redirect loop after update WordPress 4.4.1

Disabling Modsecurity worked for me.

Maybe someone can move my thread to right forum (troubleshooting instead of installation):
https://www.ads-software.com/support/topic/redirect-loop-solution-disable-modsecurity?replies=1

I ran into this and contacted my host. The minute I said I was getting redirects, they knew what was going ont and said it is caused by something in WP 4.4.1 and a MODSEC rule. For my sites they changed the rule based on the domain name. My site is now working with no changes to the wordpress permalink.

I have several WordPress sites that were effected by this problem. I found the same workaround (inserting index.php in the Admin URL).

It seems that the point of 4.4.1 was to address a security vulnerability. I suspect this has impacted mod_security.

Your host should be able to turn off mod_security for your site. If not, simply use /wp-admin/index.php as your admin URL and bookmark it!

I added these lines to the wp-config.php file:

define('WP_HOME','https://INSERT_YOUR_DOMAIN.com');
define('WP_SITEURL','https://INSERT_YOUR_DOMAIN.com');

While this does negate the settings stored in the database from the General Settings admin page, it at least has my site working using the PostName permalink setting.

Nice to see so many comments and ‘solutions’. I spent some time producing various work-arounds. Finally changed permalinks to ‘plain.’

A temporary fix, but it seems to work for now.

Indeed, annoying.

figured it out. have to modify the code to get it to work for now. I rather wait for WP to fix their problem.

figured it out. have to modify the code to get it to work for now. I rather wait for WP to fix their problem.

What code where was modified to get it to work?

[ UPDATE ] I personally do not think the problem is ModSecurity since that is a apache level module. Not to mention the module is rarely updated and was only updated once in June 2015. Thus I am sure there is no conflict there, but will do some research & testing to dig into this a little deeper just to rule this out of the equation.

Everyone: YES! We understand you have the same problem. Please do NOT post if you are just saying that you have the problem.. that is why you are here. Only post if you have valuable, factual, informative info that is going to help this issue progress. If your needing a solution and have nothing to add, please just bookmark this thread and stay back as a viewer.

GOAL: My goal is to FIX this with a REAL SOLUTION and not some sort of work around. permalink, wp-config changes, adding index to url, etc etc are all temp fixes but not real solutions.

VOLUNTEER: I do not have the time to do this today….. But could someone setup a public GIT and upload a barebones install of 4.4 and then update to 4.4.1 and then commit those changes. This way we can have line by line comparison of the changes to the core files and see where the problem may lay. I believe this is going to be a problem stemming from how they handle re-directs, thus should not be too many files to peek at… Any volunteer help would be appreciated!!!

REPLIES
@jandembowski: no website link ??
@americaninlima: NO! That is a useless post. This is not about access to the /wp-admin/.. I clearly stated the problem in my initial post, your information is NOT helpful to other users. Please don’t post on this thread!
@type0: Yes, I believe its a problem with redirects.. and researching this problem still.
@Allar: NO, Your post is not useful. I clearly stated that ALL plugins were disabled in my testing, thus the problem is NOT related to ANY plugins. Please don’t post on this thread!
@webluthier: NO, this is not a solution. Modifying the wp-config would be just a temp fix.
@gosignmeup: If you have tested what I have suggested, then there is no need to post that it works for you. Everything has been clearly defined, tested, labeled so that everyone can get the same temporary fix results. Please don’t post on this thread!

Hi all,

It appears the root cause of this infinite loop is caused by mixed case URLs.

For the record, actually knowing links would’ve helped identify this a lot faster as we would have seen the pattern of mixed cases ??

If you drop by Settings > General and ensure your siteurl and home url are both all lowercase, I suspect that will take care of it for you ??

Thank you all for your patience while we dealt with this, and for providing feedback on the troubleshooting steps we asked along the way.

MArius: This worked for me. THANKS ??

Jonas

Moderator side note:

NO! That link does NOT have any useful information, nor a solution, and they have NOT tried some of their items I have listed above.

…

NO! That is a useless post.

It’s cool to disagree with other volunteers, but do it respectfully, OK?

Yes, I prefer that people start their own topics. But they’re just having problems and looking to help just like you.

Back to the topic at hand.

@adriankimmitt It appears that Marius was able to reproduce the problem on demand and found the problem. As Marius stated, if we’d had the actual URLs in the settings from multiple people then the pattern would have hit us and we’d have gotten there sooner.

Does this solution work for you when you revert your permalinks from plain to what they originally were? I am reasonably sure that’s the case but as your the original poster and this is your problem/topic I would like to confirm.

@marius: Thanks. Correcting the mixed case URLs in the Home & Site URL options fixed the issue for me.

I removed my temporary wp-config work-around, and with the correct URLs the site is fine. I changed it back to mixed-case for a moment as a quick test and confirmed that was the issue.

I’m sure the next step would be to update the WP source code to address the mixed-case issue. But, I’m very happy to have a workable fix for now.

@jan: Agreed – I welcome respectful discussion of ideas. Thanks for keeping us on track.

Thanks everyone.

I changed it back to mixed-case for a moment as a quick test and confirmed that was the issue.

Thanks for confirming that this fixes it for you. ??

I’m not so sure to call this one yet. In my case both Site and WordPress URLs were already all lowercase.

@mark_cox

Hmm, could you provide a link to your site please?