“You don’t have permission” bug revisited

Kovacs on August 31st, at 7:25 am •

Ah… If I used WP I would surely give you bum love for this contribution…

tom on September 20th, at 10:19 am •

I’ve installed and activated the plugin, manually copy and paste the ajax_referer code to pluggable.php, cleaned my cookies, re-sign-in to admin page, but still no luck…. is there a way to disable ajax altogether, argghhhh…

Bas on September 20th, at 10:28 am •

AJAX is pretty much integrated in the administration interface of WordPress. I don’t think it degrades well (ie. when JavaScript is not available), but you can try disabling JavaScript in your browser and see if it works that way.

Another problem could be that there is a plugin interfering with the administration interface. Disabling your plugins one by one and testing each time, for example by adding a category, might help diagnosing this problem.

Great Leader on September 24th, at 10:06 pm •

APU!

Rashy on September 27th, at 7:44 pm •

Disabling Javascript does work, but it is quite annoying because if I forget to turn it off before I start writing, or forget to turn it back on when I am done in the backend, some other sites start to act a little weird. This is with Opera (so thankfully it is pretty easy to turn on/off).

As far as I can tell, the only things affected in the backend are these:

1) Removal of the WYSIWYG editor (including the quick tags and everything).
2) No loading of Wordpress news on the main dashboard page.

And of course, without Javascript you can actually edit/write/deleted all posts/categories/comments etc. that wasn’t working before. I hear WP 2.3 is coming out soon, maybe they will have fixed the problem? (Unless it is specific to some servers, are you on LLP Bas?)

Bas on September 27th, at 7:50 pm •

Yes, I am hosted by LLP.
This plugin/fix applies to Suhosin (Hardened PHP) patched servers, which is the case on LLP.

At the moment, I can not test or fix the issue for different cases because they do not apply to my configuration. Well, I could try, but I am afraid that would compromise the security in the AJAX used by WordPress, so I am not going to.

Any form of feedback that helps addressing this problem for others is greatly accepted, though.

Rashy on September 27th, at 10:30 pm •

I had no idea what was causing the problem or anything. I am going to upgrade to 2.3 over the weekend, and if that doesn’t solve the problem than I will take a look at your plug in. Thank you for doing this though.

Aguila on September 30th, at 1:56 am •

I have been trying to fix this issue all day. your plugin helped.

Thanks alot

Kovacs on October 6th, at 1:41 am •

I’m gone 2 weeks and you can’t even make a new post? I’m disappointed!

Kovacs on November 4th, at 4:03 pm •

Seriously!!? Why the lack of posts? This is unlike you, Bas.

Matheus Siqueira on December 20th, at 8:21 pm •

Hello! I’m using wordpress 2.3.1 on the dreamhost server, and I’m having the same problem, tried everything already and nothing worked. The plugin didn’t work, neither the others solutions I found on the web.

I really need some help, the closest thing I found, but didn’t work also is this:
http://trac.wordpress.org/ticket/5349

Thanks!
if you could please send me an email if there is some way you can help me, I would be very gratefull

Liz B on December 21st, at 6:44 pm •

Like Matheus Siqueira, I am using Wordpress 2.3.1 and I’m still getting the permission error when trying to add a category. I’ve downloaded the plugin (and have tried deactivating each of my other plugins one by one, all at the same time, etc) without success. I also tried the fix Matheus mentioned in his comment (no luck).

At the moment, I’m just disabling JavaScript in Firefox to make changes; I don’t add categories too often at this point, so I’m okay. However, if there is any test I could perform or insight I might be able to provide as to why this plugin isn’t working for some of us still, I would be glad to do it.

And after several aggravating weeks finding nothing but threads resolved with your plugin, I have to at least let Matheus he’s not alone!

Thanks.

Tyler Thompson on December 22nd, at 4:45 am •

I am having the same issue on WP 2.3.1 with the plugin installed. Liz B and I are in the same boat.

I tried taking a look at the code but am unable to isolate the problem.

Kovacs on January 4th, at 12:31 am •

* Tumble weed*

Joe Chung on January 7th, at 8:47 am •

I just want to report a positive experience.

I also ran into the dreaded “you don’t have a permission” bug when trying to delete posts or comments, but after installing and activating this plug-in, everything works again!

I am using WP 2.3.2, PHP 5.2.0 with Suhosin-Patch 0.9.6.1, Apache 2.2.3, openSuSE 10.2 on 32-bit x86.

Thank you.

