• Resolved brothered2021

    (@brothered2021)


    I’m trying to figure out how to unblock a plugin called Revive Now Post. I received many messages like the one below, where it says unauthenticated user. Is there a problem with the license on my plugin or something else, I’ve never had a problem like this before. The free version of the plugin works fine but the paid version hangs up at the time it’s going to push data into Facebook and Twitter.

    I contacted them and they suggested I contact you all.

    injaFirewall has blocked an attempt to edit/create a post by a user who doesn't have the right capabilities:
    
    Blog: https://www.nationalprayerchapel.com/
    
    Username: Unauthenticated user
    
    Action: Attempt to edit a published post (ID: 38671)
    
    post_title: Canaan Land is Yours (2007)
    
    post_content: <!-- wp:paragraph -->
    
    <p>God promised that Canaan Land is yours to the Israelites. That promise is a...
    
    User IP: 23.88.105.37
    
    SCRIPT_FILENAME: /home/natio251/public_html/wp-cron.php
    
    REQUEST_URI: /wp-cron.php?doing_wp_cron
    
    Date: March 6, 2023 @ 09:30:01 EST
    
    A PHP backtrace has been attached to this message for your convenience.
    
    This protection (and notification) can be turned off from NinjaFirewall "Firewall Policies" page.

    The page I need help with: [log in to see the link]

Viewing 4 replies - 1 through 4 (of 4 total)
  • Plugin Author nintechnet

    (@nintechnet)

    Apparently, your plugin needs to edit the post and because it isn’t authenticated as the user who created it, the firewall blocks it.
    You would need to disable the following policy: “NinjaFirewall > Firewall Policies > Permissions > Block attempts to publish, edit or delete a published post by users who do not have the right capabilities”.

    Thread Starter brothered2021

    (@brothered2021)

    Thank you for replying back to me. It seems to happen only on certain settings with the plugin. It doesn’t sound like a good idea to disable the policy. Please let me know if you disagree. I appreciate your help!

    Plugin Author nintechnet

    (@nintechnet)

    That policy is very good at protecting against 0-day vulnerabilities that can be exploited to inject content into posts and pages. Do you know what settings in your plugin trigger it (it has to edit the post content or title)?

    Thread Starter brothered2021

    (@brothered2021)

    Thanks for writing back, it doesn’t seem to edit the post content or title that I could figure. It was a bit difficult to troubleshoot and once the settings stopped generating the error, I stopped making changes in the plugin. Wish I could tell you more….

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Problem using Revive Old Post’ is closed to new replies.