[Resolved] IP Blacklisting because of Toolset

[Author]

Posts

[daveK-7]

I am trying to:
Edit a page which has toolset blocks

Link to a page where the issue can be seen:
The problem occurs on post.php, I can't really link to it though - see the additional details below.

I expected to see:
I expected to be able to edit the page

Instead, I got:
Blacklisted by my web host.

Additional Details:
Toolset appears to have a problem when it is installed on sites hosted on WPEngine - specifically, when I am editing a page, there are periodic requests sent this URL:

/wp-admin/[tb-dynamic%20provider='__current_post'%20post='current'%20source='toolset_custom_field%7Capplication-details'%20size='large'%20field='resume'%20force-string='first'%20]

These requests are triggering the WPEngine firewall, which results in my IP being blacklisted until I contact support to get it restored. I don't expect there is a quick fix for this problem.. but I am hoping that reporting it means that it can be fixed in a future update.

The specific problem is that the firewall does not like URLs with the " ' " (apostrophe/single quote) character in them.

[daveK-7]

A little more information: the badly formed requests only seem to show up when there is an image with a dynamic source on the page.

[Minesh]

Hello. Thank you for contacting the Toolset support.

I would like to have debug information that will help us to debug and investigate your issue:
- https://toolset.com/faq/provide-debug-information-faster-support/

[daveK-7]

debug information:

