Users cannot log in or change password

@guitartown

What makes you think this is an iTSec plugin issue ?

Is the problem resolved after deactivating the iTSec plugin ?

Weird you are getting the English

“You are attempting to logout from Guitartown. Are you sure you want to logout?”

message while you are clearly running WP in Dutch language …

Oh, wait you probably translated it for this forum … ??

dwinden

Yes, it was a translation.

I don’t really think it is an iTSec plugin issue because nothing changed after deactivating. I just don’t know where to look. My thoughts were that password issues could have something to do with this security plugin and maybe I could get the solution for my problem here.

Great that you react so quickly
Ton

@guitartown

Ok, I see.

Check your logout link to see how it looks like.
If it looks like this:

/wp-login.php?action=logout

the confirmation message you are seeing will be displayed.

It should look similar to this:

/wp-login.php?action=logout&_wpnonce=f7s710f528

The same message will also be displayed when the logout link is correct but the _wpnonce parameter value is invalid.

Anyway since this is not an iTSec issue please mark this topic as ‘resolved’.

dwinden

Thanks for your help dwinden. The problem is resolved now; it seems to be a jetpack issue. I disabled jetpack and a caching plugin. After enabling jetpack everyting worked OK.
It was not an iTSec issue but anyway now I know an important thing for me: because of you I know now how my logout link has to look like.

Regards, Ton

@guitartown

Ok, that is great news.

It seems it is also possible that the _wpnonce url parameter value simply expires.
So if you leave the WP Dashboard in a logged in state for long enough without touching it, thus causing the _wpnonce url parameter value to expire, a subsequent logout attempt will most probably show the confirmation message.

Thanks for marking the topic as ‘resolved’ ??

dwinden