access to save /wp-admin/admin-ajax.php

Hi @badolm,

I’m sorry about your issue but I can’t get your situation especially about:

when try to save /wp-admin/admin-ajax.php settings changes saved …

So could you let me know about the followings?

1. About your settings of IP Geo Block
I assume that you enable “Prevent Zero-day Exploit” at “Admin ajax/post” on “Validation target settings“.
Am I right? If so, could you try to disable it and try again? This try is helpful to identify the issue.

2. Where and what operation did you do when you got an error?
For example, something like this:

On the settings page of IP Geo Block, when I push the “Save Changes” button, I got an error page saying “Forbidden.”

3. Which URL was the problem?
It’s very helpful if you let me know the url when you got your issue. Of course you can replace your domain part to something like “example.com”.

I appreciate your time to identify the issue.
Thanks.

Firstly tks for the reply

1-i tried with and without …gets the same
2- on any page that i try to save settings as at modifying theme settings
3- for example trying to save settings at https://www.xxxx.com/wp-admin/admin.php?page=panel&ip-geo-block-auth-nonce=5663df4fb7

Looking at the IP Geo Block Log i found badtag POST[80]:/wp-admin/admin-ajax.php

Hi @badolm,

Thank you for the details. Your information is very helpful for me.

Unfortunately, this issue can’t be solved unless I update my code. So I’m very sorry for your inconvenient but please follow one of the below:

– Deactivate IP Geo Block
– Disable Admin ajax/post (uncheck “Block by country” and “Prevent Zero-day Exploit“)
– Copy “/wp-content/plugins/ip-geo-block/wp-content/ip-geo-api/drop-in-sample.php” to “/wp-content/ip-geo-api/drop-in.php” (or “/wp-content/uploads/ip-geo-api/drop-in.php”) and add the following snippet at the bottom of “drop-in.php”.

function my_bypass_admins( $queries ) {
    $whitelist = array(
        'panel',
    );

    return array_merge( $queries, $whitelist );
}
add_filter( 'ip-geo-block-bypass-admins', 'my_bypass_admins' );

And could you let me know the name of the theme you’re using. I guess your theme send some script tag or something via ajax. I should check and confirm my countermeasure is OK.

I highly appreciate your cooperation!

• This reply was modified 8 years, 3 months ago by tokkonopapa.
• This reply was modified 8 years, 3 months ago by tokkonopapa.

Hi @badolm,

I’d appreciate you to try my new version 3.0.0 and enable “Prevent Zero-day Exploit” feature at “Admin area”. Then your issue may go away.

Thanks

thanks! i will try asap! and let you know

perfect
its working with the selected option
thanks a lot!

and for info i using sahifa theme

• This reply was modified 8 years, 3 months ago by OLM.

well bad news… still have a problem with ajax .. instanow doesnt work pictures pop up at new page…disabling the ip geo plugin it work again

Thank you for your testing.

Do you mean “instanow” is this? : https://www.ads-software.com/plugins/instanow-lite/
And could you try and test after you enable (select) “InstaNOW” in “Exceptions” at “Plugins area“?

For my side, I’ll check it.
Thanks for your reporting.

well i tried selected Force to load WP core / block by country/and instanow selected at exceptions and didnt worked

forget! its working now with the the option as i said above !
If you need help doing some tests, just let me know and i will do whatever is possible .
Thanks for your time my friend!

Grad hear that!