Cloudron makes it easy to run web apps like WordPress, Nextcloud, GitLab on your server. Find out more or install now.


Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • Bookmarks
  • Search
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Brand Logo

Cloudron Forum

Apps - Status | Demo | Docs | Install
  1. Cloudron Forum
  2. WordPress (Developer)
  3. wordpress bad-signature error message when a user attempts to login at /my-profile.

wordpress bad-signature error message when a user attempts to login at /my-profile.

Scheduled Pinned Locked Moved WordPress (Developer)
2 Posts 1 Posters 376 Views 1 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • P Offline
    P Offline
    privsec
    wrote on last edited by
    #1

    When a user attempts to login at /my-profile they are presented with an error message in the URL that says "/dashboard/?login=bad-signature"

    When I turn on wordpressdebug this is what I see

    Oct 26 09:31:30 - - - - [26/Oct/2024:15:31:30 +0000] "GET /wp-includes/version.php HTTP/1.1" 200 - "-" "Mozilla (CloudronHealth)"
    Oct 26 09:31:30 - xx.xx.xx.xx - - [26/Oct/2024:15:31:28 +0000] "POST /wp-login.php HTTP/1.1" 302 - "https://domain.com/my-profile/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:131.0) Gecko/20100101 Firefox/131.0"
    Oct 26 09:31:31 - xx.xx.xx.xx - - [26/Oct/2024:15:31:30 +0000] "GET /dashboard/?login=bad-signature HTTP/1.1" 200 38239 "https://domain.com/my-profile/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:131.0) Gecko/20100101 Firefox/131.0"
    Oct 26 09:31:32 - xx.xx.xx.xx - - [26/Oct/2024:15:31:32 +0000] "POST /wp-admin/admin-ajax.php HTTP/1.1" 200 181 "https://domain.com/dashboard/?login=bad-signature" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:131.0) Gecko/20100101 Firefox/131.0"
    

    I have reached out to the theme editor to see if they knew why, and they said it was some security situation.
    I disabled my security plugin, word fence, and it still is doing the same thing. So now I am wondering if this is a package issue.

    My uses need to be able to log in at the /my-profile as the social login button I am using only works on this page and not the my-account page.

    Users are still able to log in via my login modal on the home page as well as login via the /my-account page.

    After users sign in, they can successfully visit the /my-profile page.

    1 Reply Last reply
    0
    • P Offline
      P Offline
      privsec
      wrote on last edited by
      #2

      This appears to be a plugin conflict with my theme. Sigh, back to the theme we go

      1 Reply Last reply
      0

      Hello! It looks like you're interested in this conversation, but you don't have an account yet.

      Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.

      With your input, this post could be even better 💗

      Register Login
      Reply
      • Reply as topic
      Log in to reply
      • Oldest to Newest
      • Newest to Oldest
      • Most Votes


      • Login

      • Don't have an account? Register

      • Login or register to search.
      • First post
        Last post
      0
      • Categories
      • Recent
      • Tags
      • Popular
      • Bookmarks
      • Search