invalid security token

Hi Stoetzman

Sorry you are having issues.

Go to your options page and select “Disable config caching” save and then try a scan.

Let me know how it goes.

Thanks!

tim

Did that fix your issue?

Thanks!

tim

Thanks Tim, but I can’t do anything. As soon as I go on Wordfence, or what ever heading I chose under Wordfence the error message pops up… no chance to click on anything.

Thanks
Thomas

Hi Tim,

are there any ideas or solution to my problem? Deactivated all plugins, un- and re-installed Wordfence – still can’t use Wordfence. It is actually a multisite website, this might be important to know.

Thanks
Thomas

Are you activating per blog or through the network > plugins page (I think this may be only way but want to be sure I ask)? You might actually have to remove the plugin and re-install but follow this guide to do so.

https://wordfence.freshdesk.com/support/solutions/articles/1000010321-how-can-i-remove-all-wordfence-data-or-reset-wordfence-to-the-default

Tim

Yes, activating it through the network is the only way.
I’ll follow your instructions and let you know.

Thanks
Thomas

Hi Tim,
it’s so frustrating. As soon as I click on any of the Wordfence links the popup window shows up. Even if I refresh the browser it comes right back. Is the another way to uninstall/remove it completely? via ftp or so?
Thanks

Try following this guide to reset everything. This should clear that error.

https://wordfence.freshdesk.com/support/solutions/articles/1000010321-how-can-i-remove-all-wordfence-data-or-reset-wordfence-to-the-default

tim

Just a quick something to try. Can you try deleting your browser cache and then reopening your browser and trying? We’ve had users that have said their local cache was what kept messing things up. I want to be sure we’re not missing the trees for the forest.

tim

Hi Tim,

nothing works… I also tried Worfence Assistant but wasn’t able to use that either – same error message when I tried to select “Delete all Wordfence data in your database”.
I deleted all data in the database manually, installed it fresh – but the problem still exists.

I guess I have to look for alternatives here and replace yuor plugin which would be sad, I really like Wordfence, it works fine on all my clients website except on my own… https://jobshubnct.org.au/.

Cheers
Thomas

Can you get me the info on your server from your options page? Just screenshot it and post a link or email it to Tim (at) wordfence.com

Thanks

Tim

Hi Tim,

I found the source of the problem. The following code in the wp-config.php caused the problem:

define('ADMIN_COOKIE_PATH', '/');
define('COOKIE_DOMAIN', '');
define('COOKIEPATH', '');
define('SITECOOKIEPATH', '');

Thanks
Thomas

So it was storing a cookie that was holding on to the invalid security token? Did you remove that? How did you work around it?

I’d like to have it here in case another user has the same issue.

Thanks!

tim

I think this code has been added automatically by a caching plugin which I’m not using anymore. I can’t tell you which one exactly because I have tried a few…

However, I deleted the code and now everything works fine.

Regards
Thomas

The solution to solve the error invalid security token in WordPress comments is simple by disable the Jetckpack Comments in Jetpack settings. Really simple.

More details here: