WP Armour blocks ActivityPub Plugin

  • brng

    (@brng)


    1 week, 3 days ago

    WP Armour 2.4.02 terminates server-to-server ActivityPub comment insertions in the preprocess_comment filter because no JavaScript-generated
    honeypot field is present. WordPress ActivityPub 9.0.2 uses wp_new_comment()
    to store Like and Announce activities. Disabling WP Armour fixes the issue.

    The page I need help with: [log in to see the link]

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Support Dinesh Karki

    (@dcsupport)

    1 week, 3 days ago

    Hi @brng,

    This is one of the trade-offs of using WP Armour. The plugin checks for the JavaScript-generated honeypot field to verify that a submission comes from a real browser. In cases like ActivityPub, where comments are inserted server-to-server using WordPress functions, that field is not present, so WP Armour treats the request as spam.

    Töm

    (@toem)

    1 week, 1 day ago

    Here the same problem with the communication between Thrivecart and Contact Form 7 form.

    The idea in previous threads was to exclude special forms or pages from WP Armour. But since yet, I didn’t get it to work.

    Matthias Pfefferle

    (@pfefferle)

    1 week, 1 day ago

    Hej hej,

    what about an exception when defined( 'REST_REQUEST' ) && REST_REQUEST is set?

Viewing 3 replies - 1 through 3 (of 3 total)

You must be logged in to reply to this topic.