Security check failure on unencrypted album

  • Resolved mlecat

    (@mlecat)


    4 months ago

    Maybe the same bug as the previous one:

    I’m on a site page, logged in as an admin. When I click on an album’s digital ID, it should normally take me to the album’s management page.


    I have the message “Security check failure on unencrypted album ID XXXX”

Viewing 9 replies - 1 through 9 (of 9 total)
  • Plugin Author Jacob N. Breetvelt

    (@opajaap)

    Yet another link i forgot to convert to cryptic.
    Will be fixed in the next version.
    Thanx for the report

    Plugin Author Jacob N. Breetvelt

    (@opajaap)

    Fixed in the current release version

    Thread Starter mlecat

    (@mlecat)

    It works, thanks.

    Jacob, I seem to be receiving the “Security check failure on unencrypted album ID XXXX” error now after updating WP, PHP version, and the plug-in.

    Can you help?

    WordPress version: 6.6.1

    Current PHP version: 8.2.21
    WPPA+ API Version: 8.8.03.003

    Plugin Author Jacob N. Breetvelt

    (@opajaap)

    What are you doing to get the message? there are over 100 locations where the album id is inspected from an url or post, so i need to know what the actions is to get the message.

    Thanks for the reply but you can disregard.

    Also have the “Security check failure on unencrypted album ID” error with this kind of URL: https://www.chevaliers4vents.com/association/galerie-photo?wppa-album=3
    And also a similar issue but on a picture with this kind of URL: https://www.chevaliers4vents.com/association/galerie-photo?wppa-album=3&wppa-photo=208

    It’s something the Google Search Console has warned me about.

    WordPress 6.6.2, WPPA 8.8.07.004 and Php 8.1 (same thing with Php 8.3).

    Plugin Author Jacob N. Breetvelt

    (@opajaap)

    To make it impossible for malicious people to change the photo or the album id in an url and hence have the potential possibility to see items that are not intented for their eyes, urls with integer album or photo ids are no longer allowed.

    All items (photos etc and albums) have their unique cryptic code in their metadata (in the wppa db tables) that should be used in urls.

    I agree that the errormessage may be a bit brutal, i will change it into a more friendly and descriptive message, just to be kind to the visitor. It is just waiting for google to update its data.

    Ok, thanks, I thought it may be something like that, so I’ll have a look at the best way to tell Google to stop trying to check those URLs without hindering URLs with encrypted IDs.

Viewing 9 replies - 1 through 9 (of 9 total)
  • You must be logged in to reply to this topic.