Hey @internalerror503, thanks for reaching out. First, let me say that if you have the paid version (even on another site), you should really open support ticket (http://ithemes.com/member/support.php). You definitely get priority support over there and it’s also far easier for us to track what’s going on with the ticket, get additional information, etc.
As for your issue, could you check your PHP logs and see if you can see where the failure is (or open a ticket with priority support and give access to your logs there)?
I understand how frustrating it is when you have a problem like this. I can assure you that we definitely did a lot of testing around this before releasing it, and while we are seeing a chunk of people with issues, with more than 50,000 sites already updated, it’s a very small fraction that are actually having issues. Please bear with us as we try to resolve the issues for those that have them.
@internalerror503
Could it be you are using the Google Chrome browser with an adblocker ?
dwinden
@aaron D. Campbell
Thank you for your reply, However the error logs were empty.
@dwinden
Yes, Your correct on all my browsers on multiple PC’s they all use ublock origin.
The adblocker was blocking the following URL:
https://s3.amazonaws.com/downloads.mailchimp.com/js/mc-validate.js
The list\filter was Fanboy+Easylist-Merged Ultimate List (forums.lanik.us)
White-listing this resolved the issue and returned functionality of the plugin.
The real question remains why did this 3rd party script “mc-validate.js” brake the plugin and why is it needed, Also it presents a risk, If someone hijacked that script with a malicious one then anyone’s admin panels are fare game.
I would really like to know what its for?
Hey @internalerror503,
I’m glad we found the issue! The 3rd party script is from a widely trusted source (MailChimp), but the fact that their local (inline) JS breaks if the remote JS doesn’t load is clearly and issue. I’ve just committed a fix to our internal repo that pulls that file into the plugin. The next release (I would expect it today some time) should include this fix.
Thank you very much for finding this and brining it to our attention.
@internalerror503
Mr Aaron D. Campbell forgot to mention that the script is used to validate email addresses entered into the Email Address field of the Download Our WordPress Security Pocket Guide sidebar widget …
Since that widget does not exist in the iTSec Pro version this was only an issue for the free plugin on wordpress.org as of the 5.4.0 release. The script wasn’t enqueued in any older releases of the plugin.
dwinden
@internalerror503 – Version 5.4.3 was just released specifically to fix this issue. Thanks again for reporting it.
@dwinden
@aaron D. Campbell
Thank you both for your assistance with this issue.
