trouble with WordPress API POST call

  • Resolved jennifersuess

    (@jennifersuess)


    2 years, 7 months ago

    I had successfully deployed an automate.io bot that adds a new post to my WordPress website. After a while, it stopped working. Their technical support is unable to solve the problem, but they did share that they are calling with

    {"method":"POST","baseUrl":"https://terrabonafamily.org/MemberSite/","url":"/xmlrpc.php","headers":{"Accept":"application/xml","Content-Type":"text/xml","User-Agent":"Automate.io"},"body":"<methodCall><methodName>wp.newPost</methodName><params><param><value><array><data><value><i4>0</i4></value><value><string>username</string></value><value><string>password</string></value><value><struct><member><name>post_type</name><value><string><![CDATA[post]]></string></value></member><member><name>post_title</name><value><string><![CDATA[Test event]]></string></value></member><member><name>post_excerpt</name><value><string><![CDATA[short is good]]></string></value></member><member><name>post_format</name><value><string><![CDATA[standard]]></string></value></member><member><name>terms_names</name><value><struct><member><name>category</name><value><array><data><value><string><![CDATA[Upcoming Event]]></string></value></data></array></value></member></struct></value></member><member><name>post_date</name><value><dateTime.iso8601>20220330T00:00:00.000</dateTime.iso8601></value></member><member><name>comment_status</name><value><string><![CDATA[open]]></string></value></member><member><name>post_status</name><value><string><![CDATA[publish]]></string></value></member><member><name>post_content</name><value><string><![CDATA[<strong>Posted by:</strong> Jennifer\n\n\n<strong>Event Host:</strong> Jennifer\n\n\n<strong>Description:</strong>\nit just\n\n\n<strong>Who is Invited?</strong>\neveryone\n\n<i>Please note that for all events posted on Terra Bona, the Event Host reserves the right to refuse the registration of any participant or dismiss any participant for any reason. It is expected that the Event Host would do so with great charity and after exhausting all forbearance. </i>\n\n<strong>Date/Time:</strong>\n3/15/2022\n\n\n\n<strong>Type of Event:</strong>\ndrop\n\n\n\n<strong>Location:</strong>\nhere\n\n\n\n<strong>Cost/Donation:</strong>\nnone\n\n\n\n\n\n<strong>How to Pay:</strong>\ncash\n\n\n\n<strong>Registration Limit</strong>\nno\n\n\n\n\n<strong>How to Register/RSVP:</strong>\nemal me\n\n\n\n<strong>Registration/RSVP Deadline:</strong>\ntody\n\n\n\n<strong>Registration/RSVP List:</strong>\nnone\n\n\n\n<strong>Driving directions / What to do when you arrive:</strong>\nfigure it out\n\n\n\n<strong>What to bring/wear:</strong>\nclothes\n\n\n\n<strong>Volunteers:</strong>\nnope\n\n\n\n<strong>Other Details:</strong>\nnone\n\n\n\n<strong>Contact for questions about this event:</strong>\nok]]></string></value></member></struct></value></data></array></value></param></params></methodCall>","timeout":60000,"gzip":true}

    The bot is receiving back

    "<script>document.cookie = \"humans_21909=1\"; document.location.reload(true)</script>"

    but the WordPRess api is supposed to return the post details.

    This is causing the automate.io bot to fail with an unknown error.

    Any ideas?

    • This topic was modified 2 years, 7 months ago by Yui.
    • This topic was modified 2 years, 7 months ago by Jan Dembowski. Reason: Moved to Fixing WordPress, this is not an Developing with WordPress topic
Viewing 3 replies - 1 through 3 (of 3 total)

  • After a while, it stopped working.

    Can you confirm it has worked in posting an event at least once, and for some reason, has stopped after awhile?

    Do you know how many times does the bot post a day?

    What plug-ins do you have on your site?

    The return looks really strange. I did a search and found some posts about JetPack and Contact Form 7 – however, the plugins themselves don’t seem to be directly responsible for this. Here is an article that talks about a security setting at the hoster being responsible and that this only takes effect for certain keywords in the request (“Contact”): https://www.geminigeeks.com/bluehost-blocking-contact-form-7-submissions-409-conflict-error/

    I therefore have 2 recommendations for you:
    a) Deactivate all plugins to see if the behaviour changes.
    b) Contact your hoster to clarify whether any of their security systems are interfering.

    Thread Starter jennifersuess

    (@jennifersuess)

    My issue was resolved by BlueHost escalated support. They said:

    `By reviewing the logs, I could see that there were mode security blocks for the URL “: “https://xxxxx/&#8221;, “URL”:”/xmlrpc.php”.

    It is used to block commonly known exploits by use of regular expressions and rule sets and is enabled on all servers by default. Here the mod security will trigger some URLs and also the local Ip address as it could be the false positive traffic in this case we need to find the logs for the URL that you are particularly using and whitelist the rules.

    Rest assured, I have also whitelisted all the blocked rules on the hosting account. And do not see any other block on the server end.”

    I am very pleased!

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘trouble with WordPress API POST call’ is closed to new replies.