{"core":{"Wordpress":{"Multisite":"No","SiteURL":"https:\/\/nabe-wa.com","HomeURL":"https:\/\/nabe-wa.com","Version":"5.7.2","PermalinkStructure":"\/%postname%\/","PostTypes":"post, page, attachment, revision, nav_menu_item, custom_css, customize_changeset, oembed_cache, user_request, wp_block, cred-form, cred-user-form, wp-types-group, wp-types-user-group, wp-types-term-group, vc_grid_item, view, view-template, job, contract, contract-bid, company, application, wpa-helper, cred_rel_form, vc4_templates, mpc_content_preset","PostSatus":"publish, future, draft, pending, private, trash, auto-draft, inherit, request-pending, request-confirmed, request-failed, request-completed, hidden"},"Server":{"jQueryVersion":"3.5.1","PHPVersion":"7.4.18","MySQLVersion":"5.7.34","ServerSoftware":"Apache"},"PHP":{"MemoryLimit":"512M","UploadMax":"50M","PostMax":"100M","TimeLimit":"3600","MaxInputVars":"10000"}},"plugins":{"active_plugins":{"gravityforms\/gravityforms.php":{"Name":"Gravity Forms","PluginURI":"https:\/\/gravityforms.com","Version":"2.4.23","Author":"Gravity Forms","AuthorURI":"https:\/\/gravityforms.com","TextDomain":"gravityforms","DomainPath":"\/languages","Network":false,"RequiresWP":"","RequiresPHP":"","Title":"Gravity Forms","AuthorName":"Gravity Forms"},"cred-frontend-editor\/plugin.php":{"Name":"Toolset Forms","PluginURI":"https:\/\/toolset.com\/home\/toolset-components\/?utm_source=plugin\u0026utm_medium=gui\u0026utm_campaign=forms#forms","Version":"2.6.9","Author":"OnTheGoSystems","AuthorURI":"http:\/\/www.onthegosystems.com\/","TextDomain":"cred-frontend-editor","DomainPath":"","Network":false,"RequiresWP":"","RequiresPHP":"","Title":"Toolset Forms","AuthorName":"OnTheGoSystems"},"gravityformssignature\/signature.php":{"Name":"Gravity Forms Signature Add-On","PluginURI":"https:\/\/gravityforms.com","Version":"4.0.3","Author":"Gravity Forms","AuthorURI":"https:\/\/gravityforms.com","TextDomain":"gravityformssignature","DomainPath":"\/languages","Network":false,"RequiresWP":"","RequiresPHP":"","Title":"Gravity Forms Signature Add-On","AuthorName":"Gravity Forms"},"js_composer\/js_composer.php":{"Name":"WPBakery Page Builder","PluginURI":"http:\/\/wpbakery.com","Version":"6.5.0","Author":"Michael M - WPBakery.com","AuthorURI":"http:\/\/wpbakery.com","TextDomain":"js_composer","DomainPath":"","Network":false,"RequiresWP":"","RequiresPHP":"","Title":"WPBakery Page Builder","AuthorName":"Michael M - WPBakery.com"},"mpc-massive\/mpc-massive.php":{"Name":"Massive Addons for WPBakery Page Builder","PluginURI":"http:\/\/codecanyon.net\/item\/massive-addons-for-visual-composer\/14429839","Version":"2.4.8","Author":"MassivePixelCreation","AuthorURI":"http:\/\/codecanyon.net\/user\/mpc\/","TextDomain":"mpc","DomainPath":"\/languages\/","Network":false,"RequiresWP":"","RequiresPHP":"","Title":"Massive Addons for WPBakery Page Builder","AuthorName":"MassivePixelCreation"},"remove-dashboard-access-for-non-admins\/remove-dashboard-access.php":{"Name":"Remove Dashboard Access","PluginURI":"http:\/\/www.werdswords.com","Version":"1.1.3","Author":"Drew Jaynes (DrewAPicture)","AuthorURI":"http:\/\/www.drewapicture.com","TextDomain":"remove-dashboard-access-for-non-admins","DomainPath":"","Network":false,"RequiresWP":"","RequiresPHP":"","Title":"Remove Dashboard Access","AuthorName":"Drew Jaynes (DrewAPicture)"},"revslider\/revslider.php":{"Name":"Slider Revolution","PluginURI":"https:\/\/www.sliderrevolution.com\/","Version":"6.3.9","Author":"ThemePunch","AuthorURI":"https:\/\/themepunch.com\/","TextDomain":"revslider","DomainPath":"\/languages","Network":false,"RequiresWP":"","RequiresPHP":"","Title":"Slider Revolution","AuthorName":"ThemePunch"},"s2member\/s2member.php":{"Name":"s2Member Framework","PluginURI":"http:\/\/s2member.com\/","Version":"210208","Author":"WP Sharks","AuthorURI":"http:\/\/s2member.com\/","TextDomain":"s2member","DomainPath":"\/src\/includes\/translations","Network":false,"RequiresWP":"4.2","RequiresPHP":"5.6.2","Title":"s2Member Framework","AuthorName":"WP Sharks"},"toolset-blocks\/wp-views.php":{"Name":"Toolset Blocks","PluginURI":"https:\/\/toolset.com\/?utm_source=viewsplugin\u0026utm_campaign=views\u0026utm_medium=plugins-list-full-version\u0026utm_term=Visit plugin