[resolved] Help, can't login/logout correctly thru widget.

[kaspir]

Hi, great plugin!

I got the last post and avatar working. I just can't use the login/logout thru widget yet. It just refreshes the page or gives me a failure when trying to logout thru the widget. And when logging in, any phpBB user I try only redirects to the phpBB login screen where I have to re-type username/pw.

I feel like I've been all up and down thru these forum instructions, I'm not sure what I missed, if anything. I should add, that when logging out of phpBB, it does log out successfully then from both.

I have followed these:
https://www.axew3.com/w3/cms-plugins-scr ... tegration/
https://www.axew3.com/w3/2017/01/instal ... -to-hints/

phpBB settings:
Cookie domain is: .thetopfew.com
Cookie path is: /
Username change: off
User reuse email: off

I have also tried to sent my port to 443, ssl port, in my config.php

You can see, or test it freely below. I do not allow WP accounts to be made, "Anyone can join" option is unchecked. Accounts have always been for the forums alone.

My WP site is https://thetopfew.com
phpBB site: https://forums.thetopfew.com

Separate SSL, from Let's Encrypt. I'm really wondering if I should redo this into a single SSL, considering my file structure is like so: [c]/public/wordpress/phpbb/[/c]

Could you please enlighten me what I missed?

[axew3]

no the SSL should not be the reason, but have you try to setup both with same?
i get 403 error at https://thetopfew.com/ right now so i can't test unfortunately in this moment your site!

[kaspir]

no the SSL should not be the reason, but have you try to setup both with same?
i get 403 error at https://thetopfew.com/ right now so i can't test unfortunately in this moment your site!

You're right! Wordfence just altered my htaccess file yesterday with this crap and even blocked me from admin page just now.. wtf.. some wordfence auto-update...

Code: Select all

Your access to this site has been limited

Your access to this service has been temporarily limited. Please try again in a few minutes. (HTTP response code 503)

Reason: Blocked by login security setting.

Important note for site admins: If you are the administrator of this website note that your access has been limited because you broke one of the Wordfence blocking rules. The reason your access was limited is: "Blocked by login security setting.".

If this is a false positive, meaning that your access to your own site has been limited incorrectly, then you will need to regain access to your site, go to the Wordfence "options" page, go to the section for Rate Limiting Rules and disable the rule that caused you to be blocked. For example, if you were blocked because it was detected that you are a fake Google crawler, then disable the rule that blocks fake google crawlers. Or if you were blocked because you were accessing your site too quickly, then increase the number of accesses allowed per minute.

If you're still having trouble, then simply disable the Wordfence advanced blocking and you will still benefit from the other security features that Wordfence provides.

If you are a site administrator and have been accidentally locked out, please enter your email in the box below and click "Send". If the email address you enter belongs to a known site administrator or someone set to receive Wordfence alerts, we will send you an email to help you regain access. Please read this FAQ entry if this does not work.

Never had any issues with it before the last update. Possibly from all the testing from logging IN/OUT of the site. But this doesn't explain why YOU got a 403 error. That's very strange. I can access my site from multiple computers still.

[kaspir]

Back to why you can't visit my page is a high concern of mine. I've reviewed wordfence logs, it clearly shows you here:

Code: Select all

Italy Perugia, Italy arrived from https://www.axew3.com/w3/forums/posting.php?mode=reply&f=2&t=462 and visited https://thetopfew.com/

It shows this like several dozen times, not sure how many times you clicked, didn't count.

I'm so clueless as to why YOU couldn't access, it seems I broke one of my rules during all the logging in/out with this widget, and I fixed that no prob...

Mind trying again? Becuz, I can access from 4 different computers plus my mobile just fine here in the states, and I have NO country ranges blocked.

[axew3]

The submitted form was invalid, try submitting again.
I get this now while i try to test register into phpBB and can't complete registration
I will return over.

and yes i'm from Perugia, Italy

[kaspir]

What the heck.. I did do some edits to htaccess. I hope this happened perhaps while I was uploading it. But to be honest, I just had a user register on the 19th with no problems. AND I just created a test account just now with no errors: http://prntscr.com/en2ncp

I have no idea.. As you know, problems have to be reproduced in order to fix. I would love to know if others encounter this problem as well.


UPDATE - I am now able to login thru WP (this was due to a rewrite rule). Still can NOT logout however.