Fritsje

Any idea how to solve this when using Google Tag Manager (GTM)?
My GA tracking works with GTM.

I fully agree with @kasperkamperman here and was going to suggest what he wrote: if you configure GA privacy friendly, you don’t need consent, so it would be great if the plugin authors would implement an option to exclude GA from auto-blocking, as GA is widely used and as said: does not need consent when configured properly (so excluding it would make sense).

It would be worth my donation if this feature could be implemented, that is for sure ??

I solved the issue: the problem was not in the plugin but located between the chair and the keyboard…
Apparently, for this one site I had not enabled the cookie sollution ao there was nothing to display, and thus a black screen was shown.

My settings are:

Completely Block Access To XMLRPC: DISABLED
Disable Pingback Functionality From XMLRPC: ENABLED

There are not “PINGBACK”-rules in my htaccess file. The word ‘PINGBACK’ does not appear anywhere.

Whitelist functionality in my .htaccess file (I changed the IP addresses):

#AIOWPS_LOGIN_WHITELIST_START
<FilesMatch “^(wp-login\.php)”>
Order Allow,Deny
Allow from https://www.mysite.com
Allow from 999.999.999.999
Allow from 66.66.666.66
</FilesMatch>
#AIOWPS_LOGIN_WHITELIST_END

Strangely: only the 66-address is the one I entered and is showing in my dashboard AIO security plugin as being whitelisted, I guess the 999-address is my host?

What should the pingback rules look like? (So I can search for them, the word ‘pingback’ does not exist in the file).

Have you confirmed whether the Apache directives for the login whitelist feature are working correctly on your server? ie, one simple test is to try accessing your login page from an IP address which is not “whitelisted”.

Yes I checked and indeed: I can access the custom login page from a non-whitelisted IP. This was not the case 3 days ago.

Since you said that this feature is active, can you please check what you see when you go to the following page on your site:
yoursite.com/xmlrpc.php

XML-RPC server accepts POST requests only.

Thanks for your reply.
Disable Pingback Functionality From XMLRPC is already active.

The brute force attacks continue, and the whitelist feature might work, and it did for a while, but since this past week clearly the people running the bruteforce farms have found a way to bypass it.

I will take other measures and thank you again for your help.

Yes, but will this feature not disable auto-posting to FB/Twitter (Jetpack) features?

Also: the recent wave of bruteforce attacks started 3 days ago, same for some other users that have posted here. Is this not an indication something might be broken?

Or is the login whitelist feature, that should allow only the IP I entered, to be able to access the login page, not working without Completely Block Access To XMLRPC feature?

Because if so: why is this option even existing?

I am not trying to be a smart@$$, just not understanding why suddenly the whitelist feature does not work anymore (100s of IP addresses can suddenly access my login page).

If Completely Block Access To XMLRPC feature does not break Jetpack auto-post features I will enable it immediately.

Thanks for your help!

Hi, I am having the same issue since last night: I got more than 100 brute force attempts on one of my sites.
I do not have Completely Block Access To XMLRPC enabled.
I do have custom login page enabled, as well as the Login whitelist, yet the attack uses multiple IP-adresses to try to login while I do only have 1 IP-address (mine) enabled in the whitelist.

How are they able to find my login page while it is custom? How are they able to bypass the IP-whitelist setting?

The attack is still continuing while I write this.

Hope my issue is of a different nature, I am in contact with support now, fingers crossed!

I see this issue has been resolved, unfortunately I cannot find the solution anywhere. Could you please share it?
I have exactly the same issue: I got Pretty Link Pro, installed Google Analytics by Monsterinsights, set my links to Meta Refresh and Javascript, switched on GA tracking on the GA plugin and on the Pretty Link plugin, and enabled GA tracking on my links. The links are working fine but no GA tracking.
Then I installed Google Analyticator and did enabled it, enabled GA tracking, set my links first to meta refresh, tested, then to Javascript, tested: no GA tracking.

GA by Monsterinsights updated today but is not working with the tracking, and same for Google Analyticator in my case. I tested on multiple sites.

Any help?

Final update:
After my host kept denying anything was wrong with the connection of the server, I asked them for a roll-back of the WP install. This seemed to work for some hours and so I posted the above.
But soon the trick failed and my youtube videos were not working anymore.

I then moved my site to another host, and now all I need to do is edit and save any page or post with a youtube video in the body content and voila: the video preview is there after saving.

Clearly the host failed me here, and after I moved away they apologized for not investigating this issue for me because they finally did find that indeed the physical server that my site was hosted on was having a hardware connection issue.

So if you got this same issue, and the videos work on and off, please check the connection of your site with some tools and if you get errors in the connection, chances are that this is the cause of the youtube videos not showing up.

I have found the sollution:
Roll back your WP install to 4.5.0 (or have your host do this for you), then let the install automatically upgrade to 4.5.2 and then you need to edit/save your pages/posts containing the youtube URL and voila: it appears again!
Yes, resaving all posts/[ages is a pain in the behind but at least the videos are showing.

Hope this helps for you too.

Anyone got any progress with this?

I also have disabled all plugins and indeed the videos are not showing.

If it is JQMIGRATE or not: fact is that this error started to show it’s ugly head directly after the WP update to version 4.5.1 and has not been away since.
That article on Stackexchange states that it is just a message, but on other places I read that this JQMIGRATE-thing is causing scripts to stop running at a certain point on the pages, and indeed it looks like the youtube-url is not being converted, therefore it must be so that a script that does this conversion is not working through the page.

I have had NO from my host and my theme developer. Does anyone know the path to contact WP dev team about this in a way that they take an actual look at the issue?