Problem with Editing/Deleting/Adding Plugins after upgrade to TXP 4.5.

joebaich · 2013-01-30 13:43:40

I upgraded one of my sites to TX P4.5.4 the other day. Now I notice that I can’t manage any of the plug-ins.

An attempt to change the status of any of them hangs up with the message: get_off_my_lawn: plugin, switch_status.

Similarly, an attempt to edit one of them: get_off_my_lawn: plugin, plugin_edit

Can anyone help me please.

Diagnostics

Textpattern version: 4.5.4 (r4919)
Last Update: 2013-01-24 22:47:21/2013-01-30 13:12:28

Last edited by joebaich (2013-01-30 18:23:58)

colak · 2013-01-30 14:14:15

Does it work if you add SecFilterEngine Off in your htaccess?

joebaich · 2013-01-30 14:43:41

colak wrote:

Does it work if you add SecFilterEngine Off in your htaccess?

If I add:

<ifmodule mod_security.c> SecFilterEngine Off </ifmodule>

I get the same result.

Thinking back over it, I did upgrade glz_custom_fields after I upgraded, there didn’t seem to be a problem with that.

joebaich · 2013-01-30 15:01:49

The problem seems to have had something to do with a particular session in Firefox. When I opened up in Chrome, the condition didn’t exist. It was still there when I re-opened in Firefox but using a vanilla TXP htaccess file and reopening Firefox again fixed that.

I’ll see if I can make it fall over again.

Bloke · 2013-01-30 19:49:32

joebaich wrote:

Thinking back over it, I did upgrade glz_custom_fields after I upgraded, there didn’t seem to be a problem with that.

Even if you did, it won’t make any difference on the Plugins panel because plugins are forbidden to run there.

The usual culprit for this kind of behaviour is a stale textpattern.js file being served by the browser (or not having been uploaded for whatever reason during upgrade), but since you’ve been using it for several days without issue after upgrade, I’m not sure that has anything to do with it.

joebaich · 2013-01-30 21:42:10

Bloke wrote:

Even if you did, it won’t make any difference on the Plugins panel because plugins are forbidden to run there.

The usual culprit for this kind of behaviour is a stale textpattern.js file being served by the browser (or not having been uploaded for whatever reason during upgrade), but since you’ve been using it for several days without issue after upgrade, I’m not sure that has anything to do with it.

I checked the Textpattern.js file. It proclaims to be the 4.5.4 version. I get the same ‘get of my lawn’ response when I try to save an amended preference too. I can make the behaviour go away by replacing the htaccess file with a more vanilla version, i.e. by replacing:

### activate mod_expires
ExpiresActive On
 ### Expire .gif's 1 month from when they're accessed
ExpiresByType image/gif A2592000
ExpiresByType image/jpg A2592000
ExpiresByType image/png A2592000
ExpiresByType application/javascript "access plus 1 months"
ExpiresByType text/css "access plus 1 months"
 ### Expire everything else 1 day from when it's last modified
 ### (this uses the Alternative syntax)
ExpiresDefault "modification plus 1 week"
 ### Apply a Cache-Control header to index.html
<Files index.php>
Header append Cache-Control "public, must-revalidate"
</Files>

<IfModule mod_deflate.c>
  # Insert filter
  SetOutputFilter DEFLATE

  # Don't compress images
  SetEnvIfNoCase Request_URI \.(?:gif|jpe?g|png)$ no-gzip dont-vary

  # Make sure proxies don't deliver the wrong content
  Header append Vary User-Agent env=!dont-vary
  </IfModule>


 #Options +FollowSymLinks
 #Options -Indexes

<IfModule mod_rewrite.c>

 RewriteEngine On
 RewriteBase /

RewriteCond %{HTTP_HOST} ^banubanu.com$ [NC]
RewriteRule ^(.*)$ http://www.banubanu.com/$1 [R=301,L]

 #Textpattern
RewriteCond %{REQUEST_FILENAME} -f [OR]
RewriteCond %{REQUEST_FILENAME} -d
RewriteRule ^(.+) - [PT,L]
RewriteCond %{REQUEST_URI} !=/favicon.ico
RewriteRule ^(.*) index.php
</IfModule>

Options -Indexes

with this:

<IfModule mod_rewrite.c>

RewriteEngine On
RewriteBase /

RewriteCond %{HTTP_HOST} ^www.banubanu.com$ [NC]
RewriteRule ^(.*)$ http://banubanu.com/$1 [R=301,L]

 #Textpattern
RewriteCond %{REQUEST_FILENAME} -f [OR]
RewriteCond %{REQUEST_FILENAME} -d
RewriteRule ^(.+) - [PT,L]
RewriteCond %{REQUEST_URI} !=/favicon.ico
RewriteRule ^(.*) index.php

</IfModule>

Options -Indexes

I don’t know too much about htaccess files so will try adding discreet sections of the tutti frutti knickerbocker glory version back to the vanilla one until it falls over.

