Nonce Verification Failed Error

  • Resolved KingFisher

    (@thekingfisher)


    1 year, 6 months ago

    Hi, I have all of the WPMU Dev plugins available in the WP Directory. I love the super hero theme as well as the functionality of all these plugins.

    However, from the first day using Defender, I have had an issue logging in with 2FA. I kept receiving “The username/password field is empty” and had to resubmit my login details and 2FA code.

    I have rectified this with modifying my funtions.php file to negate google chromes auto focus – 

    add_action("login_form", "kill_wp_attempt_focus");
function kill_wp_attempt_focus() {
    global $error;
    $error = TRUE;
}

    As well as creating a must-use plugin to set cookie on current request –

    <?php 
function wpmudev_set_cookie_on_current_request( $cookie ) {
    if ( ! is_user_logged_in() && isset( $_COOKIE[ LOGGED_IN_COOKIE ] ) ) {
        unset( $_COOKIE[ LOGGED_IN_COOKIE ] );
    }
}

add_action( 'set_logged_in_cookie', 'wpmudev_set_cookie_on_current_request', 999);

    This seems to have solved the empty field issue.

    Now I am facing a nonce verification failed error (this appeared before fixing the empty field issue). It seems to have appeared around the time I implemented Defenders reCaptcha option (which does not fix the problem if I disable it).

    I have got the correct v2 checkbox, tried disabling all caches, I have refreshed the browser (even ending tasks in task manager), I have disabled all plugins (except Defender & Branda), I have changed the theme to WordPress 2023 theme.

    The only fix I have not attempted is replacing the WordPress core files.

    Please help me fix this issue. I have tried almost everything I can find on google. I have even spoken to my host who is at a loss.

    The last thing I want to do is disable the nonce function entirely.

    • This topic was modified 1 year, 6 months ago by KingFisher.

    The page I need help with: [log in to see the link]

Viewing 4 replies - 1 through 4 (of 4 total)
  • Plugin Support Patrick – WPMU DEV Support

    (@wpmudevsupport12)

    Hi @thekingfisher

    Sorry to hear you are having this issue and we are happy to hear you like the plugins.

    I can see you made all the initial troubleshooting, just wondering if you removed the mu-plugin code also any other mu-plugin while testing to verify if the empty password issue is gone?

    We had a similar case with some Woocommerce payment plugins so removing the mu-plugin once disabling all the plugins would be a nice idea too then test and see if makes any difference.

    About nonce, it is not suggested to disable it so we need to troubleshoot the problem further, can you copy and paste your server WP and server details?

    You can find the “Copy site info to clipboard” at WordPress > Tools > Site Health > Info.

    Also check the WP > Tools > Site Health for any potential issue being reported by WP.

    Let us know the result you got.
    Best Regards
    Patrick Freitas

    Thread Starter KingFisher

    (@thekingfisher)

    Hi.

    I have not tried disabling the mu-plugin as it seems to be fixing the empty field issue.

    It is impossible to know though, as the nonce verification error appears at the exact same time as the empty field error would appear.

    wp-core

version: 6.2.2
    site_language: en_US
    user_language: en_US
    timezone: +02:00
    permalink: /%postname%/
    https_status: true
    multisite: false
    user_registration: 0
    blog_public: 1
    default_comment_status: undefined
    environment_type: production
    user_count: 276
    dotorg_communication: true

wp-paths-sizes

wordpress_path: /usr/www/users/kingfexbcz/wp
    wordpress_size: 20.14 GB (21630276563 bytes)
    uploads_path: /usr/www/users/kingfexbcz/wp/wp-content/uploads
    uploads_size: 19.00 GB (20397498764 bytes)
    themes_path: /usr/www/users/kingfexbcz/wp/wp-content/themes
    themes_size: 11.03 MB (11568342 bytes)
    plugins_path: /usr/www/users/kingfexbcz/wp/wp-content/plugins
    plugins_size: 213.49 MB (223865619 bytes)
    database_size: 2.82 GB (3025862656 bytes)
    total_size: 42.18 GB (45289071944 bytes)

wp-active-theme

name: Hestia Pro (hestia-pro)
    version: 3.0.29
    author: ThemeIsle
    author_website: https://themeisle.com
    parent_theme: none
    theme_features: core-block-patterns, widgets-block-editor, post-thumbnails, title-tag, automatic-feed-links, custom-logo, html5, custom-header, customize-selective-refresh-widgets, custom-background, themeisle-demo-import, align-wide, header-footer-elementor, starter-content, style, script, editor-color-palette, menus, editor-style, woocommerce, wc-product-gallery-zoom, wc-product-gallery-lightbox, wc-product-gallery-slider, widgets
    theme_path: /usr/www/users/kingfexbcz/wp/wp-content/themes/hestia-pro
    auto_update: Disabled

wp-themes-inactive (2)

Hestia Pro Child: version: 0.1, author: ThemeIsle, Auto-updates disabled
    Twenty Twenty-Three: version: 1.1, author: the WordPress team, Auto-updates enabled

wp-mu-plugins (1)

defender-woo-cookie-fix.php: author: (undefined), version: (undefined)

wp-plugins-active (28)

Beehive Analytics: version: 3.4.6, author: WPMU DEV, Auto-updates disabled
    Branda: version: 3.4.9.3, author: WPMU DEV, Auto-updates disabled
    Click to Chat: version: 3.28, author: HoliThemes, Auto-updates disabled
    Code Snippets: version: 3.4.0, author: Code Snippets Pro, Auto-updates disabled
    Custom Order Status Manager for WooCommerce: version: 1.0, author: Bright Plugins, Auto-updates disabled
    Defender: version: 3.11.0, author: WPMU DEV, Auto-updates enabled
    DHL Express Rates & Labels: version: 3.9.0, author: HITShipo, Auto-updates disabled
    Fastway for WooCommerce: version: 2.1.15, author: Fastway, Auto-updates disabled
    FedEx Rates & Labels: version: 4.2.4, author: HITShipo, Auto-updates disabled
    Hummingbird: version: 3.4.5, author: WPMU DEV, Auto-updates disabled
    Hustle: version: 7.7.0, author: WPMU DEV, Auto-updates disabled
    Mailchimp for WooCommerce: version: 2.8.3, author: Mailchimp, Auto-updates disabled
    Redirect 404 to Homepage: version: 1.0, author: pipdig, Auto-updates disabled
    Regenerate Thumbnails: version: 3.1.5, author: Alex Mills (Viper007Bond), Auto-updates disabled
    Sequential Order Numbers for WooCommerce: version: 1.5.1, author: WebToffee, Auto-updates disabled
    Simple Logo Carousel: version: 1.9.1, author: IDE Interactive, Auto-updates disabled
    SmartCrawl: version: 3.6.2, author: WPMU DEV, Auto-updates disabled
    Smash Balloon Instagram Feed: version: 6.1.5, author: Smash Balloon, Auto-updates disabled
    Smush: version: 3.12.6, author: WPMU DEV, Auto-updates disabled
    UpdraftPlus - Backup/Restore: version: 2.23.4.26, author: UpdraftPlus.Com, DavidAnderson, Auto-updates disabled
    Variation Price Display Range for WooCommerce: version: 1.3.7, author: WPXtension, Auto-updates disabled
    WooCommerce: version: 7.7.0, author: Automattic, Auto-updates disabled
    WooCommerce Cart Abandonment Recovery: version: 1.2.25, author: CartFlows Inc, Auto-updates disabled
    WooCommerce Payfast Gateway: version: 1.5.3, author: WooCommerce, Auto-updates disabled
    WooCommerce Shipment Tracking: version: 2.3.1, author: WooCommerce, Auto-updates disabled
    WP Mail Logging: version: 1.11.0, author: WP Mail Logging Team, Auto-updates disabled
    WPMU DEV Dashboard: version: 4.11.18, author: WPMU DEV, Auto-updates disabled
    WP Statistics: version: 14.1.2, author: VeronaLabs, Auto-updates disabled

code-snippets (3)

snippet-6: name: In stock at specific KingFisher branches, scope: global, modified: 2022-11-04 15:51:47
    snippet-7: name: Fastway Shipping Label Code, scope: global, modified: 2023-05-24 08:54:20
    snippet-11: name: Remove Extra Image Sizes, scope: global, modified: 2022-11-10 18:16:34

