Update on “Invalid Nonce” error on login with Ultimate Member

  • Resolved james.iwate

    (@jamesiwate)


    4 years, 1 month ago

    Since June, my users have been getting an invalid nonce error frequently when logging in using Ultimate Member. I have participated in a couple of forums about it. I am still getting this error and thought I would summarize here the various solutions from different forums and see if anyone has ideas as to why this issue is not resolved.

    In the following forum, I received some fantastic advice from @singhvirat who recommended that I write the following in “List of browser agent strings which, if detected, will prevent caching” in my caching plugin (I use WP-Optimize).

    wp-.*\\.php
    index\\.php
    login/
    register/
    member/
    dashboard/
    account/
    user/

    This seemed to work for me. This past month, however, my users and I have started to get the “invalid nonce” error again when logging in.

    In a different forum, @jedendwatrzy recommended to add the following code to the ultimate member login template within <form></form>

    UM()->login()->add_nonce();

    I tried this but nothing changed.

    I use ultimate member on three separate multisites. When a user gets the error, if I select “purge all pages” for deleting cache on the site using wp-optimize, they can login. However, this error will occur again. It seems like this error is more likely to occur with the Safari browser.

    I am a teacher at a university and have built my own WP Sites. This issue is occupying a great chunk of my time and interfering with my being able to do what I am supposed to be doing, teach! Any ideas would be greatly appreciated.

    I should add that this error occurs very unpredictably. It is hard to reproduce. Some users seem to get it more than others. I seem to be more likely to get it if I have logged into different sites on the multisite.

    • This topic was modified 4 years, 1 month ago by james.iwate.
    • This topic was modified 4 years, 1 month ago by james.iwate.

    The page I need help with: [log in to see the link]

Viewing 5 replies - 16 through 20 (of 20 total)
  • xgougeon

    (@xgougeon)

    Hello I’ve tried this patched version. Nothing changed, we still have problems. I also notices that there are frequently new ghost members that register. We have completely blocked the possibility for members to create their own accounts. Creation must be done my the administrator… But even though, we still have the account creation hacked.

    Thread Starter james.iwate

    (@jamesiwate)

    It seems like now the only time we get the invalid nonce error is when the user’s login page was not reloaded in the browser and this invariably happens with mobile devices rather than PCs. Now, though, the error message is much more user friendly. Instead of the “invalid nonce” error and a white screen the login page reloads with a message that the page was probably cached and to try again. This is MUCH better, @champsupertramp , did you make this change?

    HI james

    I am new on this and don’t know how to write the httpd file of the server. How do I access that file usually.

    I am going crazy with this issue.

    why this article often appears when entering and registering on my membership website “An error has been encountered Probably page was cached Please try again”

    Thread Starter james.iwate

    (@jamesiwate)

    @kelyhall, I am sorry for the late reply, I did not notice your comment. Are you still having this issue?

    Basically, I had to have the university server administrator write the no-cache commands for me.

    However, if you use a normal cache plugin, you should be able to disable cache for the login pages.

    This issue was persistent for about four months but I have not had this error since November of last year.

    • This reply was modified 3 years, 7 months ago by james.iwate.
Viewing 5 replies - 16 through 20 (of 20 total)
  • The topic ‘Update on “Invalid Nonce” error on login with Ultimate Member’ is closed to new replies.