UnfinishedSympathy

Thank you ! I was wondering what makes the break ??

@brijesh Tejani

Thank you for your advice. I’ve tried to uninstall the plugin and make a fresh install again. Full of hopes when seeing there was the new 4.0.5 version.

Unfortunatly, it didn’t resolve the problem wich is still here.

The log out link got a “302 moved temporarily” answer for two queries:
https://www.xxxxxxxxxx.xx/secretword?action=logout&_wpnonce=a96959857e
https://www.xxxxxxxxxx.xx/?loggedout=true

wich it’s ok because Nginx got the redirect rules

rewrite ^secretword/?$ /wp-login.php?$query_string break;

But then I stay on wp-admin page, still logged.

Tried on another site I use for test, without WAF or anything that may lead to errors like this but the problem is the same.

It was perfect with ‘Better WP Security’ plugin and worked flawlessly.

Thank you for your answer.

What do you mean by “reset your Hide Backend Setting” ? If it means clear the option and enable it again then I already tried it (with a nginx reload for each time).
And sorry but it doesn’t work.

And what about Nginx ? ??

In fact, even if I don’t redirect wp-login.php I still have the message:

ERROR : missing credentials

and Better WP Security count 2 bad loggin without username in logs.

Any help is welcome,
Regards

Nope, the issue disapeared with “Don’t cache Front Page” enabled.

But this behavior should be the same with “Don’t cache pages for following user roles” enabled as I’m logged in (Select user roles that should not receive cached pages).
So it seems there is a problem with this last option.

I upgraded to 9.2.8 and the problem is still here. I use Varnish but this proxy doesn’t send cached pages for logged in users (checked in the response header).
Tried Cloudflare in developement mode to be sure it doesn’t send cahed pages too.
APC is used for “page cache” and “object cache” but is configured with “apc.stat” to 1 so cached pages are not served if they have been modified.

Really, the issue is appeared with the upgrade to 9.2.6.

Anyway, thanx for your answer !

yes, I forgot it. It’s done. Thanx again ??

It works great ! Thank you very much !

Ok I’ve found myself the answer:

The jQuery library is apparently loads in “No Conflict” mode where the $ shortcut is no more available.

So I changed the first line of my script from:
$().ready(function() {

to:
jQuery().ready(function($) {

and it works like a charm ??