site","Version":"1.5.3","Author":"OnTheGoSystems","AuthorURI":"https:\/\/toolset.com","TextDomain":"toolset-blocks","DomainPath":"","Network":false,"RequiresWP":"","RequiresPHP":"","Title":"Toolset Blocks","AuthorName":"OnTheGoSystems"},"types-access\/types-access.php":{"Name":"Toolset Access","PluginURI":"http:\/\/toolset.com\/home\/types-access\/?utm_source=accessplugin\u0026utm_campaign=access\u0026utm_medium=release-notes-plugins-list\u0026utm_term=Visit plugin site","Version":"2.8.11","Author":"OnTheGoSystems","AuthorURI":"http:\/\/www.onthegosystems.com\/","TextDomain":"types-access","DomainPath":"","Network":false,"RequiresWP":"","RequiresPHP":"","Title":"Toolset Access","AuthorName":"OnTheGoSystems"},"types\/wpcf.php":{"Name":"Toolset Types","PluginURI":"https:\/\/toolset.com\/?utm_source=typesplugin\u0026utm_campaign=types\u0026utm_medium=plugins-list-full-version\u0026utm_term=Visit plugin site","Version":"3.4.10","Author":"OnTheGoSystems","AuthorURI":"http:\/\/www.onthegosystems.com","TextDomain":"types","DomainPath":"","Network":false,"RequiresWP":"","RequiresPHP":"","Title":"Toolset Types","AuthorName":"OnTheGoSystems"},"white-label\/white-label.php":{"Name":"White Label","PluginURI":"https:\/\/whitewp.com\/","Version":"2.1.2","Author":"whitewp.com","AuthorURI":"https:\/\/whitewp.com\/","TextDomain":"white-label","DomainPath":"","Network":false,"RequiresWP":"","RequiresPHP":"","Title":"White Label","AuthorName":"whitewp.com"},"wordpress-seo\/wp-seo.php":{"Name":"Yoast SEO","PluginURI":"https:\/\/yoa.st\/1uj","Version":"15.9.1","Author":"Team Yoast","AuthorURI":"https:\/\/yoa.st\/1uk","TextDomain":"wordpress-seo","DomainPath":"\/languages\/","Network":false,"RequiresWP":"5.5","RequiresPHP":"5.6.20","Title":"Yoast SEO","AuthorName":"Team Yoast"},"wp-smushit\/wp-smush.php":{"Name":"Smush","PluginURI":"http:\/\/wordpress.org\/plugins\/wp-smushit\/","Version":"3.8.3","Author":"WPMU DEV","AuthorURI":"https:\/\/profiles.wordpress.org\/wpmudev\/","TextDomain":"wp-smushit","DomainPath":"\/languages\/","Network":false,"RequiresWP":"","RequiresPHP":"","Title":"Smush","AuthorName":"WPMU DEV"}},"mu_plugins":{"slt-force-strong-passwords.php":{"Name":"Force Strong Passwords - WPE Edition","PluginURI":"https:\/\/github.com\/boogah\/Force-Strong-Passwords","Version":"1.6.4","Description":"Forces users to set either a strong or medium strength password.","Author":"Jason Cosper","AuthorURI":"http:\/\/jasoncosper.com","TextDomain":"","DomainPath":"","Network":false,"RequiresWP":"","RequiresPHP":"","Title":"Force Strong Passwords - WPE Edition","AuthorName":"Jason Cosper"},"s2-register-notification.php":{"Name":"s2-register-notification.php","PluginURI":"","Version":"","Description":"","Author":"","AuthorURI":"","TextDomain":"","DomainPath":"","Network":false,"RequiresWP":"","RequiresPHP":"","Title":"","AuthorName":""},"wpe-elasticpress-autosuggest-logger.php":{"Name":"WPE ElasticPress Autosuggest Logger","PluginURI":"https:\/\/wpengine.com","Version":"1.0.0","Description":"Appends autosuggest search terms to the url when elasticpress plugin is enabled","Author":"WP Engine","AuthorURI":"https:\/\/wpengine.com\/","TextDomain":"wpe-elasticpress-autosuggest-logger","DomainPath":"\/languages","Network":false,"RequiresWP":"","RequiresPHP":"","Title":"WPE ElasticPress Autosuggest Logger","AuthorName":"WP Engine"},"wpe-wp-sign-on-plugin.php":{"Name":"WP Engine Seamless Login Plugin","PluginURI":"https:\/\/www.wpengine.com","Version":"1.5.5","Description":"WP Engine Seamless Login Plugin","Author":"WP Engine","AuthorURI":"","TextDomain":"","DomainPath":"","Network":false,"RequiresWP":"","RequiresPHP":"","Title":"WP Engine Seamless Login Plugin","AuthorName":"WP Engine"},"wpengine-security-auditor.php":{"Name":"WP Engine Security Auditor","PluginURI":"","Version":"1.0.10","Description":"WP Engine-specific security auditing and logging","Author":"wpengine","AuthorURI":"https:\/\/wpengine.com","TextDomain":"","DomainPath":"","Network":false,"RequiresWP":"","RequiresPHP":"","Title":"WP Engine Security Auditor","AuthorName":"wpengine"},"mu-plugin.php":{"Name":"WP Engine System","PluginURI":"https:\/\/wpengine.com\/","Version":"4.1.0","Description":"WP Engine-specific services and options","Author":"WP Engine","AuthorURI":"","TextDomain":"","DomainPath":"","Network":false,"RequiresWP":"","RequiresPHP":"","Title":"WP Engine