Save & Preview buttons load the main page problem

  • Hi!
    Since updating to 4.5.1 I am experiencing a critical issue which is preventing me from using WordPress.

    When I click the Save button while editing a post, WordPress reloads the main page of my website, casing any changes to be lost. If I click the Preview button, WordPress simply opens the main page of my website in another tab.

    This doesn’t happen all the time. It seems to be triggered by certain sentences / words. Just as an example, if I write /etc/ld in a new post, everything is fine. But if I change it to /etc/ld.d, the above mentioned issue appears. This has also happened with some if statements.

    I have tired to disable ALL the plugins, to re-install Worpdress 4.5.2 from the wp-admin panel and to switch theme. None of these seem to work.

    Can you please advice on how to debug / solve this critical issue? My website is https://www.alanzucconi.com.

Viewing 9 replies - 1 through 9 (of 9 total)
  • Moderator Steven Stern (sterndata)

    (@sterndata)

    Volunteer Forum Moderator

    I can’t reproduce that on my test site.

    Please disable all plugins and set your theme to twentysixteen. Is the problem gone or still there?

    Thread Starter alanzucconi

    (@alanzucconi)

    Hi sterndata, thank you so much for your fast reply.

    Unfortunately even wit all the plugins disabled AND the twentysixteen theme, the issue is still there. It has also affected old posts, leading me to believe it could be related to WordPress 4.5.1 or 4.5.2.

    This is a GIF of the issue I am experiencing. The first time I hit Preview, it works. The second time, it just opens a tab with the main page.

    I have enabled debug in wp-config.php, but got no relevant information.

    Moderator Steven Stern (sterndata)

    (@sterndata)

    Volunteer Forum Moderator

    I cannot reproduce that on 4.5.2 with twentysixteen.

    Have you tried doing this in a new private/incognito browsing seesion? That will eliminate any cache questions.

    Thread Starter alanzucconi

    (@alanzucconi)

    Yes, and unfortunately I am still experiencing this issue.
    I have tried to:
    * Purge cache and history from Chrome
    * Using Incognito Mode
    * Using Internet Explorer
    The issue still persists.

    It seems to be triggered by certain sentences / words.

    @alanzucconi: That sounds very much like a mod_security type of issue to me. Are you able to find out from your host if mod_security (or something similar) is currently enabled for your server?

    Moderator Steven Stern (sterndata)

    (@sterndata)

    Volunteer Forum Moderator

    @girlieworks: >> That sounds very much like a mod_security type of issue to me. << Good catch! I’d bet a cup of coffee that you’re right!

    Thread Starter alanzucconi

    (@alanzucconi)

    I’ve contacted Netsons, which is hosting the website.
    I’ll let you know their answer (and if it worked) very soon.

    Thread Starter alanzucconi

    (@alanzucconi)

    Yes, it was indeed a ModSecurity issue.

    [Wed May 25 17:46:23 2016] [error] [client 82.69.229.6] ModSecurity: Access denied with redirection to https://www.alanzucconi.com/ using status 302 (phase 2). Matched phrase “/etc/ld.so.conf” at ARGS:content. [file “/usr/local/apache/conf/modsec_vendor_configs/OWASP/rules/REQUEST-30-APPLICATION-ATTACK-LFI.conf”] [line “29”] [id “950005”] [rev “4”] [msg “OS File Access Attempt”] [data “Matched Data: /etc/ld.so.conf found within ARGS:content: sudo nano /etc/ld.so.conf.d/caffe.conf”] [severity “CRITICAL”] [ver “OWASP_CRS/3.0.0”] [maturity “9”] [accuracy “9”] [tag “Host: https://www.alanzucconi.com”%5D [tag “application-multi”] [tag “language-multi”] [tag “platform-multi”] [tag “attack-local file inclusion”] [tag “OWASP_CRS/WEB_ATTACK/FILE_INJECTION”] [tag “WASCTC/WASC-33”] [tag “OWASP_TOP_10/A4”] [tag “PCI/6.5.4”] [hostname “www.alanzucconi.com”] [uri “/wp-admin/post.php”] [unique_id “V0XIzy78lWUADiUVSZsAAAAM”]

    Thank you very much for the support! <3

    Booyah! You’re welcome, @alanzucconi!

Viewing 9 replies - 1 through 9 (of 9 total)
  • The topic ‘Save & Preview buttons load the main page problem’ is closed to new replies.