crowdsecurity / cs-wordpress-bouncer

CrowdSec is an open-source cyber security tool. This plugin blocks detected attackers or display them a captcha to check they are not bots.
https://wordpress.org/plugins/crowdsec/
MIT License
37 stars 6 forks source link

2 Errors on WordPress Version 5.9.3 #86

Closed jflattery closed 2 years ago

jflattery commented 2 years ago

WordPress Version 5.9.3 CrowdSec Plugin Version 1.4.0

The following two errors are generated with the plugin enabled. Errors go away with plugin disabled.

A PHP session was created by a session_start() function call. This interferes with REST API and loopback requests. The session should be closed by session_write_close() before making any HTTP requests.

The REST API request failed due to an error. Error: cURL error 28: Operation timed out after 10001 milliseconds with 0 bytes received (http_request_failed)

julienloizelet commented 2 years ago

Thank you for reporting this. Will try to fix it asap in a next release.

julienloizelet commented 2 years ago

Hi @jflattery , could you try with the 1.4.1 version I just released ? Thanks

jflattery commented 2 years ago

Fixed!

julienloizelet commented 2 years ago

Thanks, @jflattery.

Could you please help me to understand better this issue? (I fixed it, but it was like blind debug ...)

On a fresh WordPress installation, I was only able to see the error messages when I used the tools "Site Health". (when the bouncer was configured also to bounce admin area). I saw also a lot of references about this kind of errors and all was about "plugin conflict".

In order to investigate more, could you tell me :