Support

Home Forums Event Espresso Premium EE4 Security Issues preventing registrations

EE4 Security Issues preventing registrations

Posted: June 16, 2014 at 8:29 pm

Viewing 10 reply threads


Chris Stambaugh

June 16, 2014 at 8:29 pm

Hi,

If a user comes to my site via a web browser other than Chrome, they cannot register for classes because of a security error message as indicated below….

An error has occurred:
We’re sorry but your request failed to pass a security check.
Please click the back button on your browser and try again.
TCKSLC-DTCKSLC-PROTICSEL-293

While browsing with IE, when I hover over the registration button, I can see that the address I’m going to be directed to is not an https address, but rather a http address. Not sure if this is the issue or what is going on.

I’ve deactivated my WP Super Cache plugin with no effect (in remains disabled currently).

To recreate this issue, visit this page: http://bsop.ca/list-of-photography-classes-and-workshops-at-the-bsop/

Visit the Lightroom class and then try to register for the October class. As soon as you choose a quantity and click the Register Now button, the error should appear.

I’m stuck and could really appreciate some help as soon as possible as this is a serious issue from a monetary point of you.

Thanks,

Paul


Josh

  • Support Staff

June 16, 2014 at 9:13 pm

Hi Paul

First things first, please go to this page and view the source with any browser other than Chrome (or chrome, but logged out).

Then you can scroll down to the bottom of the page source where you will see this:

https://www.evernote.com/shard/s4/sh/2b93cffe-af3a-46f1-ba9d-e5ed54b14fff/96f0a5c425ffe7d344a81d8ee506a2af

<!-- Dynamic page generated in 1.518 seconds. -->
<!-- Cached page generated by WP-Super-Cache on 2014-06-13 17:24:10 -->

<!-- super cache -->

This means your site is still serving static web pages from the cached files. The WP super cache plugin has no control over this if it’s disabled. The .htaccess file and definitions in the wp-config.php file have taken over.

Please reactivate your caching plugin, then clear the cache, then disable caching while leaving the caching plugin enabled.

As an aside, you might find that your site will run faster and with fewer errors without the caching plugin. In general, caching plugins are better suited for web sites that serve static content. Sites that serve dynamic content like online registration forms and e-commerce carts can serve up some of their non-dynamic content with caching plugins, but this requires configuring the caching plugins correctly.

I think you’ll find that you’ll get more bang for your buck if you optimize other aspects of your site. Here’s a guide I can recommend:

http://daverupert.com/2010/06/web-performant-wordpress/

Please note that Dave mentions using a caching plugin in step 5 part b, which you can skip -or- correctly configure the caching plugin to not cache any of the pages that are serving dynamic content.


Chris Stambaugh

June 16, 2014 at 9:21 pm

Josh,

I’ve done as you’ve suggested, but the problem persists.

I will send you login credentials.

Paul


Josh

  • Support Staff

June 16, 2014 at 9:39 pm

Hi Paul,

Your log in you sent does not work, but I have another observation from viewing the site from the front end. The session can’t be maintained across the change from http to https.

Please go to edit your registration checkout page and make sure that it’s set to be secured (as https). A general rule of thumb is if you have an Event Espresso shortcode on a page that’s secured, then next page in the registration checkout needs to also be secured.


Chris Stambaugh

June 16, 2014 at 9:44 pm

Just resent login credentials with proper username.

Made the change to secure the registration checkout page. No joy. Same issue.

Paul


Josh

  • Support Staff

June 16, 2014 at 9:54 pm

Hi Paul,

I don’t know where to start to look on your site. Do you happen to know what’s been changed (settings, plugins, etc.) since the time this was working before?


Chris Stambaugh

June 16, 2014 at 9:57 pm

No, sorry I don’t. I don’t know for sure when it stopped working, except that registrations slowed down a couple of weeks ago and I thought it was just due to it being summer here.

I can do the disable plugin thing, but not sure that will help.

Any chance you could call me at 1-877-778-1745 to work this through? It is late here (10 pm) and I’d rather not have to play tag forever to try to figure out if at all possible.

Paul


Chris Stambaugh

June 16, 2014 at 10:01 pm

I tried deactivating non-essential plugins with no change to the problem.


Josh

  • Support Staff

June 16, 2014 at 10:25 pm

Paul,

I think you might have changed the WordPress Address and Site address settings, and that’s what broke things. I took a guess and changed them to http://www.bsop.ca because that’s what the site was the last time you asked about something related to the iPad, and in the other thread you mentioned there was a difference between the www and non www pages. Anyway, you’ll find that the registration works as expected now.

I still think your .htaccess file should be looked at by someone who knows how to set these up, especially with regard to www to non-www redirects, because the redirects don’t seem to be working correctly.


Chris Stambaugh

June 17, 2014 at 10:12 am

Josh,

First, I want to say that I really appreciate the support you provide. I’ve dealt with a lot of support people over the last 30 years, and you are right at the top of the class. If it weren’t for you, I probably wouldn’t be using EE today.

Can you please elaborate on what you changed? (Where it is in the WP menus)?

I will check futher into the .htaccess file as you suggest.

Paul


Josh

  • Support Staff

June 17, 2014 at 1:06 pm

Sure, it’s two URL options located in WordPress General Settings:

http://codex.wordpress.org/Settings_General_Screen

Specifically the WordPress Address (URL) and Site Address (URL) settings.

Viewing 10 reply threads

The support post ‘EE4 Security Issues preventing registrations’ is closed to new replies.

Have a question about this support post? Create a new support post in our support forums and include a link to this existing support post so we can help you.

Event Espresso