dwlorimer

I’m seeing a “jquery is not defined” error in the console, but that error only throws when Wordfence Login Security plugin is enabled. It does not show when it is disabled.

I also have this exact same issue. It began somewhere after the 23rd of April.
Siteground host, PHP 7.4.33, Uncode theme if that helps any. Most recent version of WP, and all plugins and themes updated.
I have to remove or rename the Wordfence Login Security Plugin (I’m using only the login security plugin) via FTP in order to log into my site. The issue is the 2FA.

https://datadelveengineer.com/admin

I also have this exact same issue. It began somewhere after the 23rd of April.
Siteground host, PHP 7.4.33, Uncode theme if that helps any. Most recent version of WP, and all plugins and themes updated.
I have to remove or rename the Wordfence Login Security Plugin (I’m using only the login security plugin) via FTP in order to log into my site. The issue is the 2FA.

https://datadelveengineer.com/admin

Thank you for that link. That is helpful. Basically, what I’m understanding from my read of that is that I need to switch to using the X-Accel-Redirect, and not expect the Force Download to perform as it used to.

My host is being a bear about allowing me to add that, but I will pursue that route, as it appears to be the correct solution to pursue.

Thank you very much! I found it, and it works great!

I heard back from support on my ticket I submitted with them, so I’m posting it here in case anyone else has run into this issue:

“In the Ultimate Member 2.x default registration disabled and redirects to UM registration page. It have been done in purpose from security reason. Huckers may use default registration functionality to get access to your site bypassing UM protection.

If you want to use default registration functionality, please add code below to the end of the functions.php file of the active theme directory.

// Disable UM registration protection, allow default registration functionality
remove_action( 'login_form_register', 'um_form_register_redirect', 10 );

“

Anyone?

Thank you, John! That put me on the right track. The issue was the nginx header limits.

I am using plesk, and found instructions on how to increase it here:

https://support.plesk.com/hc/en-us/articles/214028909-Websites-hosted-on-Plesk-server-are-unavailable-with-502-Bad-Gateway-upstream-sent-too-big-header-while-reading-response-header

Hopefully that will be helpful to someone else.

Nevermind — I just figured it out! You have to use the plugin in Site #1 of your multisite. The original site you created the multisite with. Then it works correctly.

We are using an older version of the Genesis Theme. We use the shortcode to include the blog posts on our main page.

Yes, I understand that it’s probably a strange thing not experienced by all users. I just thought it might be worth checking for an open div that doesn’t get closed in the codebase or something.

I was able to find and solve this change.

Please see my comments at this link:
https://gist.github.com/champsupertramp/c1f6d83406e9e0425e9e98aaa36fed7d

It appears that UM changed the um_account_secure_fields from wanting the name of the tab, to wanting the id of the user (but the code comments still say $tab_key).

The change appears to be this:

global $ultimatemember;
$id = um_user('ID');

…
$fields = apply_filters( 'um_account_secure_fields', $fields, $id );

Instead of the old:
apply_filters('um_account_secure_fields', $fields, 'general' );

No, the site is hosted by WP-Engine and managed by it, so they’re impossible to separate. The staging site is also, but WP-Engine doesn’t run as much security on the staging site.

I cannot do that on our production site. And our staging site, as I indicated, works perfectly fine, even as a fresh copy of the production site. It’s all the same plugins.

The download button works fine, which is using a similar file reference: https://www.skypeug.com/?mdocs-file=2266
It’s only the preview reference that isn’t working.

I guess we’ll just turn previews off for now. I’m guessing it’s some type of conflict with wp-engine or something.

Thanks.

Is it possible that this could be caused by session information not being set properly?

If I use the pop-out link, it loads a url like this that looks exactly the same:
https://docs.google.com/viewerng/viewer?url=https://www.skypeug.com/?is-google%3D2266&mdocs-session=9441f8a01ed8f103c4107132114168d2

Edit – after poking around more, I see that the document is set by the id, not the session, as this link is the same:
https://docs.google.com/viewerng/viewer?url=https://www.skypeug.com/?is-google%3D2266

How does this code work? Is something not processing the is-google variable?

• This reply was modified 7 years, 3 months ago by dwlorimer. Reason: found new information

I have tried everything — I have stopped loading all custom .js scripts (outside of wordpress core); I have replaced the current jquery.js version on the site with a fresh copy of version 3.2.1.

I never see the error in the console that you see, in any browser (Chrome, FF, and Edge), and none of these changes have changed the fact the it loads the page source every time.

So I made a fresh copy of staging from production, and …. it works great on staging, but not on production.

We use wpengine. So there must be something that runs on production that does not run on staging, b/c the sites are identical copies now, and we still have the issue.

If we figure it out, I’ll let you know. This is the strangest thing.