WPForo – Subscription doesn’t work (blocked by security headers)

  • Resolved olliewp

    (@olliewp)


    5 years, 3 months ago

    Hi guys,

    I have a problem with subscription to topics and replys on my WPForo Forum. If user clicks the link for subscription he recieves the confirmation email, but the page stays and up in right corner the information “processing” loads constantly and nothing more happens. If I open the window by Ctrl + Shift + I, there are three following errors:

    1.
    Error parsing header X-XSS-Protection: 1; mode=block, 1; mode=block: expected semicolon at character position 13. The default protections will be applied.

    2.
    Access to XMLHttpRequest at ‘https://www.localhost.cz/’ (redirected from ‘https://localhost.cz/wp-admin/admin-ajax.php’) from origin ‘https://localhost.cz’ has been blocked by CORS policy: Request header field x-requested-with is not allowed by Access-Control-Allow-Headers in preflight response.

    3.
    GET https://www.localhost.cz/ net::ERR_FAILED

    First, it was just 2. and 3. error, but today I added few more security headers and even 1. error showed up.

    I tried to go through my security plugins if something is seted up wrong, but I found nothing and now I really don’t know what to do.

    Interesting is that when I’m signed in as the admin everything works, but only other users who aren’t admins have this problem.

    Could you please help me to find a solution?

    Thank you very much!

    Olga

    The page I need help with: [log in to see the link]

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author gVectors Team

    (@gvectors-team)

    Hi @olliewp,
    This is not only subscription issue, this is a general issue in your website, all AJAX processes are affected. At least all wpForo AJAX requests are affected. Some plugin or some script initiate duplicated AJAX request with www.yourwebsite.com domain. But your website doesn’t have www. prefix. This causes security blocking by browser. You can’t request some data from www. domain if your domain doesn’t contain it.

    2019-08-29_0522

    Some solutions:

    1. Make sure all URLs in WordPress are set without www. , check those in Dashboard > Settings > General admin page.

    2. Make sure wpForo Base URL is also set without www. in Dashboard > Forums > Settings > General Tab. in any case just click on [Update options] button on that page to reset it.

    3. Disable other plugins and cache solutions and test it again with new browser.

    Thread Starter olliewp

    (@olliewp)

    Hi,

    thank you so much for your help!

    Solutions 1. and 2. – I had everything seted up rihgt, so I tried solution 3., but it didn’t help… BUT – thanks to your explanation of the problem I realized that I added a code for redirecting users to main page to FTP when I started making my pages and as I’m new in this and it’s first time I make a website, I added there my domain with www and absolutely didn’t realize that it could be a problem later because the reason why I added that code was without problem and everything worked. So, I fixed it in FTP and hurray!:) Everything works now!:) Stupid mistake, I know and I’m sorry, I’m really new in all of this, but if you didn’t explain me the problem so good, I guess I wouldn’t remember where I could make this mistake. So thank you, thank you so much again!

    Have a wonderful day!

    Olga

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘WPForo – Subscription doesn’t work (blocked by security headers)’ is closed to new replies.