Modal Login generating 406 error calls

[webmaster-sw]

Good morning
My modal login is generating repeated wp-login.php calls that return a 406 error. The calls go out every 80ms. Login works fine using wp-admin. URL in reply.

I have turned off Cloudflare and caching without any improvement.

Affects all users on all browsers. It’s possible that your calls are being confused with a brute force attack and blocked by Mod Security. Can you change the interval between calls so that it doesn’t kill our servers? There’s no way we can create exception rules for all our user IPs.

Host: http://www.abc.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:39.0) Gecko/20100101 Firefox/39.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Referer: http://www.abc.com/
Content-Length: 99
Cookie: __cfduid=d37b7a7b629cb6cb5ee97c37e8244251d1433514499; _ga=GA1.2.648220774.1433514721; __utma=69178963.648220774.1433514721.1436479425.1436530405.52; __utmz=69178963.1436370973.47.13.utmcsr=shop.abc.com|utmccn=(referral)|utmcmd=referral|utmcct=/; wp-settings-1446=mfold%3Do%26libraryContent%3Dbrowse%26imgsize%3Dlarge%26editor%3Dtinymce%26urlbutton%3Dnone%26advImgDetails%3Dshow%26hidetb%3D1%26wplink%3D1%26posts_list_mode%3Dlist%26cats%3Dpop; wp-settings-time-1446=1436481137; PHPSESSID=47a15eed2c4a26fcbd5ec86873c3ea07; wordpress_test_cookie=WP+Cookie+check; __utmc=69178963; w3tc_referrer=http%3A%2F%2Fwww.abc.com%2Fwp-login.php%3Fredirect_to%3Dhttp%253A%252F%252Fwww.abc.com%252Fwp-admin%252F%26reauth%3D1; bp-activity-oldestpage=1; pmpro_visit=1; __utmb=69178963.10.10.1436530405; __utmt=1; _gat=1
X-ClickOnceSupport: ( .NET CLR 3.5.30729; .NET4.0E)
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

CF-RAY: 203c5b7c9e980540-YYZ
Connection: keep-alive
Content-Type: text/html; charset=iso-8859-1
Date: Fri, 10 Jul 2015 12:43:58 GMT
Server: cloudflare-nginx
Transfer-Encoding: chunked

[webmaster-sw]

This reply has been set as private.

[webmaster-sw]

I tried redirecting my users to wp-admin to login and now I’m getting this:

Warning: Cannot modify header information – headers already sent by (output started at /home/abc/public_html/wp-content/themes/kleo-child/functions.php:55) in /home/abc/public_html/wp-includes/pluggable.php on line 1196

The only way to get to a login screen is via wp-login.php, which gives me this at the top:

Warning: Cannot modify header information – headers already sent by (output started at /home/abc/public_html/wp-content/themes/kleo-child/functions.php:55) in /home/abc/public_html/wp-login.php on line 425

Warning: Cannot modify header information – headers already sent by (output started at /home/abc/public_html/wp-content/themes/kleo-child/functions.php:55) in /home/abc/public_html/wp-login.php on line 438

Any ideas what’s going on?

[Laura]

Hello, will assign the ticket to a higher support lever who can help and advise you in your query.
Thanks! 🙂

Hi there!!! Help others from the community and mark any reply as solution if it solved your question. Mark as a solution

Laura Solanes - Graphic Designer and Web Designer

Please be patient as I try to answer each topic as fast as i can.

If you like the theme or the support you've received please consider leaving us a review on Themeforest!

Always happy to help you 🙂

[webmaster-sw]

Thank you @laura

[webmaster-sw]

This reply has been set as private.

[Andrei]

I can’t access your site for the moment because of the cloudflare cdn but from what your errors tell, you have some wrong code in “kleo-child/functions.php” file around line 55.

If you can provide a ftp account I’ll be happy to give a look into it.
Cheers

Hi there!!! Help others from the community and mark any reply as solution if it solved your question. Mark as a solution

[webmaster-sw]

@abe The line reference in functions.php is always after the closing tags. I’ve run it through a php validator and it states there are no issues.

At any rate, the php errors have disappeared now, but the login 406 is continuing to occur with modal login.

The tattoo gallery page above is loading for me and demonstrates the modal login 406 error. Please let me know what you find out.

[Andrei]

Unfortunately I can’t pass your cloudflare cdn proxy, you probably banned Europe/Romania in your firewall.

That error is created by a simple space, in your functions.php file please let the file unclosed by the ?> tag at the end of the file, or at line 55 you have some output that it shouldn’t be there.

If you can take down cloudflare I can give a look into it.

Cheers

Hi there!!! Help others from the community and mark any reply as solution if it solved your question. Mark as a solution

[webmaster-sw]

@andrei I’ve disabled the Romania IP block. Go for it!

[Andrei]

Hi,

It seems you have a strange error because of some extra security mods activated on your web hosting.
Please give a look at this solutions and if they don’t work please contact your hosting reporting this 406 errors.
Here is a screenshot better describing the error that blocks the ajax endpoint:
http://seventhqueen.com/public-files/andrei/2015-07-17-aycdg.png

Cheers

Hi there!!! Help others from the community and mark any reply as solution if it solved your question. Mark as a solution

[webmaster-sw]

@Andrei I saw that – I guess that can be interpreted as our webhost shutting down login php calls to keep from overloading the server.

Thank you for your insight

[Andrei]

In order to take a look at your functions.php file in order to fix the issues you have reported above I’ll need you to provide me an admin account so I can give a look at that particular file and edit it if is needed.

Cheers

Hi there!!! Help others from the community and mark any reply as solution if it solved your question. Mark as a solution

[Author]

Posts