Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Failed nonce security check on localhost #223

Closed
kwaimind opened this issue Mar 9, 2015 · 4 comments
Closed

Failed nonce security check on localhost #223

kwaimind opened this issue Mar 9, 2015 · 4 comments

Comments

@kwaimind
Copy link

kwaimind commented Mar 9, 2015

Hey

I know this issue has been raised before but when testing this plugin on localhost, I get the following error:

Failed nonce security check. Please reload the page and submit this form again.

However, when I run the firefox web developer tool and disable all cookies, the form works fine. I have no caching engine running, and have tried setting SSL Verify Peer to true and false - same issue. Advanced Error Logging is giving me no clues.

Can you help?

Currently running

  • Plugin Version 5.4.1
  • Wordpress Version 4.0.1
  • Browser Information Google Chrome 41.0.2272.76 on Mac
  • Server Information Apache/2.2.29 (Unix) mod_fastcgi/2.4.6 mod_wsgi/3.4 Python/2.7.8 * PHP/5.6.2 mod_ssl/2.2.29 OpenSSL/0.9.8za DAV/2 mod_perl/2.0.8 Perl/v5.20.0
@EvanHerman
Copy link
Owner

Hi Kwaimind,

I know the only other times this issue has occurred is when the site was also running some sort of back end caching or advanced caching plugin.

The nonce security number is generated on each page load and is unique. If you have a caching plugin, the nonce number gets stored and a new one isn't generated so when the form is submitted the nonce doesn't return a unique number as expected and throws an error. This check is in place to prevent cross site scripting attacks on the form.

What other plugins are you running?

Thanks,
Evan

@kwaimind
Copy link
Author

kwaimind commented Mar 9, 2015

Hey

Ah I see. Strange as I am not running a cache though. This is my localhost site, running via MAMP with a standard Wordpress setup and the following plugins:

screen shot 2015-03-09 at 14 42 37

Any of these look like they might cache a session?

Thanks, Daniel

@EvanHerman
Copy link
Owner

Can you try deactivating all other plugins and checking if things work? I'm wondering if it may be related to another plugin that you have installed.

Evan

@EvanHerman
Copy link
Owner

If you are still having issues please feel free to reach out to me.

Thanks,
Evan

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants