Support » Plugin: Memphis Documents Library » Faulty Nonce Check Error

  • “mDocs Error: Memphis has terminated due to a faulty nonce check. This check is needed to deter Cross-site scripting security vulnerabilities”

    We are getting this error still on two separate sites. All plugins have been disabled, Caches cleared, Caches disabled, Theme changed to 2019, still no difference.

    Please advise on how to fix this.

Viewing 7 replies - 1 through 7 (of 7 total)
  • Plugin Author bhaldie

    (@bhaldie)

    what type of server are you running? Linux or Windows?

    Thank you for your reply. We’re running Linux.

    Plugin Author bhaldie

    (@bhaldie)

    thank you for the lovely review 🙂

    as for your issue its caused by the website request not matching. Are you running your WordPress instance on a sub domain?

    Also check your apache error logs for more information to the error.

    Please report back your error log

    I’ll be happy to write an updated review if we can get this working. Right now I’m facing a breach of contract because of this error. That’s where my review is coming from.

    We are not running the site on a sub-domain. The server is hosted by SiteGround, one of the best server/server teams we’ve worked with.

    When you say the website request isn’t matching: matching with what? What should I be looking for? The site was created on a temp URL, then migrated to the live URL via BackUp Buddy. If that could cause an issue (perhaps not updating the URL correctly), where would I look for the incorrect entry? Where in the Database?

    I went through the server logs with the server team. There are no Apache errors reported.

    Thank you for your assistance.

    Plugin Author bhaldie

    (@bhaldie)

    the migration could certainly cause issue with domain name matching. Without know exactly how Backup Buddy works you can run into issue with domain name matching in the database most will be contained in the options table, but can also be found in the content as well and user data.

    I went through the database and there aren’t any references to the temp URL. Everything is referencing the correct URL.

    From your earlier message: When you say the website request isn’t matching: matching with what? Where?

    Isn’t that error message produced by the plugin? I’ve searched extensively on the internet and the only reference to that exact error message is with your plugin.

    Thanks

    Plugin Author bhaldie

    (@bhaldie)

    a nonce check is required for security, a hash is generated and when the Ajax request is sent that hash needs to match the incoming hash. If they don’t match WordPress is shut down.

    I don’t recommend this but if you want you can open the file mdocs-localizaion.php, head to line 49 and comment it out:

    
    if(check_ajax_referer( 'mdocs-ajax-nonce', '_mdocs_ajax_nonce',false)) {'
    

    then goto line 210 and comment out lines 210-212:

    
    } else {
       wp_die(__("\n\nmDocs Error: Memphis has terminated due to a faulty nonce    check.  This check is needed to deter Cross-site scripting security    vulnerabilities.\n\n", 'memphis-documents-library'));
    }
    
Viewing 7 replies - 1 through 7 (of 7 total)
  • You must be logged in to reply to this topic.