ManageWP blocked

Hi I’ve released version 1.5.5 which added a filter wp2sv_trusted_request to allow third-party plugin to bypass 2-step verification.

Pls notify ManageWP about this. they can bypass verification process by add_filter(‘wp2sv_trusted_request’,__return_true);

You also can do it your self before ManageWP fix this, by adding add_filter(‘wp2sv_trusted_request’,__return_true); to wp-content/plugins/worker/src/MWP/EventListener/FixCompatibility.php
Search for public function fixDuoFactor() then add add_filter(‘wp2sv_trusted_request’,__return_true); on top of that function (before if…)

The code after updated should be:

public function fixDuoFactor()
    {
		add_filter('wp2sv_trusted_request',__return_true);
        if (!$this->context->isPluginEnabled('duo-wordpress/duo_wordpress.php')) {
            return;
        }

        $this->context->addAction('init', array($this, '_fixDuoFactor'), -1);
    }

@nyssamccanmore you also can use
add_filter(‘wp2sv_trusted_request’,function(){return true;});

more about __return_true function https://codex.wordpress.org/Function_Reference/_return_true it’s just a function which return true.

• This reply was modified 5 years, 6 months ago by as247.

Hmm, only 2.0 version got compatibility issue again, because i was try to improve the security. but seem it blocks many apps which not support 2-step.

Back to your issue, if ManageWP got updated and came without my patch, so you need to add it again.

I have a test site running Worker 4.6.2 with my fix code above. It get disconnect on wp2sv 2.0, but fixed in wp2sv 2.0.1

• This reply was modified 5 years, 5 months ago by as247.