wp-media

image_editor: WP_Image_Editor_Imagick
    imagick_module_version: 1690
    imagemagick_version: ImageMagick 6.9.10-23 Q16 x86_64 20190101 https://imagemagick.org
    imagick_version: 3.7.0
    file_uploads: File uploads is turned off
    post_max_size: 32M
    upload_max_filesize: 32M
    max_effective_size: 32 MB
    max_file_uploads: 20
    imagick_limits:
    imagick::RESOURCETYPE_AREA: 122 MB
    imagick::RESOURCETYPE_DISK: 1073741824
    imagick::RESOURCETYPE_FILE: 768
    imagick::RESOURCETYPE_MAP: 512 MB
    imagick::RESOURCETYPE_MEMORY: 256 MB
    imagick::RESOURCETYPE_THREAD: 1
    imagick::RESOURCETYPE_TIME: 1.844674407371E+19
    imagemagick_file_formats: 3FR, 3G2, 3GP, AAI, AI, ART, ARW, AVI, AVS, BGR, BGRA, BGRO, BIE, BMP, BMP2, BMP3, BRF, CAL, CALS, CANVAS, CAPTION, CIN, CIP, CLIP, CMYK, CMYKA, CR2, CRW, CUR, CUT, DATA, DCM, DCR, DCX, DDS, DFONT, DJVU, DNG, DOT, DPX, DXT1, DXT5, EPDF, EPI, EPS, EPS2, EPS3, EPSF, EPSI, EPT, EPT2, EPT3, ERF, EXR, FAX, FILE, FITS, FRACTAL, FTP, FTS, G3, G4, GIF, GIF87, GRADIENT, GRAY, GRAYA, GROUP4, GV, H, HALD, HDR, HEIC, HISTOGRAM, HRZ, HTM, HTML, HTTP, HTTPS, ICB, ICO, ICON, IIQ, INFO, INLINE, IPL, ISOBRL, ISOBRL6, J2C, J2K, JBG, JBIG, JNG, JNX, JP2, JPC, JPE, JPEG, JPG, JPM, JPS, JPT, JSON, K25, KDC, LABEL, M2V, M4V, MAC, MAGICK, MAP, MASK, MAT, MATTE, MEF, MIFF, MKV, MNG, MONO, MOV, MP4, MPC, MPEG, MPG, MRW, MSL, MSVG, MTV, MVG, NEF, NRW, NULL, ORF, OTB, OTF, PAL, PALM, PAM, PANGO, PATTERN, PBM, PCD, PCDS, PCL, PCT, PCX, PDB, PDF, PDFA, PEF, PES, PFA, PFB, PFM, PGM, PGX, PICON, PICT, PIX, PJPEG, PLASMA, PNG, PNG00, PNG24, PNG32, PNG48, PNG64, PNG8, PNM, PPM, PREVIEW, PS, PS2, PS3, PSB, PSD, PTIF, PWP, RADIAL-GRADIENT, RAF, RAS, RAW, RGB, RGBA, RGBO, RGF, RLA, RLE, RMF, RW2, SCR, SCT, SFW, SGI, SHTML, SIX, SIXEL, SPARSE-COLOR, SR2, SRF, STEGANO, SUN, SVG, SVGZ, TEXT, TGA, THUMBNAIL, TIFF, TIFF64, TILE, TIM, TTC, TTF, TXT, UBRL, UBRL6, UIL, UYVY, VDA, VICAR, VID, VIFF, VIPS, VST, WBMP, WEBP, WMF, WMV, WMZ, WPG, X, X3F, XBM, XC, XCF, XPM, XPS, XV, XWD, YCbCr, YCbCrA, YUV
    gd_version: 2.3.3
    gd_formats: GIF, JPEG, PNG, WebP, BMP, XPM
    ghostscript_version: 9.27

wp-server

server_architecture: Linux 4.19.0-24-amd64 x86_64
    httpd_software: Apache
    php_version: 8.0.28 64bit
    php_sapi: fpm-fcgi
    max_input_variables: 3500
    time_limit: 60
    memory_limit: 256M
    max_input_time: 60
    upload_max_filesize: 32M
    php_post_max_size: 32M
    curl_version: 7.64.0 OpenSSL/1.1.1n
    suhosin: false
    imagick_availability: true
    pretty_permalinks: true
    htaccess_extra_rules: true

wp-database

extension: mysqli
    server_version: 10.4.29-MariaDB-1:10.4.29+maria~deb10
    client_version: mysqlnd 8.0.28
    max_allowed_packet: 16777216
    max_connections: 151

wp-constants

WP_HOME: undefined
    WP_SITEURL: undefined
    WP_CONTENT_DIR: /usr/www/users/kingfexbcz/wp/wp-content
    WP_PLUGIN_DIR: /usr/www/users/kingfexbcz/wp/wp-content/plugins
    WP_MEMORY_LIMIT: 40M
    WP_MAX_MEMORY_LIMIT: 256M
    WP_DEBUG: false
    WP_DEBUG_DISPLAY: true
    WP_DEBUG_LOG: false
    SCRIPT_DEBUG: false
    WP_CACHE: false
    CONCATENATE_SCRIPTS: undefined
    COMPRESS_SCRIPTS: undefined
    COMPRESS_CSS: undefined
    WP_ENVIRONMENT_TYPE: Undefined
    DB_CHARSET: utf8
    DB_COLLATE: undefined

wp-filesystem

wordpress: writable
    wp-content: writable
    uploads: writable
    plugins: writable
    themes: writable
    mu-plugins: writable
    Plugin Support Williams – WPMU DEV Support

    (@wpmudev-support8)

    Hi @thekingfisher

    Thanks for response!

    I noticed that you do have WooCommerce and a few WooCommerce add-ons on site. As my colleague mentioned, there were some issues related to (especially payment ones) WooCommerce add-ons.

    I understand that you have already tried disabling all the plugins but I’m not sure if you tried that with your custom codes removed at the same time? If not – could you try:

    – remove your custom codes
    – and then start disabling WooCommerce add-on plugin one by one, checking the issue after each one?

    THis is just for testing to confirm if it may be related.

    Additionally: The nonce issue is only happening for you if you do have 2FA enabled but not without 2FA?

    Kind regards,
    Adam

    Plugin Support Nithin – WPMU DEV Support

    (@wpmudevsupport11)

    Hi @thekingfisher,

    Since we haven’t heard from you for a while. I’ll mark this thread as resolved for now. Please feel free to re-open the thread if you need further assistance.

    Best Regards
    Nithin

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Nonce Verification Failed Error’ is closed to new replies.