admin-ajax error

Resolved vaisor
(@vaisor)

4 months, 1 week ago

Hi!
I have a problem with litespeed caching admin-ajax calls. I found it appears when user tries to log in or try to select a date using datepicker on product rental subsite.
Logging in gives 403 response while datepicker throws PRODRFU0 error.
The problem doesn’t appear immediately, but after a few days after clearing the cache. The plugin is currently disabled because users are unable to use the service.

Raport no: SJOGBFYX

The page I need help with: [log in to see the link]

Viewing 7 replies - 1 through 7 (of 7 total)

Plugin Support qtwrk
(@qtwrk)

4 months, 1 week ago

this usually means a nonce issue

please check that 403 request, see what is the request header or body , it will contain the nonce name

Thread Starter vaisor
(@vaisor)

4 months, 1 week ago

Yes, it contains nonce. Am I able to fix this somehow?

Plugin Support qtwrk
(@qtwrk)

4 months, 1 week ago

yes , get the nonce name , search through the plugin or theme that is responsible for that ajax call , and share the code how it generates nonce

Thread Starter vaisor
(@vaisor)

4 months ago

First one is from trx addons, action – trx_addons_login_user. It uses trx_addons_verify_nonce function to check for nonce. I’m not sure how deep i should go, but inside I can see they use wp_verify_nonce right after trimming it. It’s nonce checking process, not generating it though, so I’m not sure if it’s enough.

Plugin Support qtwrk
(@qtwrk)

4 months ago

please share me the line that generates/verify the nonce trx_addons_login_user
Thread Starter vaisor
(@vaisor)

3 months, 3 weeks ago
```
//Action call
function trx_addons_users_login_user() {

	if ( ! trx_addons_get_option('login_via_ajax') ) return;

	trx_addons_verify_nonce();
	// etc...
	

function trx_addons_verify_nonce( $nonce = 'nonce', $mask = '' ) {
	if ( empty( $mask ) ) {
		$mask = admin_url('admin-ajax.php');
	}
	if ( ! wp_verify_nonce( trx_addons_get_value_gp( $nonce ), $mask ) ) {
		trx_addons_forbidden();
	}
}
function trx_addons_get_value_gp($name, $defa='') {
	if (isset($_GET[$name]))		$rez = $_GET[$name];
	else if (isset($_POST[$name]))	$rez = $_POST[$name];
	else							$rez = $defa;
	return trx_addons_stripslashes($rez);
}
```
Sorry for late response. Is this code sufficient?
Plugin Support qtwrk
(@qtwrk)

3 months, 3 weeks ago

okay , please try enable ESI, then add nonce into ESI nonce list , save and purge all , see how it goes

Viewing 7 replies - 1 through 7 (of 7 total)

You must be logged in to reply to this topic.

Tags