POST action not blocked?

  • Resolved KMidas

    (@kmidas)


    12 years, 1 month ago

    Hello Pascal,
    I noticed that the plugin still allows users from forbidden countries to post comments, please see the line from the log file:
    27.159.227.44 – – [25/Mar/2014:14:45:41 +0400] “POST /wp-comments-post.php HTTP/1.1” 302 20 “http://scooter777.ru/article/141” “Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 2.0.50727 ; .NET CLR 4.0.30319)”

    Maybe this is due to WP Super Cache installed?

    https://wordpress.org/plugins/iq-block-country/

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author Pascal

    (@iqpascal)

    12 years, 1 month ago

    Hi,

    Yes this probably is related to the usage of the WP Super Cache. You have to be able to retrieve the page / blog post first before you can leave a comment on them. So if a banned country is able to retrieve the post they can also leave a comment.

    Although I might alter that behavior in the future if people request to treat this page differently 🙂

    Thread Starter KMidas

    (@kmidas)

    12 years, 1 month ago

    Hello Pascal,

    Yes, it is right – all the caching plugins use .htaccess and the server shows pages before any PHP code works 🙁
    If you could also made protection from POST method, it would be so great!!!

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘POST action not blocked?’ is closed to new replies.