• The problem we are trying to solve is multilevel.

    We have installed the ConveyThis plugin on our website.
    After installation, we noticed that when we switch to a second language, errors occur on our site.
    It is not possible to authorize, leave reviews, or simply register.
    There was always an error!
    (
    Sorry, you are not allowed to continue.
    Your request looks suspicious and looks like the automatic requests generated by spam programs, or it has been denied by the security policy set up by the website administrator.

    If you think you may have complied with this request, please let us know.

    RID: 7AEKISHNJ5Q4PEGCJPZBHYOO)
    We wrote to the technical support for the ConveyThis plugin.
    We were told that there was a problem and were given recommendations for fixing.

    Thank you for contacting our support team!

    After checking your site, we found that it doesn’t allow to load styles and scripts on the visual editor (because your site is loaded on our domain name). If you want to use visual editor, you would need to update “Cross-Origin Resource Sharing” policy on your end. You can find more details about CORS here: https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS

    When we fixed the settings, the analysis showed that there was a conflict with the WP Cerber Security plugin.

    We checked that the CORS settings had default values, set the broadest rights for them, as advised by the plugin’s technical support, CORS is allowed from any domain, but this did not make adding a comment work.
    We conducted an independent check, judging by it, the actions are blocked by another plugin in your WordPress system, in the tracking it shows that the system checks the opened link in Cerber and it returns a ban on opening code. Unfortunately we don’t have any web development specialists, so we can’t tell you how to add ConveyThis generated URIs to Cerber plugin exclusions. Try to check this information with the developers of these plugins or simply disable the Cerber plugin.
    Trace of webserver requests, when trying to add a comment, left on the path /tmp/strace_apache.log

    After that, we disabled the WP Cerber Security plugin.
    And they did a new analysis. And we saw that there was a new error.

    Hi, your recommendations didn’t work. The problem is not solved.

    An error occurs that there is no such page. The reason is that the rule of the redirection rule of the WordPress system does not work, since the real file /en/wp-comments-post.php does not exist and in fact the request looks like http://tf6.ltd/ index.php? / en / wp-comments-post.php The check shows that the redirect reaches the moment a request of the form
    SELECT wp_posts. * FROM wp_posts WHERE 1 = 1 AND wp_posts.post_name IN (‘404’) AND (\ n 0 = 1 \ n) AND wp_posts.post_type = ‘wp_template’ AND ((wp_posts.post_status = ‘publish’)) GROUP BY wp_posts.ID ORDER BY wp_posts.post_date DESC “, 236, MSG_DONTWAIT, NULL, 0) = 236

    Collecting data and after that it cannot generate the page http://tf6.ltd/en/wp-comments-post.php from this and returns a 404 error, since the page was not created, which means it is missing. As I wrote earlier, we cannot provide deep analytics of this problem, since we are not engaged in web development and the reasons for this behavior of WordPress when generating the plugin page are unknown to us. We can only track the external manifestations of the logic of the PCP of the site engine in the form of actions of the web server and queries to the database.

    After all these problems, we send a request for a solution to the problem. to WordPress and ConveyThis plugin technical support.

    You have the ability and knowledge to solve this problem.

    The page I need help with: [log in to see the link]

Viewing 1 replies (of 1 total)
  • Plugin Author gioni

    (@gioni)

    It seems that the root cause is how the support of the second language is implemented programmatically. Your multilanguage plugin generates and uses URLs that don’t exist (e.g., /en/wp-comments-post.php). Moreover, those URLs contain executable extensions (PHP in your case), which WP Cerber monitors for. The quick and dirty workaround here is disabling “Traffic Inspector”.

    The issue with user registration and authorization can be fixed by using a custom login page: https://wpcerber.com/how-to-rename-wp-login-php/

    The issue with commenting can possibly be solved by using a custom comment URL available in the professional version of WP Cerber.

Viewing 1 replies (of 1 total)
  • The topic ‘ConveyThis plugin integration problem with WordPress’ is closed to new replies.