Query whitelist one’s home url

  • mireillesan

    (@mireillesan)


    6 years, 6 months ago

    Just wondering what regex pattern I should use to whitelist my home_url?

    When my purchasers wants to update their theme/plugin and they use a license key to access the latest version, they are blocked (Spam form submission denied).

    It would be nice if the plugin would support EDD in the future by default, similar to woocommerce.

Viewing 6 replies - 1 through 6 (of 6 total)
  • Plugin Author gioni

    (@gioni)

    6 years, 6 months ago

    If “Spam form submission denied” was logged with the home URL without any query string, you need to add to the whitelist only this \/. There is no necessity to implement support EDD (installed on a small fraction of websites) if you’ve properly configured the whitelist.

    Thread Starter mireillesan

    (@mireillesan)

    6 years, 6 months ago

    Hi Gioni,

    Sadly, it still doesn’t work.
    When testing a license key, I keep getting Spam form submission denied, Bot detected message.

    Referrer
    https://my-own-website.com/

    Thread Starter mireillesan

    (@mireillesan)

    6 years, 6 months ago

    I’ve been checking this on localhost, but then I ended up testing this on a live website, then the whole url changes to something like this

    ?edd_action=check_license&license=xxx&item_name=theme_name

    xxx = is a generated license key that changes all the time.

    Is using /?edd_action=check_license enough?

    Plugin Author gioni

    (@gioni)

    6 years, 6 months ago

    This is better and should work:

    {\/\?edd_action=check_license&license=\w+&item_name=\w+}

    Play here: https://regex101.com/r/SLH7ZN/1

    Note the important \w+ REGEX metacharacter.

    Thread Starter mireillesan

    (@mireillesan)

    6 years, 5 months ago

    Hi Gioni,

    I know too little about regex at this moment. Sorry. 🙁

    While we’re at this subject, one last thing (hopefully).
    I spotted that the paypal url is also denied. Is this correct?

    {https:\/\/www.paypal.com\/.*}
{\/\index\.php\?edd-listener=\IPN}

    Is there also a way to (temporarily) disable the anti-spam feature inside WP Cerber? That way I won’t receive the usual Form submission denied messages on pages where there are no forms.

    I also noticed that \/ still doesn’t work. I still receive Form submission denied on my main website url. Perphaps adding brackets would work? {\/}

    • This reply was modified 6 years, 5 months ago by mireillesan.
    • This reply was modified 6 years, 5 months ago by mireillesan.
    Plugin Author gioni

    (@gioni)

    6 years, 5 months ago

    Please show me that blocked URL entirely, I mean in full. If it contains /index.php you have to include it in an expression too.

    This expression {https:\/\/www.paypal.com\/.*} makes no sense because whitelisting is about your website, not anyone else. Plus you cannot use a domain name in an expression.

Viewing 6 replies - 1 through 6 (of 6 total)

The topic ‘Query whitelist one’s home url’ is closed to new replies.