noxerr

when I search in html the nonce of the form I can’t find anything, what part/block am I supposed to copy? and where exactly am I supposed to compare this block (plugin, ye, but where?)
I’ve noticed now that it doesn’t happen anymore after 24h but after some days (I’ve removed the drop query string: id, after that it takes some days to break but still breaks)

yes, I’m refering to that plugin, also, about the report, I have sent it already several days ago. here’s a new one:
Report number: DIWNJFTY

Report date: 01/08/2022 12:22:01

I only have the honeypot or whatever protection. Nevertheless, my concern was more towards the fact that they are trying to inject code (about the spam protection I believe your plugin is very complete and offers a wide variety of options). I’m just guessing and hopping it has been programmed to sanitize any inputs but also I’m wondering if there’s anything I have to be careful with, such as while reading the input of the name from a php sript, or the comment input, since they may try to inject code

As said i have added forminator_nonce and it doesn’t fix it
Regarding back search, how should I do it to find out who generated that codE?

Thanks

As mentioned in my message, I have added the forminator_nonce, so it’s not that the solution.
Also, why does it happen after 24h? And why cache gets miss until it gets hit only 24h later and all the other issues from the main post?

I want to highlight that I have been using Elementor Shortcode (not Forminator Widget) to load the forms. Anyway, until 2 or 3 updates ago, my forms were not breaking, but now they break after 24h whether there were submissions or not. There must be something being cached only after 24h even though all my TTLs are 1 week except private which is I believe 30min.

Also, since it’s somewhat related to admin-ajax (which is in domain.com/wp-admin/admin-ajax, is there a chance it has any relation to the options under Cache->object->Cache wp-admin? It’s on in my case

Report number: UOGFKPJJ

also part of the response:

"postData": {
            "mimeType": "application/x-www-form-urlencoded; charset=UTF-8",
            "text": "action=forminator_load_form&type=forminator_forms&id=5641&render_id=0&is_preview=false&preview_data=%5B%5D&extra%5B_wp_http_referer%5D=%2Fpush-ups%2F&extra%5Bpage_id%5D=5616&extra%5Breferer_url%5D=&nonce=1a93b2b24b",
            "params": [
              {
                "name": "action",
                "value": "forminator_load_form"
              },
              {
                "name": "type",
                "value": "forminator_forms"
              },
              {
                "name": "id",
                "value": "5641"
              },
              {
                "name": "render_id",
                "value": "0"
              },
              {
                "name": "is_preview",
                "value": "false"
              },
              {
                "name": "preview_data",
                "value": "%5B%5D"
              },
              {
                "name": "extra%5B_wp_http_referer%5D",
                "value": "%2Fpush-ups%2F"
              },
              {
                "name": "extra%5Bpage_id%5D",
                "value": "5616"
              },
              {
                "name": "extra%5Breferer_url%5D",
                "value": ""
              },
              {
                "name": "nonce",
                "value": "1a93b2b24b"
              }
            ]

In ESI nonces I have added: forminator_nonce
also, the “admin-ajax.php”, the non working gives the answer:
{“success”:false,”data”:[{“code”:”invalid_code”,”message”:””}]}

and the working:
{“success”:true,”data”:{“html”:”<div class=\”forminator-ui forminator-custom-form forminator-custom-form-5641 forminator-design–material forminator_ajax\” data-forminator-render=\”0\” data-form=\”forminator-module-5641\”><br\/><\/div><form\n\t\t\t\tid=\”forminator-module-5641\”\n\t\t\t\tclass=\”forminator-ui…………………. (about 6kb data stored in my pc)`. The response of the valid one includes 32 matches with the word nonce but lots of code.. “find(‘input[name=\”forminator_nonce\”]’).val(),n=…………”
How should I share the .har file (php of admin ajax response)?

seriously this is unacceptable… a forms plugin where forms break every 10h, I’m literally a slave of checking if the form broke already to reset the cache. One more week like this and I’m uninstalling

I have just submitted it. Also, I’ve added the files through google drive. Could you please confirm you received it and have access to the files?

Thanks for your support.

is there any way I can upload all the forms privately? there are 3 forms that break simultaneously and 3 that doesn’t (I haven’t seen them broken yet). Maybe you can spot the difference

It’s not cloudflare since the issue gets fixed (temporary) everytime I clear the LitleSpeed Cache.

Also, important to note, it happens only after some hours, sometimes it’s more than 1 day sometimes less, and it happens simultaneously with several forms in several pages, but not all of them (it happens even with one form that doesn’t have a submit button since I’m using it only as a calculator).

Still happening.
Is there any chance CloudFlare is causing the issue?