• Resolved Tom

    (@tommaso76)


    Hello,
    after updating to Contact Form 5.4, Cerber started blocking form submissions.
    The error I see in the cerber log is the following:

    /wp-json/contact-form-7/v1/contact-forms/214/feedback?_locale=user
    HTTP 403 Forbidden

    /wp-admin/admin-ajax.php?action=rest-nonce
    HTTP 400 Bad Request

    Please, can you check this issue, thank you,
    Tom

Viewing 15 replies - 1 through 15 (of 17 total)
  • celilsesan

    (@celilsesan)

    its the same for me.

    Plugin Author gioni

    (@gioni)

    Hi! Please make a screenshot of those log rows.

    @celilsesan

    Thread Starter Tom

    (@tommaso76)

    After several attempts, I think I have found a temporary solution:
    I disabled WP Fastest Cache only for the wordpress page that contains the CF7 form.
    Currently everything seems to be working correctly.
    I believe the problem lies between the cache, CF7 and Cerber.

    I’ve heard a few people who have had such problems with cache plugins over the past few days.

    Yes! I have a reviews plugin and am experiencing the same issue. Although the namespace is allowed i’m still receiving these errors!

    I’ve disabled all optimisation/caching plugins and Cloudflare is in Development Mode/ bypassing any caching.

    I still have the same errors.

    • This reply was modified 3 years, 12 months ago by ALPS I.T..

    I think this problem is caused by security plugins. I disabled the security plugin. I will try.

    Does it fix for a while after clearing the cache? for 6-10 hours and fail again?

    Thread Starter Tom

    (@tommaso76)

    The problem is related to WP_NONCE system + WP Fastest Cache (WP Cerber is not involved in this issue).

    I have found the “solution” (please note the quotation marks), check this webpage:
    https://www.wpfastestcache.com/tutorial/wordpress-nonce-cache/
    We need to set cache timeout every 10 hours….

    There was no such problem 1 month ago. Even though we made the cache time for 5 days, we had no problem. What happened, we started having such a problem?

    I have this problem as well with LS Cache. Why is this problem marked as ‘resolved’? I don’t see a solution other than turn off cache. But that is only a temporary workaround and not a solution.

    Plugin Author gioni

    (@gioni)

    @weekender Probably because Tom said “WP Cerber is not involved”. Try to clear the cache. Does it help?

    This is still not resolved, I am facing the same issue:
    Post to issue

    @gioni You’re right. I’ll post this problem to LS Cache forum.

    I downloaded asset cleanup and went step by step into unloading the js and css on the contact form page, ironically, one of the style sheets and js on your version 5.4 was the issue. I unloaded it and voila! everything went back to normal.
    Those are the stylesheet/js for reference:
    wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.4
    wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.4

    I thought if someone has my case, this would help!

    Thread Starter Tom

    (@tommaso76)

    @minosara Thank you very much for your message.
    In fact, the new CF7 version is the issue.

    We’ve started getting this issue too. It could be related to Cloudflare APO caching the nonce. Our site has had issues with APO never actually clearing its cache despite the service claiming there’s a maximum cache time.

    I noticed when we submit a contact form, we get a 400 BAD REQUEST on the POST URL /wp-admin/admin-ajax.php?action=rest-nonce with a response saying rest_cookie_invalid_nonce. Then a GET request for the same URL is made but the endpoint doesn’t seem to exist because the response is just a 0 (this submit was made when not logged into admin).

    EDIT: I think part of the difficulty in testing this behavior is that when web inspector is open, APO cache is bypassed. I’m not sure how or why this happens but it doesn’t seem to be the case in Firefox so I was able to replicate and debug the issue there.

    • This reply was modified 3 years, 10 months ago by flynsarmy.
Viewing 15 replies - 1 through 15 (of 17 total)
  • The topic ‘Contact Form 7 version 5.4’ is closed to new replies.