Support » Plugin: IP Geo Block » Blocked on searching posts

  • Resolved H

    (@thwordpressorg)


    I have [Block by country] and [Prevent Zero-day Exploit] enabled for [Admin ajax/post].
    With that configuration, IP Geo Block blocks me when I search posts. (Go to [Posts] – [All Posts] page (/wp-admin/edit.php), type some words in the upper right input box and hit [Search Posts].)
    Any way to avoid it?

    When I’m blocked, the log shows this GET request:
    /wp-admin/edit.php?s=my-search-terms-goes-here&post_status=all&post_type=post&_wpnonce=some-hex-goes-here&_wp_http_referer=%2Fwp-admin%2Fedit.php&action=-1&m=0&cat=0&paged=1&action2=-1

Viewing 6 replies - 1 through 6 (of 6 total)
  • Plugin Author tokkonopapa

    (@tokkonopapa)

    Hi @thwordpressorg,

    Sorry about your trouble.

    I reproduce your steps and found the GET request should be:

    /wp-admin/edit.php?s=my-search-terms-goes-here&post_status=all&post_type=post&action=-1&m=0&cat=0&paged=1&action2=-1&ip-geo-block-auth-nonce=xxxxxxxx

    What I intended is that in your request I can’t find ip-geo-block-auth-nonce=xxxxxxxx which is for “Prevent Zero-day Exploit”.

    At first, please try to find any JavaScript error in your Post page. I hope “Why “Sorry, your request cannot be accepted” ?” can help you.

    Or I guess you have some plugin that affects to the Post page. If you have one, please try to deactivate it. In case you have no block, please let me know the name of the plugin.

    Thanks.

    Plugin Author tokkonopapa

    (@tokkonopapa)

    Hi H, long time to see you!

    Here is additional info.

    I wrote the get request in address bar, but when I closer looked at the browser, I found followings:

    1. First request was /wp-admin/edit.php?s=my-search-terms-goes-here&post_status=all&post_type=post&_wpnonce=some-hex-goes-here&_wp_http_referer=/wp-admin/edit.php?ip-geo-block-auth-nonce=xxxxxxxx&action=-1&m=0&cat=0&paged=1&action2=-1.
    2. Then redirected to /wp-admin/edit.php?s=my-search-terms-goes-here&post_status=all&post_type=post&_wpnonce=some-hex-goes-here&_wp_http_referer=/wp-admin/edit.php?ip-geo-block-auth-nonce=xxxxxxxx&action=-1&m=0&cat=0&paged=1&action2=-1&ip-geo-block-auth-nonce=xxxxxxxx.

    I think it was redundant but this redirection was done by this plugin in my case. So I think something prevented the redirection in your case.

    Do you have any idea?

    Thread Starter H

    (@thwordpressorg)

    Thanks for the info. I’m trying to find the answers to your questions, but I have no firm answers at the moment. The problem does not always happen.
    When it happens, I seem to experience the following sequence:

    1. Navigate from the home page (/) to Dashboard (/wp-admin/) and then to All Posts (/wp-admin/edit.php).
    –> The web browser opens the page. Its address bar indicates “http://<my-site>/wp-admin/edit.php&#8221;. No “?ip-geo-block-auth-nonce=…” there.

    2. Type some words in the upper right input box and hit [Search Posts].

    Plugin Author tokkonopapa

    (@tokkonopapa)

    Hi @thwordpressorg,

    Good information!

    I think I overlooked something around the sequence you showed. I’ll try reproduce this issue. Please give me some time to find the cause.

    Thanks.

    Plugin Author tokkonopapa

    (@tokkonopapa)

    Hi @thwordpressorg,

    Sorry but I’ve been not able to reproduce this issue even if I follow the sequence you reported. So I’ll continue to keep track this issue.

    Thanks.

    Plugin Author tokkonopapa

    (@tokkonopapa)

    Hi H,

    Thank you for waiting.

    The version 3.0.3.1 and 3.0.3.2 are addressed to solve this issue. I assumed that it happened when you click [Search Posts] before document ready. Now click event would be fetched ASAP in new version.

    Once I’d close this issue but please feel free to post anything if you still find the problem.

    Thanks again.

Viewing 6 replies - 1 through 6 (of 6 total)
  • The topic ‘Blocked on searching posts’ is closed to new replies.