Cloudron makes it easy to run web apps like WordPress, Nextcloud, GitLab on your server. Find out more or install now.


Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • Bookmarks
  • Search
Skins
  • Light
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Brand Logo

Cloudron Forum

Apps | Demo | Docs | Install
  1. Cloudron Forum
  2. WordPress (Developer)
  3. wordpress bad-signature error message when a user attempts to login at /my-profile.

wordpress bad-signature error message when a user attempts to login at /my-profile.

Scheduled Pinned Locked Moved WordPress (Developer)
2 Posts 1 Posters 102 Views 1 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • P Offline
    P Offline
    privsec
    wrote on last edited by
    #1

    When a user attempts to login at /my-profile they are presented with an error message in the URL that says "/dashboard/?login=bad-signature"

    When I turn on wordpressdebug this is what I see

    Oct 26 09:31:30 - - - - [26/Oct/2024:15:31:30 +0000] "GET /wp-includes/version.php HTTP/1.1" 200 - "-" "Mozilla (CloudronHealth)"
    Oct 26 09:31:30 - xx.xx.xx.xx - - [26/Oct/2024:15:31:28 +0000] "POST /wp-login.php HTTP/1.1" 302 - "https://domain.com/my-profile/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:131.0) Gecko/20100101 Firefox/131.0"
    Oct 26 09:31:31 - xx.xx.xx.xx - - [26/Oct/2024:15:31:30 +0000] "GET /dashboard/?login=bad-signature HTTP/1.1" 200 38239 "https://domain.com/my-profile/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:131.0) Gecko/20100101 Firefox/131.0"
    Oct 26 09:31:32 - xx.xx.xx.xx - - [26/Oct/2024:15:31:32 +0000] "POST /wp-admin/admin-ajax.php HTTP/1.1" 200 181 "https://domain.com/dashboard/?login=bad-signature" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:131.0) Gecko/20100101 Firefox/131.0"
    

    I have reached out to the theme editor to see if they knew why, and they said it was some security situation.
    I disabled my security plugin, word fence, and it still is doing the same thing. So now I am wondering if this is a package issue.

    My uses need to be able to log in at the /my-profile as the social login button I am using only works on this page and not the my-account page.

    Users are still able to log in via my login modal on the home page as well as login via the /my-account page.

    After users sign in, they can successfully visit the /my-profile page.

    1 Reply Last reply
    0
    • P Offline
      P Offline
      privsec
      wrote on last edited by
      #2

      This appears to be a plugin conflict with my theme. Sigh, back to the theme we go

      1 Reply Last reply
      0
      Reply
      • Reply as topic
      Log in to reply
      • Oldest to Newest
      • Newest to Oldest
      • Most Votes


      • Login

      • Don't have an account? Register

      • Login or register to search.
      • First post
        Last post
      0
      • Categories
      • Recent
      • Tags
      • Popular
      • Bookmarks
      • Search