Bas on January 24th, at 9:06 pm •

I upgraded to WordPress 2.3.2 and the AJAX Referer Fix plugin still works fine.
(Running PHP 5.2.4 with Suhosin Patch 0.9.6.2)

It might be a good start for anyone seeking help with this issue to report which version of PHP and which Suhosin Patch your host is running. Both can be found by using the phpinfo() function in a .php file on your server.

Michael Calabrese on January 25th, at 7:23 pm •

I though that you would like to know I found something strange on my server. I was getting the dreaded “You don’t have permission” and tried you plug-in. It didn’t work. Well, I found the source of my problem after a little digging.

On the line:
$cookie = explode(';', urldecode(empty($_POST['cookie']) ? $_GET['cookie'] : $_POST['cookie']));
The ‘; ‘ (with the space) did not work on my server. I had to take the space out (’;'). Then all was well.

My version of PHP is 5.1.6. With no harding (aka suhosin). I hope that this helps others that may be stuck.

WP Verson 2.3.2

artur on January 27th, at 12:55 am •

hi
the plugin didn’t work for me
i did find this: i tried the same operations with opera (i was using firefox before), and with opera i manage to get everything done (no “you don’t have permissions” crap anymore.
Any thoughts on this?

all the best
ac

Vall on February 27th, at 1:03 am •

Okay, seems to work with me too.. I didn’t notice any side effects and deleting works. I’m using:

Wordpress 2.3.3
PHP Version 5.2.0
Suhosin Extension 0.9.10

Thanks a great lot!

BJ on February 27th, at 1:18 am •

Hi

I have tried to use your AJAX Referer Fix 0.1 as I am have a permission problem with Wordpress. However, when I try to extract the file from the zip I am getting a no files to extract message. When I try and look at the contents of the zip I get a “The Compressed (zipped) folder is corrupted or invalid message”. Any thoughts?

Bas on February 27th, at 1:16 pm •

@BJ — Have you tried downloading it from the WordPress plugin repository?

Meerblickzimmer on March 13th, at 1:46 pm •

Hei Bas!

Thanks for your great Plugin! It helps but i have with your plugin a new problem: pings and trackbacks doesn´t work now. Do you have an idea? And: do you know, how can i solve the basic-problem an the webserver?

Thanks for help & time!
M

mccormicky on March 19th, at 11:51 am •

I do not know what I would’ve done if I had not found your plugin.
Lately plugins have been destroying my sites so maybe it’s fitting that a plugin restored my ability to edit categories.
After having an ecommerce plugin chew my site up and spit it out,and downloading my image and theme content,&the sql file importing the sql file to new database and logging in only to see I wasn’t allowed to do much(ha) but yell WTF! at the screen.
I’m Paypalling you 10 bucks,your plugin is worth more but I am poor.

mccormicky on March 19th, at 11:57 am •

Tried to donate, couldn’t login! Hassles are following me wherever I go.If you send me a request money from your pp account I will send 10.00. NormallyI’d spend time trying to figure out what’s up Paypal’s butt but I really just can’t take any more hassles tonight.

affa on March 20th, at 5:19 am •

you are amazing. thank you. thank you.

mccormicky on March 21st, at 2:51 pm •

Hi Bas: the fix doesn’t work on Release Canidate 1 for WP 2.5, just letting you know in case you want to get a jump on fixing the new file in case they stick with this. If they do then you’re probably going to get a lot of it “doesn’t work anymore” comments.
I can’t add new cats but I can edit them.So that’s only 50% bad! And that’s not bad.

Bas on March 26th, at 1:17 am •

Have you tried WP 2.5RC1 without the plugin enabled as well? I suspect the AJAX validation has been changed in this version, which could mean the plugin is no longer necessary.

affa on March 28th, at 3:58 am •

Hey Bas…

I don’t know if you know, or if you care, but bbPress (WPs forum sibling) is having a problem suspiciously like this one. After spending a day converting from SMF to phpBB to bbPress… I can’t do anything in bbPress without getting a permission error.

There are a ton of threads on the support forum but no answers… here’s one:
http://bbpress.org/forums/topic/no-rights-to-create-forum-as-key-master

I don’t know if this is easy stuff for you, since you’ve already solved it once. But maybe, (hopehopehope) you can shed some light on it. If not, that’s ok too - -you already solved my WP issue!

Robert on April 4th, at 11:44 am •

Hi Bas, I got this problem only after upgrading to WP 2.5. Does this plugin still work well for WP 2.5?

Thanks!
Robert

Bas on April 4th, at 2:56 pm •

@Robert — WP 2.5 does not have this bug and using the plugin will actually cause a conflict. Disable the plugin and WP should work fine by itself again.
If you still experience the problem in 2.5 it could be caused by another plugin or your web browser.

Spare Pencil

31 Comments