DISQUS Login causes 500 – Related to BPS?

It looks like the Form action link may be incorrect, unless you do want folks to login/connect to your /blog website Database and not your main website DB. Or there is a problem with your bbPress form setup/config.

<form method="post" action="https://www.echoparkforums.com/blog/wp-login.php" class="bbp-login-form">

The website/wordpress is in a sub directory install at /blog. There is only one database. It points people to the main domain for all front end parts of the website.

I believe the bbpress login form is working too.

Do you think that maybe BPS is blocking this because it is an outside service requesting access? I also added the custom code that denies xmlrc requests through BPS.

Ok then put BPS in Default Mode on the Security Modes page and test the login form.

So when I go to default mode, it saves the current .htaccess?

K I will try. I know default mode is there I’ve just never used it. I do my own ftp file downloads before editing the .htaccess codes etc.

brb

“..because it is an outside service requesting access”. I left a comment with my Disqus account on that blog post and it was posted successfully. The Disqus popup window is a 3rd party popup that loads from the Disqus website and not your website so your website is not a factor in that equation at all.

You can either save your .htaccess files on the Backup & Restore page or just select BulletProof Mode again and click the Activate button. Whichever is simpler for you.

So because it loads from the disqus website, might this be the reason why it is being blocked?

Ok let me check on this, brb.

Nope, not possible. BPS would not be able to block Disqus since BPS is installed on your website and not the Disqus website. The login popup opens a login page on the Disqus website and NOT your website.

I have gone through the entire process of logging in and out of Disqus and posted 2 test posts on the blog link you posted above without any problems. Have you checked your BPS Security Log for anything related to Disqus or anything related to your login page?

I think you may be confused about the link I’m referring to. The problem is not logging in or out of Disqus, Twitter, Google, etc. The link I am referring to is the one that gives you the option to log into the website, with the link text being the website name. Here’s an image of what I see:

[IMG]https://i.imgur.com/jdkseXu.jpg[/IMG]

If you copy the link address without clicking it, it copies this:

https://www.echoparkforums.com/2014/03/interview-art-meza-lowriting-shots-rides-stories-chicano-soul-podcast/#

However, when you click on it, it gives you a pop up window that does point to my site, to this link:

https://www.echoparkforums.com/blog/wp-login.php

Now that I tried the pop up link, it worked, and I haven’t changed anything–i don’t know why it works now.

But before, it led to the 500 at this address. And when copying-pasting the address on a regular browser, it would take you to the link/login.

image

<a href="https://imgur.com/jdkseXu"><img src="https://i.imgur.com/jdkseXu.jpg" title="Hosted by imgur.com" /></a>

When you scroll down to the DISQUS comment template, there will be a “Login” at the top right of the DISQUS commenting system.

So I am not testing the Disqus Login?

Ok i see your screenshot but i still do not understand what you want me to test. can you add more specific details. Ie step 1 do x, step 2 do x….

Ok i figured it out. I see the 500 error. Now go to your BPS Security Log and post that log entry.

Cool.

BPS log does not show an entry for these 500 errors…

I don’t know what other log to check. For security plugins, it’s just BPS and wordfence that I have activated, but WF just deals with logins, blocking login attempts, etc.