System","AuthorName":"WP Engine"}},"dropins":{"advanced-cache.php":{"Name":"advanced-cache.php","PluginURI":"","Version":"","Description":"","Author":"","AuthorURI":"","TextDomain":"","DomainPath":"","Network":false,"RequiresWP":"","RequiresPHP":"","Title":"","AuthorName":""}}},"theme":{"Name":"Blocksy Child","ThemeURI":null,"Author":"Creative Themes","AuthorURI":null,"Template":"blocksy","Version":"","TextDomain":null,"DomainPath":null},"extra-debug":{"access":{"rules":{"taxonomies":{"manage_industry":{"follow":false,"roles":[],"users":[],"taxonomy":"industry"},"edit_industry":{"follow":false,"roles":[],"users":[],"taxonomy":"industry"},"delete_industry":{"follow":false,"roles":[],"users":[],"taxonomy":"industry"},"assign_industry":{"follow":false,"roles":[],"users":[],"taxonomy":"industry"},"manage_company-type":{"follow":false,"roles":[],"users":[],"taxonomy":"company-type"},"edit_company-type":{"follow":false,"roles":[],"users":[],"taxonomy":"company-type"},"delete_company-type":{"follow":false,"roles":[],"users":[],"taxonomy":"company-type"},"assign_company-type":{"follow":false,"roles":[],"users":[],"taxonomy":"company-type"}}},"settings":{"types":{"post":{"mode":"permissions","permissions":{"publish":{"roles":[]},"delete_any":{"roles":[]},"edit_any":{"roles":[]},"delete_own":{"roles":[]},"edit_own":{"roles":[]},"read":{"roles":[]}}},"page":{"mode":"not_managed"},"attachment":{"mode":"not_managed"},"oembed_cache":{"mode":"not_managed"},"user_request":{"mode":"not_managed"},"nabe_clm_clm":{"mode":"not_managed"},"nabe_dir_ltg":{"mode":"not_managed"},"product":{"mode":"not_managed"},"product_variation":{"mode":"not_managed"},"shop_order":{"mode":"not_managed"},"shop_order_refund":{"mode":"not_managed"},"shop_coupon":{"mode":"not_managed"},"vc_grid_item":{"mode":"not_managed"},"vc4_templates":{"mode":"not_managed"},"mpc_content_preset":{"mode":"not_managed"},"job":{"mode":"permissions","permissions":{"publish":{"roles":[]},"delete_any":{"roles":[]},"edit_any":{"roles":[]},"delete_own":{"roles":[]},"edit_own":{"roles":[]},"read":{"roles":[]}}},"scheduled-action":{"mode":"not_managed"},"contract":{"mode":"permissions","permissions":{"publish":{"roles":[]},"delete_any":{"roles":[]},"edit_any":{"roles":[]},"delete_own":{"roles":[]},"edit_own":{"roles":[]},"read":{"roles":[]}}},"contract-bid":{"mode":"permissions","permissions":{"publish":{"roles":[]},"delete_any":{"roles":[]},"edit_any":{"roles":[]},"delete_own":{"roles":[]},"edit_own":{"roles":[]},"read":{"roles":[]}}},"company":{"mode":"permissions","permissions":{"publish":{"roles":["administrator"]},"delete_any":{"roles":["administrator"]},"edit_any":{"roles":["administrator"]},"delete_own":{"roles":["administrator"]},"edit_own":{"roles":["administrator"]},"read_private":{"roles":["administrator"]},"read":{"roles":["administrator"]}}},"contract-bid-1":{"mode":"not_managed"},"application":{"mode":"permissions","permissions":{"publish":{"roles":[]},"delete_any":{"roles":[]},"edit_any":{"roles":[]},"delete_own":{"roles":[]},"edit_own":{"roles":[]},"read":{"roles":[]}}},"user_registration":{"mode":"not_managed"}},"tax":{"company-type":{"not_managed":"1","permissions":{"assign_terms":{"roles":[]},"delete_terms":{"roles":[]},"edit_terms":{"roles":[]},"manage_terms":{"roles":[]}},"mode":"permissions"},"industry":{"not_managed":"1","permissions":{"assign_terms":{"roles":[]},"delete_terms":{"roles":[]},"edit_terms":{"roles":[]},"manage_terms":{"roles":[]}},"mode":"permissions"}},"third_party":{"__USERMETA_FIELDS":{"__USERMETA_FIELDS_GROUP_user-fields-test":{"mode":"not_managed","permissions":{"modify_own_user-fields-test":{"users":[]}}}},"__CRED_CRED":{"__CRED_CRED_GROUP":{"permissions":{"use_any_attachment_with_cred_post_forms":{"roles":["administrator","editor","shop_manager","wpseo_editor","wpseo_manager","author"]},"delete_other_posts_with_cred":{"roles":["administrator","editor","shop_manager","wpseo_editor","wpseo_manager","author"]},"delete_own_posts_with_cred":{"roles":["administrator","editor","shop_manager","wpseo_editor","wpseo_manager","author"]},"edit_other_posts_with_cred_184":{"roles":["administrator","editor","shop_manager","wpseo_editor","wpseo_manager","author"]},"edit_own_posts_with_cred_184":{"roles":["administrator","editor","shop_manager","wpseo_editor","wpseo_manager","author