• Resolved vygon

    (@vygon)


    Hello,

    We keep getting an error occuring when trying to login stating “CAPTCHA EXPIRED: The CAPTCHA verification for this login attempt has expired. Please try again.”
    Refreshing the page can sometimes allow a login, but this usually triggers an email with a login link, however the email link says it has timed out too.

    I’ve gone through the forum for similar issues and tried a few of the recommended actions, but the error still occurs.

    I’ve renamed the object-cache.php file and I was able to login once I’d renamed the file. Reverting the file name also brought back the error.

    The page I need help with: [log in to see the link]

Viewing 15 replies - 1 through 15 (of 16 total)
  • Plugin Support litetim

    (@litetim)

    @vygon please send a report to Litespeed and share the ID generated.
    The report is sent from LSC => Toolbox => Report => click on Send to Litespeed and share the ID generated(just the ID)

    Thread Starter vygon

    (@vygon)

    Hello,

    Please see the ID here > SBFIIMMA

    @litetim: I have been looking into this issue reported by a few Wordfence users (the captcha message above is ours), and disabling LiteSpeed Cache’s object cache has worked for 3 of them who responded so far. Our implementation uses transients, and I saw a few other posts related to transients in your forum, so this probably has the same cause.

    I’m not sure yet if the object cache is returning transients that should have already expired, or if it is not returning transients that should still be valid.

    -Matt R, Wordfence QA Lead

    Plugin Support litetim

    (@litetim)

    @wfmattr please open a ticket, by sending a email to: support at litespeedtech.com
    with a request to be assigned to dev and attach this topic link.
    Thank you

    Ok, sent — hopefully this helps address vygon’s issue and the others. I will be reachable by email if there are any questions. Thanks!

    -Matt R

    Thread Starter vygon

    (@vygon)

    Hello,

    Has there been any developments on this? With our current settings we are seeing a significant increase in Bot account being created, which is far from ideal.

    Plugin Support litetim

    (@litetim)

    @vygon I have tried to reproduce the issue and I am not able to reproduce it.
    O have looked over the report and changed my settings with the ones you have. I am also talking with Matt about.
    Any hint how to reproduce, will be very helpfull 🙂
    Thank you

    • This reply was modified 6 months ago by litetim.
    Thread Starter vygon

    (@vygon)

    Hello,

    Thank you for the reply. I re-enabled the setting today and the error is still occurring, it requests further verifying which triggers an email, but following the link in the email the website says “Email verification invalid or expired. Please try again.”

    There is no obvious error or bug messages being displayed. I’m glad Matt is being helpful, can you give me pointers as to what information would be helpful for you?

    Plugin Support litetim

    (@litetim)

    @vygon we are trying to reproduce the issue.

    Thread Starter vygon

    (@vygon)

    Hello,

    Here is the previous conversation with WordFence with a suggested check from them > CAPTCHA EXPIRED | WordPress.org

    Turning off the “reCAPTCHA on the login and user registration pages” in the Wordfence settings resolves the error. I’ve noticed today the error occurs when the test mode is activated too, but if you force the browser to a new load without the cache after seeing the warning notice, the site loads you into the admin page.

    I’ve added the login page to the Do Not Cache URIs section of the Litespeed plugin, but this does not prevent the error either

    • This reply was modified 6 months ago by vygon. Reason: Added Additional details
    Plugin Support litetim

    (@litetim)

    @vygon I am following with Wordfence team and looking into the issue. Please do not close this topic

    Thread Starter vygon

    (@vygon)

    Hello,

    Thanks for the update.

    One thing I’ve noticed this week is that this error occurs with the Run reCAPTCHA in test mode too. Not sure if this is related or not, @wfmattr is this something you are aware of?<font color=”#2d2d2d” face=”Helvetica Neue, Helvetica, Arial, sans-serif”></font>

    WFMattR

    (@wfmattr)

    Yes, that is expected — the captcha test mode is intended to log the captcha scores received without blocking, but it is not meant to handle issues with a cache or other unusual plugin conflicts. Unfortunately, we haven’t been able to reproduce the issue on several sites, and we have only heard of this problem from a few people, so there may be something unusual about the setup on your site, that not many users have. If you are able to post any details about the hosting plan you are using, that might narrow down the cause — or if you’re running a VPS, then it may help to know the Redis or Memcached versions you’re using or any non-default configuration.

    Thread Starter vygon

    (@vygon)

    Hello @wfmattr, Thanks for the clarity on that.

    That is odd that you cannot recreate it. Would me sending the diagnostics report from Wordfence help you identify anything?

    Thread Starter vygon

    (@vygon)

    I’ve created a staging website were the error still occurs. @wfmattr @litetim
    I’ve hidden this behind a password, how can I share these details with yourselves?

Viewing 15 replies - 1 through 15 (of 16 total)

You must be logged in to reply to this topic.