“Invalid/missing blog nonce. All core actions require a valid nonce.”

Jetpack debug tools responds:

“Debug
Unknown error

An unknown error has occurred.

If you continue to get this error, please check out our?troubleshooting guide?or?contact support.”

I disconnected Jetpack, and reconnected. So far the “Jetpack encountered an error…” message is gone.

I then go to Jetpack>Social and try to Connect an Account. I choose to connect to Facebook, it sees that I’m logged in, and finds the FB page I want to connect to. When I hit Confirm, it comes back with the error:

Error connecting account. Could not update the Jetpack Social connections on the remote Jetpack site. No Jetpack Social connection created.

What should I try now?

Thanks

“Invalid/missing blog nonce. All core actions require a valid nonce.” I get this same error now with every single one of my websites – that’s 17 – I upgraded to paying for the Social module and now the only problem is the instant sharing with Instagram still does not work. It hasn’t worked for me since it was added. IF Jetpack is no longer allowing the FREE use of the Social sharing then please just say so and take that module out of the selection.

Hi @highrollerusa,

Thanks for reaching out about Jetpack Social.

I was going to take a look and see if we could get more clarity on the issue at hand, but it seems like Jetpack plugin isn’t active on your site right now. If you’d like to keep troubleshooting, could you activate the Jetpack or Jetpack Social standalone plugin on https://HighRollerUSA.com?

Hi @jolenemacinjax,

To start with, I can reassure you that social sharing is still part of the Jetpack free plan—up to 30 shares per 30 days. It sounds like you’ve upgraded now though, which means you’ll have access to unlimited shares per 30 day period.

In order for us to help you with your issue, could you please?start your own?thread as per the Forum Welcome guidelines?

https://www.ads-software.com/support/plugin/jetpack#new-post

Alternatively, since you have a paid Jetpack Social plan, you have access to our priority support. You can contact us through this form and mention this forum thread in your message.

Thanks!

Hi Leah, actually Jetpack Social is installed and connected. (Sorry don’t’ know how to include a screenshot).

Having the same notice error on Jetpack Social: Invalid/missing blog nonce. All core actions require a valid nonce.

Hi @bossdigipreneur

Could you please start your own thread, as per the Forum Welcome guidelines

https://www.ads-software.com/support/plugin/jetpack#new-post

Thank you!

Hi @highrollerusa,

Thanks for getting back to us! I checked and at present your website is not reporting as connected with Jetpack. It looks like there’s an issue with the site’s XML-RPC file, which is causing the problem:

https://<YOUR_SITE_URL>/xmlrpc.php

This file is used by Jetpack and other plugins and apps to connect to your site. It must return the following message:

XML-RPC server accepts POST requests only.

You can see a working example here:

https://wp.cloud/xmlrpc.php

Your site is showing a blank page instead of the required message, which is preventing Jetpack from connecting.

This is most likely because a plugin, theme, or your site’s wp-config.php file has extra “blank spaces” (new lines, spaces, tabs, …) before the first <?php in the file.

I’d recommend following the troubleshooting steps listed here to fix that:

https://jetpack.com/support/getting-started-with-jetpack/what-do-these-error-messages-mean/blank-lines-xmlrpc/#troubleshooting

Let us know how that goes!

Thank you @gaurav984 for tracking that down. I’ve started the troubleshooting, but have a fundamental question: The site in question is a production server, is it possible to do the troubleshooting (disabling all themes, and plugins) via the WordPress Site Health>Troubleshooting section? That way I don’t have bring down the production server to run the tests.

A few other questions:

Kinsta.com reports that XML-RPC has been deprecated. Is that true?

My site is hosted by A2Hosting.com, and I run the following plugins:

A2 Optimized the setting for blocking XML-RPC is disabled. It gives confusing information: the title says it only blocks “unauthorized” request, while the description says it disables the service.

Block Unauthorized XML-RPC Requests (Disabled)

Benefit: Improves the security of your website.
How-it-works: Disables XML-RPC services. Although XML-RPC API is safe and is enabled by default, some WordPress security experts suggest disabling it.

Wordfence security: Are there any conflicts I should be aware of?

Thank you

OK, I found the source of the problem: Really Simple SSL plugin.

I have 3 security related plugins on my site:
A2 Optimized
Really Simple SSL
Wordfence

I determined that Wordfence was not involved with this issue.

A2 Optimized has a security option to “Block Unauthorized XML-RPC Requests”. While there are some notes to suggest that this feature allows Jetpack and WordPress requests (https://github.com/a2hosting/a2-optimized-wp, “Rejects XML-RPC requests except for whitelisted services, such as Jetpack.”), it isn’t well documented. When enabled, it does seem to be working to block “unauthorized” requests (when I check manually, the xmlrpc.php page returns “XML-RPC is disabled”), and yet Jetpack social can still connect to services.

Really Simple SSL also has a security feature to disable XML-RPC, and this seems to be the culprit.
Really Simple SSL > Settings > Hardening > Disable XML-RPC > OFF
This brought back the messages on the xmlrpc.php page which had previously been blank.

So, the two competing settings were the problem. When I disabled the Really Simple SSL setting, Jetpack Social was able to connect and operate as expected.

Hi @highrollerusa, Glad to hear it’s sorted out now! Using more than one plugin for a specific functionality can cause unseen issues like the one you encountered.

I am going to mark this thread as resolved. Please open a new thread if you need help again.