• Resolved taco100

    (@taco100)


    Hi

    Thanks for a great plugin!

    It seems that AIOS block social login using Google (handeled by Nextend excellent plugin).

    Nextend say it’s probably due to a MODSecurity blocking .profile string. And when I disable AIOS – it’s working well.

    How can I allow that in AIOS?

    Best

    Tal

Viewing 6 replies - 1 through 6 (of 6 total)
  • Plugin Support hjogiupdraftplus

    (@hjogiupdraftplus)

    Hi @taco100

    Can you please try disable if enabled following settings one by one? Mostly issue with other plugins / services due to one of it.

    1) REST API – WP Security > Firewall > WP REST API Can you please cross check the Disallow unauthorized REST requests:
    2) Deny bad query string – WP Security > Firewall > PHP rules tab. Deny bad query strings: uncheck the checkbox and save
    3) Advanced char filter – WP Security > Firewall > PHP rules tab. Enable advanced character string filter :uncheck the checkbox and save
    4) 5g firewall rules – WP Security > Firewall > 6G Blacklist firewall rules tab. Enable legacy 5G firewall protection uncheck the checkbox and save
    5) 6g firewall rules – WP Security > Firewall > 6G Blacklist firewall rules tab. Enable 6G firewall rules – uncheck the checkbox and save
    6) WP Security > Firewall > Internet bots ban – Blank HTTP headers Ban POST requests that have a blank user-agent and referer

    Regards

    Thread Starter taco100

    (@taco100)

    Hi hjogiupdraftplus

    First of all – thanks for your comprehensive reply!

    I did it all:
    Enabled the first one
    Disabled all the rest.
    And still the same problem… :/

    https://snipboard.io/EsOVik.jpg

    Whats next?

    Best

    Plugin Support hjogiupdraftplus

    (@hjogiupdraftplus)

    Hi @taco100,

    It is related to login please disable salt postfix feature WP Security > User Security > Salt tab if enabled and check.

    I will create an internal ticket to replicate issue with mentioned plugin, Next end Social plugin.

    Can you share exported AIOS settings ? WP Security > Settings > Import / Export using https://pastebin.com/

    Regards

    Thread Starter taco100

    (@taco100)

    Hi

    1. The salt postfix was already disabled on my panel :-/

      2. I have another Woo & Nextend with AIOS that does work, can’t seems to find the difference in settings.

      3. How can I send you the settings (do you also want the one that is working?) so they won’t be public?

      Thanks!

      Tal

      Plugin Support hjogiupdraftplus

      (@hjogiupdraftplus)

      Hi @taco100,

      You may use the https://pastebin.com/ burn after read that way it has chance to read only once and not public.

      Regards

      Plugin Support hjogiupdraftplus

      (@hjogiupdraftplus)

      Hi @taco100

      Do you have login whitelist enabled? If yes please try disable it.

      If I cross check as general with firewall settings the Nextend Social > Google login works fine in one of my site.

      If you can provide exporeted settings it will be make it easier to replicate the issue.

      If you add below constant in wp-config.php do it works? Please cross check.

      define( 'AIOS_NO_FIREWALL', true);

      Regards

    Viewing 6 replies - 1 through 6 (of 6 total)
    • You must be logged in to reply to this topic.