WordPress Comments Via Official AMP And Mod_Security

  • Resolved mddsharp

    (@mddsharp)


    4 years, 2 months ago

    Back when I first discovered AMP, I installed AMP for WP thinking it was the official plugin. I realized a day later it wasn’t, then deactivated and deleted it and installed this AMP plugin.

    Tonight, a user on my site tells me she got a error when attempting to leave a comment via an AMP page but had no problem doing doing so via the non-AMP page.

    The error came with a Learn More link which goes to an article on the AMP for WP website. Hostgator ended up whitelisting my domain for mod_security so I can’t recreate it.

    But my concern is how is AMP for WP still in the system after I deactivated and deleted, and still active on AMP pages created under this plugin?

    • This topic was modified 4 years, 2 months ago by mddsharp.
Viewing 9 replies - 1 through 9 (of 9 total)
  • Plugin Author Weston Ruter

    (@westonruter)

    4 years, 2 months ago

    It could be that the AMP page served from the AMP Cache was the old one generated by the other plugin. You can’t see any trace of it on your site when accessing your own domain, right?

    Thread Starter mddsharp

    (@mddsharp)

    4 years, 2 months ago

    The error I got earlier was on a article I wrote 3 days ago. I haven’t had the other plugin installed in over a year.

    I see no evidence at all of the other plugin. Not within the dashboard or via wp-content in my hosting.

    I am only bringing this up because I didn’t want you and the others dealing with this as it comes up when it’s related to the other plugin. Plus, to me, it seems like a glaring security issue.

    Thread Starter mddsharp

    (@mddsharp)

    4 years, 2 months ago

    And, I was able to recreate the error by going to the origin server AMP page that isn’t in the Google cache.

    Plugin Author Weston Ruter

    (@westonruter)

    4 years, 2 months ago

    Please share the list of the active plugins you have.

    Thread Starter mddsharp

    (@mddsharp)

    4 years, 2 months ago

    404 To Homepage

    Akismet Anti-Spam

    AMP

    Quick fix for amp-wp#3409 (you sent me)

    Atomic Blocks – Gutenberg Blocks Collection

    Classic Editor

    Cloudflare

    Contact Form 7

    Easy WP SMTP

    Glue for Yoast SEO & AMP

    Insert Headers and Footers

    Jetpack by WordPress.com

    Smush

    User Switching

    Widget Logic

    Widgets On Pages

    WP SEO Structured Data Schema

    WP User Avatar

    Yoast SEO

    Plugin Author Weston Ruter

    (@westonruter)

    4 years, 2 months ago

    @mddsharp On the AMP page you referenced on the other topic, I can see in the HTML this markup:

    <div class="amp-wp-default-form-message" submit-error=""><template type="amp-mustache"><p class="{{#redirecting}}amp-wp-form-redirecting{{/redirecting}}">{{#message}}{{{message}}}{{/message}}{{^message}}Your submission failed. <small>The server responded with {{status_text}} (code {{status_code}}). Please contact the developer of this form processor to improve this message. <a href="https://amp-wp.org/?p=5463" target="_blank">Learn More</a></small>{{/message}}</p></template></div>

    It is linking to https://amp-wp.org/?p=5463 which is the website for this plugin. So that all seems to be fine.

    Plugin Author Weston Ruter

    (@westonruter)

    4 years, 2 months ago

    In looking at the AMP cache version, I see the same link to https://amp-wp.org/?p=5463

    So I don’t see any indication of the AMP for WP plugin.

    Thread Starter mddsharp

    (@mddsharp)

    4 years, 2 months ago

    OK, I feel like an idiot.

    I guess I just looked at the URL and saw AMP-WP.org and in my haste figured it was the AMP for WP site.

    I will go to my corner now.

    Plugin Author Weston Ruter

    (@westonruter)

    4 years, 2 months ago

    Thanks for raising the concern nonetheless!

Viewing 9 replies - 1 through 9 (of 9 total)
  • The topic ‘WordPress Comments Via Official AMP And Mod_Security’ is closed to new replies.