missing parameter: ‘nonce’
-
Hi,
Just tried on 2 of my WP sites and have exact same error.
* fresh install of Site Kit (never used before)
* go to dashboard
* click “Start Setup”
* page https://sitekit.withgoogle.com/site-management/setup/ opens with following error msg :Error: Bad Request
missing parameter: ‘nonce’version 1.2.0
Have normal access to all my Google properties from Gmail to Console and so on in same browser.
Thx for your help
Sincerely
DJMThe page I need help with: [log in to see the link]
-
Just in case: site health
### wp-core ### version: 5.3.2 site_language: fr_FR user_language: en_US timezone: +01:00 permalink: /%postname%/ https_status: true user_registration: 0 default_comment_status: open multisite: false user_count: 2 dotorg_communication: true ### wp-paths-sizes ### wordpress_path: /srv/data/web/vhosts/www.didiermary.fr/htdocs wordpress_size: 70.83 MB (74271160 bytes) uploads_path: /srv/data/web/vhosts/www.didiermary.fr/htdocs/wp-content/uploads uploads_size: 218.37 MB (228981455 bytes) themes_path: /srv/data/web/vhosts/www.didiermary.fr/htdocs/wp-content/themes themes_size: 7.61 MB (7978579 bytes) plugins_path: /srv/data/web/vhosts/www.didiermary.fr/htdocs/wp-content/plugins plugins_size: 74.06 MB (77658798 bytes) database_size: 27.17 MB (28491776 bytes) total_size: 398.05 MB (417381768 bytes) ### wp-dropins (1) ### advanced-cache.php: true ### wp-active-theme ### name: Neve (neve) version: 2.6.0 author: ThemeIsle author_website: https://themeisle.com parent_theme: none theme_features: hfg_support, title-tag, post-thumbnails, automatic-feed-links, custom-logo, html5, customize-selective-refresh-widgets, custom-background, themeisle-demo-import, align-wide, editor-color-palette, fl-theme-builder-headers, fl-theme-builder-footers, header-footer-elementor, lifterlms-sidebars, lifterlms, service_worker, amp, menus, yoast-seo-breadcrumbs, widgets theme_path: /srv/data/web/vhosts/www.didiermary.fr/htdocs/wp-content/themes/neve ### wp-themes-inactive (1) ### Twenty Twenty: version: 1.1, author: the WordPress team ### wp-plugins-active (28) ### ActivityPub: version: 0.9.1, author: Matthias Pfefferle Akismet Anti-Spam: version: 4.1.3, author: Automattic AMP: version: 1.4.2, author: AMP Project Contributors Better Click To Tweet: version: 5.9.2, author: Ben Meredith Block Gallery: version: 1.1.6, author: GoDaddy Elementor: version: 2.9.0, author: Elementor.com Enhanced Media Library: version: 2.7.2, author: wpUXsolutions FediEmbedi: version: 0.8.0, author: mediaformat Glue for Yoast SEO & AMP: version: 0.6, author: Joost de Valk Gutenberg: version: 7.5.0, author: Gutenberg Team Insert Headers and Footers: version: 1.4.4, author: WPBeginner Login LockDown: version: v1.8.1, author: Michael VanDeMar MC4WP: Mailchimp Activity: version: 1.1.0, author: ibericode MC4WP: Mailchimp for WordPress: version: 4.7.5, author: ibericode Nested Pages: version: 3.1.8, author: Kyle Phillips Neve Pro Addon: version: 1.0.4, author: ThemeIsle Redirection: version: 4.6.2, author: John Godley Semantic-Linkbacks: version: 3.10.1, author: Matthias Pfefferle Site Kit by Google: version: 1.2.0, author: Google Slides & Presentations: version: 0.0.39, author: Ella van Durpe Smush: version: 3.4.2, author: WPMU DEV Syndication Links: version: 4.2.1, author: David Shanske WebFinger: version: 3.2.4, author: Matthias Pfefferle Webmention: version: 4.0.2, author: Matthias Pfefferle WP-Optimize - Clean, Compress, Cache: version: 3.0.16, author: David Anderson, Ruhani Rabin, Team Updraft WPForms Lite: version: 1.5.8.2, author: WPForms WP Sitemap Page: version: 1.6.2, author: Tony Archambeau Yoast SEO: version: 13.0, author: Team Yoast ### wp-plugins-inactive (2) ### SubToMe: version: 1.5.3, author: Julien Genestoux WordPress Importer: version: 0.6.4, author: wordpressdotorg ### wp-media ### image_editor: WP_Image_Editor_Imagick imagick_module_version: 1687 imagemagick_version: ImageMagick 6.9.7-4 Q16 x86_64 20170114 https://www.imagemagick.org imagick_limits: imagick::RESOURCETYPE_AREA: 122 MB imagick::RESOURCETYPE_DISK: 1073741824 imagick::RESOURCETYPE_FILE: 768 imagick::RESOURCETYPE_MAP: 512 MB imagick::RESOURCETYPE_MEMORY: 256 MB imagick::RESOURCETYPE_THREAD: 32 gd_version: 2.2.4 ghostscript_version: 9.26 ### wp-server ### server_architecture: Linux 4.9.124-paas-2270098 x86_64 httpd_software: Apache php_version: 7.3.6 64bit php_sapi: fpm-fcgi max_input_variables: 2500 time_limit: 180 memory_limit: 256M max_input_time: 60 upload_max_size: 128M php_post_max_size: 128M curl_version: 7.52.1 OpenSSL/1.0.2l suhosin: false imagick_availability: true htaccess_extra_rules: false ### wp-database ### extension: mysqli server_version: 5.7.23-23-log client_version: mysqlnd 5.0.12-dev - 20150407 - $Id: 7cc7cc96e675f6d72e5cf0f267f48e167c2abb23 $ ### wp-constants ### WP_HOME: undefined WP_SITEURL: undefined WP_CONTENT_DIR: /srv/data/web/vhosts/www.didiermary.fr/htdocs/wp-content WP_PLUGIN_DIR: /srv/data/web/vhosts/www.didiermary.fr/htdocs/wp-content/plugins WP_MAX_MEMORY_LIMIT: 256M WP_DEBUG: false WP_DEBUG_DISPLAY: true WP_DEBUG_LOG: false SCRIPT_DEBUG: false WP_CACHE: true CONCATENATE_SCRIPTS: undefined COMPRESS_SCRIPTS: undefined COMPRESS_CSS: undefined WP_LOCAL_DEV: undefined DB_CHARSET: utf8 DB_COLLATE: undefined ### wp-filesystem ### wordpress: writable wp-content: writable uploads: writable plugins: writable themes: writable ### 0 ### version: 1.5.8.2 license: undefined lite: Mar 29, 2019 @ 5:41pm db_tables: Not found total_forms: 1 total_entries: undefined
@didierjm thanks for opening a topic and providing these details. Could you to attempt setup from an incognito browser window?
Hi Renee, thx for coming back to me.
It worked after I activated TLS 1.0/1.1 in incognito mode when I tried to connect to Google.Sincerely
DJMOK. Could connect the first site, but can’t for the second, even in incognito mode.
Those sites are subdomains of the same site.
Could connect https://amf.didiermary.fr but not https://www.didiermary.frGet access to the authentication process and then the following page opens:
Confirm your choices
You already gave Site Kit access to:
* Associate you with your personal info on Google
* See your personal info, including any personal info you’ve made publicly available
* View your email address
* View and manage Search Console data for your verified sites
* Manage the list of sites and domains you controlIf I click “allow”, the public homepage of my site opens… and nothing else… Site Kit was not activated.
The other option I have in the admin panel is: Reset Site Kit
I manage multiple blogs, with this same account.
Q: can I use Site Kit on multiple WP blogs with the same account?Sincerely
DJM- This reply was modified 4 years, 9 months ago by cybeardjm.
@didierjm thanks for the update! I’m glad to hear the first site has connected. Are there security measures (plugin or host level like ModSecurity) enabled? The behavior you mention has been reported before and we’re investigating it here. It would be good to check if this is a factor.
Thx Renee.
Just launched PHPINFO and there’s no result for “security”, incl. ModSecurity.I will try with a different blog, hosted by the same company but on a different machine with same configuration to see if this works or not.
Sincerely
DJMOK, here’s what I did tonite:
* in an incognito window, I configured Site Kit for a different domain I manage, hosted by the same ISP but on a different server, with the same Google account, without any problem.
* tried again with the one I have troubles with, in incognito as well. Didn’t work… went back to the site homepage as it did previously…To be sure, I launched PHPINFO directly from my ISP’s admin console, and didn’t find any modSecurity module.
Q: could the fact that I have 2 subdomains “amf” & “www” on my domain didiermary.fr be the origin of this problem?
I can try tomorrow on a 4th blog, on a different server. Will see if this works.
Sincerely
DJM- This reply was modified 4 years, 9 months ago by cybeardjm.
@didierjm thanks so much for the update! You should be able to use both subdomains with your Google account. We’ve just released version 1.3.0 as well, so it would be good to see if that helps.
Hi Renee,
Just tried 1.3.0 in incognito, same result.
DJMFYI, 4th blog installed and configured without any problem.
Sincerely
DJM@didierjm thanks for the update! Glad to hear that it was successful on this site at the different server. I suspect something configured at the other server is causing the issue. Could you reach out to their support to see if there are any special security implementations you might not have access to?
@didierjm could you update to version 1.4.0 and let me know if you’re able to proceed with the setup of original site(s) with the issue?
Hi Renee.
Just did in incognito mode as usual. Same result.
I asked my ISP if they had special security features enabled, and there are none apparently.Sincerely
DJMTried to “Reset Site Kit” on the “www” blog.
Reauthenticated, went till the end of the process, was “congratulated” for succeeding the setup and… went back to the homepage.
Site Kit is still inactive (splash screen) ready to be configured…
Sincerely
DJMOK, I did it!
* disabled all plugins, incl. Site Kit (1.4.0)
* reenabled Site Kit only in incognito mode => got the default splash screen, not the one with the reset option
* authentication processed
* went back to Site Kit dashboard this time
* finished configuringWorks fine now.
Sincerely
DJMPS : didn’t have to do that with the other blogs, incl. on the AMF subdomain.
- The topic ‘missing parameter: ‘nonce’’ is closed to new replies.