Invalid Request Signature error in comment form

Are you seeing that now? I don’t see it if I look at https://www.buddha-consciousness.org/nature/, or any other post.

I see you have Jetpack comments enabled. That’s essentially just a skin we place over the existing WordPress comments feature, but among other things, that checks whether the person viewing your site is logged into a WordPress.com account.

From what you describe it sounds like that check might be failing on your end, and that’s likely a browser issue (which means it’s unlikely other visitors to your site is also seeing it). Can you check if you see that error viewing your site while logged out/in an incognito browser window?

Make sure your browser allows third party cookies, and if you’re using a browser add-on that blocks cookies, temporarily disable that. Then clear WordPress.com cookies and log back into your WordPress.com account. Do you still see the error when you do that?

Hi @kokkieh, thanks so much for responding! I was still seeing the error when reading your email, however, the comment form displayed as expected after loading the site in an incognito window, both when I was logged out and after I logged back in. I did not need to delete any cookies or do any of the other steps you mentioned. How do you interpret this behavior now?

• This reply was modified 4 years, 6 months ago by Hannah West Design. Reason: Added 2nd to last sentence

Hm, more info. Now that a little bit of time has passed since I checked on the site and wrote my last post, I needed to do something on it and checked a post to see what the status of the comment form was, and it was fine! In a regular browser window, not logged in…and as soon as I did log in, the error reappeared. Just FYI in case it’s helpful.

When you say as soon as you log in, are you referring to your admin account on the site, or your WordPress.com username account linked via Jetpack?

If you’re logged into the admin user account, but not into WordPress.com, see if logging into WordPress.com makes the error go away.

I was referring to being logged in to the admin account on the website. Now that I have tried when logged in to the site’s Jetpack-related WordPress account and then my own WordPress account, the issue remains if I am logged in to the website. If I log out of the website, the comment form displays as expected whether I’m logged in to the site’s WordPress account or my own.

Okay, so this is related to your admin account for the site.

Good news is, it’s only you in that case – no visitor to your site will see this, as they’re not logged into a user account on your site itself.

I’m not sure why your admin account would cause this, though. Can you try one more thing for me?

On WordPress.com, go to My Site ->Tools ->Settings ->Security, and enable the WordPress.com log in feature. Then clear cookies for your site and WordPress.com, log back into WordPress.com first, and then log into your dashboard using the Log in with WordPress.com button that will now appear on the login page.

Does the error still appear?

If you don’t want to use Jetpack’s Single Sign-On feature you can disable it again after testing this.

I’m sorry, but I’m not seeing the path you specified: My Site ->Tools ->Settings ->Security. I’m not sure how to include a screenshot here to show you what I do see. But after scrounging around through all the “cupboards,” I do not see anything about security (privacy, yes, but that doesn’t include the settings you mention) anywhere in this site’s menu/settings.

Those options are on the WordPress.com interface, not in WP-Admin on your site:

https://wordpress.com/settings/security/www.buddha-consciousness.org

Oh, I see. It’s under Manage, not Tools. I went through the steps you suggested just now and then checked a post to see the comment form. It still has the error. When Jetpack is deactivated, the comment form returns to normal.

• This reply was modified 4 years, 6 months ago by Hannah West Design. Reason: added more info

Just discovered the same error on its sister website, light-path-resources.org. There is a third site I manage for the same client, militarytruth.org, which is also connected to the same Jetpack account and it does not have the same issue.

Hmm, I now see a connection error for your site at https://tools.jetpack.com/debug/?url=https://www.buddha-consciousness.org/

Please try disconnecting and reconnecting Jetpack:

https://jetpack.com/support/reconnecting-reinstalling-jetpack/

I don’t see that error for your other site at https://tools.jetpack.com/debug/?url=https://www.light-path-resources.org/, but if reconnecting helps with the first site, try that with this one as well.

Sorry for the long delay. I’m in southern Oregon where fires have disrupted virtually everything for the past 2 weeks. I just made a couple of posts, reconnected Jetpack, backed up the site and then logged out. Then I checked one of the posts I had just published, and there it was – Invalid Request Signature. This now appears whether or not I’m logged in to the website, however, if I log out of BOTH the website AND the connected WordPress account, THEN the comment form shows up without errors. So apparently reconnecting Jetpack didn’t work. I am currently logged in to the WordPress.com account associated with the site’s Jetpack connection. Does this give you any further clues as to what could be going on?

• This reply was modified 4 years, 6 months ago by Hannah West Design.

Glad to hear you are safe! The good new that I can see is there are no Jetpack errors here when I check: https://tools.jetpack.com/debug/?url=https://www.buddha-consciousness.org/

However, I still do not see this error message. When I visit a recent blog post (I visited this one) You can see what I see at this link: https://d.pr/i/1cLDHa

Because we’re having trouble seeing this on our end, we’ll need your help to troubleshoot further, since you are clearly seeing this Invalid Request Signature error message on your end.

One thing I am curious to have you try is a different browser than the one you are using currently. For example, if you usually log in to WordPress in the Chrome browser, what if you try logging in via Firefox instead, or Internet explorer. Is it the case that you see this error message (when logged in) regardless of what browser you use? i.e. you see it in both browsers? Or just one?

Thanks for the additional info!

Hi there, I know it’s been a long time. Between COVID, politics and a devastating fire in our area, the last few months have been overwhelming and there are many things I had to set aside. But I wanted to give you some good news. I have no idea why or what changed (aside from the many updates to the WP core, Divi theme and plugins that have occurred since we last discussed this issue) the Invalid Request Signature message seems to have disappeared. I’m logged in and looking at the comment form at the end of our most recently published post on this site and it appears completely normal with no errors visible. Sweet!

i have the same problem, when i use another laptop or phone and read my post i can’t cmt on my post , it is “invalid request signature” i just active jetpack 30 minutes ago, and i really think it’s problem, you can see problem in this post https://yemihealthy.com/hat-chia/