kayeldee

I’m confused – we already had those urls in our robots.txt file.

What does this mean in settings:

“Publicize, promote, and share my events marked as public on the Timely network”

That is now off, but it was on earlier today.

My suggestion is to report 404s when they happen so that the other plugin can handle it.

Thanks for deleting the image and for the tips.

As you pointed out the robots.txt edit isn’t going to protect against bots that don’t respect robots.txt.

I also suspect this bot was referred from timely since it had our domain in the url params. Why would you need the domain in other parts of the url inside the plugin?

I understand that security is multilayered and we need to take other actions to protect the server but you’re leaving the door open and we’d like to close it. Will you be updating the plugin to be more precise with urls? Or do you think it doesn’t matter?

A bot was spamming that url (minus the garbage at the end i entered). We have a plugin installed that limits the amount of 404ing a bot can do. Since your plugin wasn’t returning the 404 the bot was allowed to continue until we banned it’s IP on the server.

Also, I unchecked “Publicize, promote, and share my events marked as public on the Timely network” in case someone or thing is scanning your site for potential victims.

I’m removing the links from this thread now, please do the same.

Have a look at this link:

https://[site domain/etc]/action~agenda/tag_ids~329/cat_ids~296/http:/[site domain]/asdasdf/

I added “asdasdf” to that link myself.

And why is “http:/[site domain]” in the URL?

I had the same symptoms.

One of the wp-admin generated js files was corrupted. It took to reinstalls of the wp core to fix it.

Leaving this here in case anyone else runs into this problem.

Thanks for the info Daniel, that was vey helpful.

I’ll leave this here in case it helps someone else. One of the plugins being used in this install was using the ‘edit_post’ capability and for some reason the admin user didn’t have that capability even though it was a new post they were able to create.

So I hacked it and added it for the admin user. It works now.

I don’t think the way I fixed this problem is very good. Maybe someone else can offer a better suggestion.

I’m having this problem as well. Working on it.