution.ro/wp-json/wp/v2/posts

    Regards.

    I cannot use WordPress, even having it installed on my platform, unless it words with the auto poster.

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘Wordfence Blocking Application Secret and Auto Posting’ is closed to new replies.