","s2member_level2","s2member_level3"]},"create_posts_with_cred_230":{"roles":["administrator","editor","shop_manager","wpseo_editor","wpseo_manager","author","s2member_level2","s2member_level3"]},"create_posts_with_cred_232":{"roles":["administrator","editor","shop_manager","wpseo_editor","wpseo_manager","author","s2member_level3"]},"create_posts_with_cred_145":{"roles":["administrator","editor","shop_manager","wpseo_editor","wpseo_manager","author","s2member_level1","s2member_level2","s2member_level3","s2member_level4","subscriber","guest"]},"create_posts_with_cred_135":{"roles":["administrator","editor","shop_manager","wpseo_editor","wpseo_manager","author","s2member_level2","s2member_level3"]},"create_posts_with_cred_286":{"roles":["administrator","editor","shop_manager","wpseo_editor","wpseo_manager","author","s2member_level1","s2member_level2","s2member_level3","s2member_level4","subscriber","guest"]},"create_posts_with_cred_285":{"roles":["administrator","editor","shop_manager","wpseo_editor","wpseo_manager","author","s2member_level1","s2member_level2","s2member_level3"]}},"mode":"permissions"}},"__CRED_CRED_USER":{"__CRED_CRED_USER_GROUP":{"permissions":{"use_any_attachment_with_cred_user_forms":{"roles":["administrator","editor","shop_manager","wpseo_editor","wpseo_manager","author"]},"edit_other_users_with_cred_124":{"roles":["administrator"]},"edit_own_user_with_cred_124":{"roles":["administrator","s2member_level1","s2member_level2","s2member_level3","subscriber"]}},"mode":"permissions"}}}}},"types":{"add_resized_images_to_library":0,"images_remote":0,"images_remote_cache_time":"36","help_box":"by_types","hide_standard_custom_fields_metabox":"show","postmeta_unfiltered_html":"on","usermeta_unfiltered_html":"on"},"CRED":{"wizard":1,"cache_notice":1,"export_settings":1,"export_custom_fields":1,"autogeneration_email":{"subject":"Welcome new user","body":"[username]Your username is: %cuf_username%[\/username]\\n[nickname]Your nickname is: %cuf_nickname%[\/nickname]\\n[password]Your password is: %cuf_password%[\/password]"},"dont_load_cred_css":1},"views":{"views_template_loop_blog":0,"wpv_bootstrap_version":1,"wpv_custom_conditional_functions":["nabe_already_applied"],"wpv_custom_inner_shortcodes":[],"wpv_debug_mode":"","wpv_debug_mode_type":"compact","wpv_map_plugin":0,"wpv_show_hidden_fields":"","wpv_saved_auto_detected_framework":"","wpv_codemirror_autoresize":"","wpv_enable_pagination_manage_history":true,"wpv_enable_parametric_search_manage_history":true,"support_spaces_in_meta_filters":0,"allow_views_wp_widgets_in_elementor":0,"default_user_editor":"gutenberg","default_wpa_editor":"gutenberg","manage_meta_transient_method":"cron","editing_experience":"mixed","view_cpt_job":"112","views_template_for_contract":128,"views_template_conditions_for_contract":[],"views_template_for_company":209,"views_template_conditions_for_company":[],"views_template_for_job":265,"views_template_conditions_for_job":[]},"installer":{"version":"2.6.1","repositories":{"wpml":{"api-url":"https:\/\/api.wpml.org\/","bucket-url":"not assigned","subscription":"","last-successful-subscription-fetch":"none"},"toolset":{"api-url":"https:\/\/api.toolset.com\/","bucket-url":"not assigned","subscription":"","last-successful-subscription-fetch":"none"}},"instances":{"\/nas\/content\/live\/nabewa\/wp-content\/plugins\/types\/vendor\/otgs\/installer\/installer.php":{"bootfile":"\/nas\/content\/live\/nabewa\/wp-content\/plugins\/types\/vendor\/otgs\/installer\/installer.php","version":"2.6.1","args":{"plugins_install_tab":"1","repositories_include":["toolset","wpml"],"site_key_nags":[{"repository_id":"toolset","product_name":"Toolset"}]},"delegated":true}}}}}

[Minesh]

I checked and I found that this is a known issue and already reported in front of our Devs and there is no ETA on it when it will be fixed.

This occurs when Yoast is active, and may affect other SEO plugins, when an image block using a dynamic source is included in the content.

As a workaround, you may try to add a Types shortcode to display the image using the "Fields and Text" block instead of using image block.

[daveK-7]

Thank you - It looks like I may also be able to avoid the problem by creating a View from Toolest -> Views rather than building it directly on the page using the block editor.