Last edited by joebaich (2013-01-30 21:46:17)

Gocom · 2013-01-30 22:48:06

The offending line in your .htaccess would be:

ExpiresDefault "modification plus 1 week"

The above will make everything come from cache, including your admin-side forms and pages. In other words, it ultimately breaks the shit by telling browser to newer fetch the most recent page contents. This then leads to situation where the presented information is outdated. Your actions where blocked due to CSRF tokens used were from the cached page.

You should turn the rule off for /textpattern directory. You will be able to do that by adding a .htaccess file to your /textpattern directory with some overriding rules. E.g.

ExpiresActive Off

This would turn mod_expires module and the definitions in question off for the directory and as such for the admin-side panel. To things work correctly, the admin-side panel should never be heavily cached.

Last edited by Gocom (2013-01-30 22:49:26)

joebaich · 2013-01-30 23:10:19

That seems to have been exactly it. Thank you Gocom. You have saved me an evening of pfaffing around and for that I am most grateful.

madzzoni · 2013-02-14 13:23:33

Hello,

i’m also got this “get_off_my_lawn: plugin, switch_status.” message, when i try activate/deactivate plugins.

I’ve turned OFF all Log stuff in TXP Settings. I often get the message “Bad Cookie” or the system log me out when i edit articles etc.
The system don’t save my last edits, fx. when replace an image.
Then i have to logout/login again to see the “update”.

I added a .htaccess file with:

ExpiresActive Off

to the /textpattern dir, but this doesn’t fix the problem.

Same behavior in Safari, Firefox and Chrome.

Maybe there is a problem with the Host for this site, because i didn’t got those problems in my first TXP installation on another Host.

Any idea’s what to do here?

uli · 2013-02-14 13:52:41

madzzoni wrote:

I often get the message “Bad Cookie” or the system log me out when i edit articles etc.
[…]
Then i have to logout/login again to see the “update”.

This sounds like there’s something redirecting you from http:// to www (or vice versa). Make your Site URL setting on Admin > Preferences match that from the redirect.

Last edited by uli (2013-02-14 13:53:40)

madzzoni · 2013-02-14 21:27:04

@uli: Tried change to www.sitename , but no change. The site is in the Root. It’s like the Admin panel use a Cache. Very strange.

Gocom · 2013-02-14 22:40:14

madzzoni wrote:

to the /textpattern dir, but this doesn’t fix the problem.

That rule would only turn mod_expires module off for the directory. The only scenario where it makes a difference is if you are using the module, it itself does not prevent the server from sending caching related headers or turn caching off.

Remember that after you have changed any caching related header configuration, you will still need to empty your browser’s cache. Otherwise the pages will still keep coming from cache until it expires.

The site is in the Root. It’s like the Admin panel use a Cache. Very strange.

What are the HTTP response headers you are receiving from the server when you access the admin panel? You should be able to see the full header information in any modern web browser’s developer/web console.

Last edited by Gocom (2013-02-14 22:41:43)

Textpattern CMS

Textpattern CMS support forum

#1 2013-01-30 13:43:40

Problem with Editing/Deleting/Adding Plugins after upgrade to TXP 4.5.

#2 2013-01-30 14:14:15

Re: Problem with Editing/Deleting/Adding Plugins after upgrade to TXP 4.5.

#3 2013-01-30 14:43:41

Re: Problem with Editing/Deleting/Adding Plugins after upgrade to TXP 4.5.

#4 2013-01-30 15:01:49

Re: Problem with Editing/Deleting/Adding Plugins after upgrade to TXP 4.5.

#5 2013-01-30 19:49:32

Re: Problem with Editing/Deleting/Adding Plugins after upgrade to TXP 4.5.

#6 2013-01-30 21:42:10

Re: Problem with Editing/Deleting/Adding Plugins after upgrade to TXP 4.5.

#7 2013-01-30 22:48:06

Re: Problem with Editing/Deleting/Adding Plugins after upgrade to TXP 4.5.

#8 2013-01-30 23:10:19

Re: Problem with Editing/Deleting/Adding Plugins after upgrade to TXP 4.5.

#9 2013-02-14 13:23:33

Re: Problem with Editing/Deleting/Adding Plugins after upgrade to TXP 4.5.

#10 2013-02-14 13:52:41

Re: Problem with Editing/Deleting/Adding Plugins after upgrade to TXP 4.5.

#11 2013-02-14 21:27:04

Re: Problem with Editing/Deleting/Adding Plugins after upgrade to TXP 4.5.

#12 2013-02-14 22:40:14

Re: Problem with Editing/Deleting/Adding Plugins after upgrade to TXP 4.5.

Board footer