Support

Home Forums Community Forum Periodic Security Error Preventing Booking

Periodic Security Error Preventing Booking

Posted: June 27, 2018 at 2:55 am


cfrancis

June 27, 2018 at 2:55 am

Hi there – We have had several wordpress people try to fix this glitch we have been experiencing over the past few months.
They make changes, and the registration process works again for a few bookings and then this happens when people try to book:
“Sorry, there was a security error and your registration was not saved”.

We are looking to change our booking system because of it, but thought we would try to contact you as a last resort and see if you can help?

Many thanks and regards,
Catherine Francis – http://www.cacaoceremonies.com


Tony

  • Support Staff

June 27, 2018 at 3:26 am

Hi Catherine,

Your site is using EE3, on EE3 this error:

“Sorry, there was a security error and your registration was not saved”.

Is shown for 2 reasons, either the form nonce is empty (unlikely here imo) or wp_verify_nonce() failed when checking that nonce (this is likely the cause on your setup).

Each time the registration form is generated it creates a nonce:

https://codex.wordpress.org/WordPress_Nonces

That value is passed around through the registration to make sure it’s a valid submission. Now WP Nonces are not true nonces in that they can actually be used multiple times within a certain timeframe, so I think the problem with your site is due to caching (Litespeed cache is enabled on your server – http://take.ms/59As6).

To explain a little, the reg form gets generated and WP creates a nonce for that form, when its output to the user your server saves the page to cache which means the next user(s) that visit just see that cached version (including the ‘old’ nonce), if they submit the registration form after the nonce has expired, they’ll see the above error. So the reason you are getting the error intermittently is that it depends on when the page is cached and how long its cached for.

The fix is to contact your host and have them disable LiteSpeed caching on your site, they can either do it site wide, or for the EE specific pages, we have some documentation for the latter here:

https://eventespresso.com/wiki/setup-nocache-exclusion-rules-event-espresso/

But if you go to Event Espresso -> General Settings -> Page Settings

The page selected in that section need to be excluded from caching permanently.

The support post ‘Periodic Security Error Preventing Booking’ is closed to new replies.

Have a question about this support post? Create a new support post in our support forums and include a link to this existing support post so we can help you.

Event Espresso