Wordfence Security (@mmaunder)

Forum Replies Created

Viewing 5 replies - 1 through 5 (of 5 total)
  • Sorry I entered wordfence dot org as my email address an then edited it a few seconds later to my correct email which is mark at wordfence dot com. You must have loaded the page faster than I could edit. Sorry about that.

    I’ve implemented the fix suggested here with the User Role Editor plugin:

    http://www.s2member.com/forums/topic/dont-upgrade-to-bbpress-2-2/

    It works like a charm and we’re up and running again with it on our production site.

    John I’d be more than happy to set up a linux VPS with wp.org installed with s2members and bbpress configured to reproduce the issue. If that would help you get a fix out sooner, let me know and I’ll get it up within a few minutes. Drop me an email at mark at wordfence dot com.

    Mark

    Thanks, I just came back to confirm that it’s S2Members related.

    When I create a new user they can view the forum URL’s. But when I change their role to “s2Member level 2” or any s2 level, they instantly get 404’s on all forum pages.

    Heading over to s2forums to try and find that post you mentioned.

    Jennifer,

    Yes we’re using S2Member but nothing changed with that. The upgrade seems to have triggered it so perhaps it’s an incompatibility between s2member and 2.2.

    After I downgraded to 2.1.3 I’m getting “You do not have permission to create new topics.” for any user including admin when they try to create a new topic. Looks like the 2.2 upgrade changed the DB schema making downgrade impossible?

    So we’re between a rock and a hard place. I’m going to dive into the bbPress code because this is a production website supporting our security plugin. If you have any additional pointers like the s2member suggestion which was very helpful I’d very much appreciate them.

    Regards,

    Mark.

    I’ve also had to downgrade to 2.1.3 after getting reports from some users that they were seeing the page not found page on all pages under our /forums/

    I’ve filed a trac ticket here:

    https://bbpress.trac.wordpress.org/ticket/2041

    Copy and pasting the text:

    After upgrading to 2.2 I got reports from certain users that they were seeing our page not found on all forum pages under the /forums/ URL including the base URL itself.

    I logged in and tested it with my admin account and did not see it.

    I created a normal user account and also could not repro.

    I then signed in as that specific user and got a repro.

    I then checked the network activity in Chrome and noticed that the site was sending a 200 HTTP code but serving up the standard 404 page. Which explains why I wasn’t seeing any 404’s in my web server error log.

    Note that our forums are accessed via HTTPS so this may help you repro.

    I downgraded to 2.1.3 and instantly the issue was fixed.

    I haven’t noticed any heuristic with the user account that I managed to repro on. I even checked the cookie string to see if there was something odd about that users cookies, but didn’t notice anything.

Viewing 5 replies - 1 through 5 (of 5 total)