Futtura Posted October 26, 2022 Posted October 26, 2022 Since last week, users can't register at Forum anymore. How to fix this? We are using the Invision Community 4.7.2.1. At Admin logs, show this: Quote Reoccurring system log entries may be indicative of a problem that should be addressed. A summary of the top reoccurring recent log entries are shown below. Review the system log for further details. Message Count Array ( [error] => invalid_grant [error_description] => Bad Request ) 15
Marc Posted October 26, 2022 Posted October 26, 2022 We would need to look further into this for you, however the access details on file appear to be incorrect or missing. Could you please update these details by visiting your client area, selecting the relevant purchase, then clicking "Review/Update Access Information" under the "Stored Access Information" section. We look forward to further assisting you.
Futtura Posted October 26, 2022 Author Posted October 26, 2022 Ok, updated details at Client Area for Admin CP. PS.: We already disabled all Cloudflare optimizations (security and performance). SeNioR- 1
Marc Posted October 26, 2022 Posted October 26, 2022 Please check the details there, as they are not allowing access unfortunately
Futtura Posted October 26, 2022 Author Posted October 26, 2022 42 minutes ago, Marc Stridgen said: Please check the details there, as they are not allowing access unfortunately Updated the server access information too.
Jim M Posted October 26, 2022 Posted October 26, 2022 Unfortunately, the administrator credentials to our software are not correct. Please verify and update.
Futtura Posted October 26, 2022 Author Posted October 26, 2022 2 minutes ago, Jim M said: Unfortunately, the administrator credentials to our software are not correct. Please verify and update. Sorry about that. I just corrected the information.
Jim M Posted October 26, 2022 Posted October 26, 2022 Thank you, I was able to login now. Do you know what login/registration method is being used when this is being encountered? I ask, as I just tried all methods to register and login with and I did not see any issues. Nor did this error popup again so we would need more info to further troubleshoot what is happening here.
Futtura Posted October 26, 2022 Author Posted October 26, 2022 1 hour ago, Jim M said: Thank you, I was able to login now. Do you know what login/registration method is being used when this is being encountered? I ask, as I just tried all methods to register and login with and I did not see any issues. Nor did this error popup again so we would need more info to further troubleshoot what is happening here. The users mentioned that tried to register via Register Page (normal). After submit form, appears the message: "You don't have authorization to create an account at this website". Can I send you, as private message (because has member data), the screenshots to demonstrate it?
Randy Calvert Posted October 26, 2022 Posted October 26, 2022 8 minutes ago, Futtura said: The users mentioned that tried to register via Register Page (normal). After submit form, appears the message: "You don't have authorization to create an account at this website". Can I send you, as private message (because has member data), the screenshots to demonstrate it? Is the email address or IP address used by that user blocked? ACP > Members > Member Settings > Ban Settings Typically I only see that message if the user is blocked... or if they're not allowed by the Spam Prevention System... ACP > Members > Content Moderation > Spam Prevention > Spam Defense Logs
Futtura Posted October 26, 2022 Author Posted October 26, 2022 6 minutes ago, Randy Calvert said: Is the email address or IP address used by that user blocked? ACP > Members > Member Settings > Ban Settings Typically I only see that message if the user is blocked... or if they're not allowed by the Spam Prevention System... ACP > Members > Content Moderation > Spam Prevention > Spam Defense Logs Thank you for your response. Checking the Spam Defense Logs, shows the users that cannot register, with Response = 4. But any criteria was found at Ban Settings (name, email or IP), including piece of criteria. I don't know the reason they cannot register.
Randy Calvert Posted October 26, 2022 Posted October 26, 2022 What are your Spam Defense settings set to? If they have a score of 4, it by DEFAULT most likely is set to not allow the user to register. If that is the case, you can either lower the action taken for scores of "4" or add their IP address to the Spam Defense Whitelist to allow them to register regardless of what their reputation is. Just know that that their email or IP address is known to have been doing bad things elsewhere.
Futtura Posted October 26, 2022 Author Posted October 26, 2022 9 minutes ago, Randy Calvert said: What are your Spam Defense settings set to? If they have a score of 4, it by DEFAULT most likely is set to not allow the user to register. If that is the case, you can either lower the action taken for scores of "4" or add their IP address to the Spam Defense Whitelist to allow them to register regardless of what their reputation is. Just know that that their email or IP address is known to have been doing bad things elsewhere. The Spam Defense is disabled, should I enable it? I'll try to add the IP's at Whitelist, but it's impossible to control this to new users.
Solution Jim M Posted October 26, 2022 Solution Posted October 26, 2022 As you're using CloudFlare, you will want to enable "Trust IP addresses provided by proxies?" in ACP -> System -> Advanced Configuration. That will prevent CloudFlare's IP addresses from being used as the user's and creating a false positive in the Spam Defense system.
Miss_B Posted October 26, 2022 Posted October 26, 2022 8 hours ago, Futtura said: Since last week, users can't register at Forum anymore. What was the most recent change/modification done to the forum before this happened? Something has triggered this. Do you have any apps installed that have to do with the regitration process?
Futtura Posted October 26, 2022 Author Posted October 26, 2022 22 minutes ago, Jim M said: As you're using CloudFlare, you will want to enable "Trust IP addresses provided by proxies?" in ACP -> System -> Advanced Configuration. That will prevent CloudFlare's IP addresses from being used as the user's and creating a false positive in the Spam Defense system. Nice, you found the problem! Thanks a lot! 😀 The problem is that Cloudflare is passing the proxy IP. So, now, we enable the "mod_remoteip" into Apache server, to serve the real IP. More information: Restoring original visitor IPs Miss_B and Jim M 2
Gary Posted October 27, 2022 Posted October 27, 2022 I'm glad the issue was resolved! Thanks for following up and let us know if you need help with anything else.
Recommended Posts