I’m experiencing an issue on my staging site (test.historact.com) where guest visitors can post comments via wpDiscuz without any problem, but as soon as I log in as a Subscriber or higher, clicking “Post Comment” triggers an AJAX request to /wp-admin/admin-ajax.php that returns { "success": false, "data": { "message": "Invalid nonce" } }. My setup is WordPress 6.8.1 with the Reign child theme, BuddyBoss Platform (free), wpDiscuz 8.x, LiteSpeed Cache on the server, Cloudflare (free plan proxy/CDN), and SuperPWA for service-worker caching. I have paused Cloudflare, added a “Bypass Cache on Cookie” rule for wordpress_logged_in_…, created a cache-bypass rule for the AJAX endpoint, and purged all caches; I have also disabled “Cache Logged-in Users” in LiteSpeed and excluded /wp-admin/admin-ajax.php, and excluded the comment pages and AJAX endpoint from SuperPWA precaching. I have confirmed that each logged-in request includes a valid‐looking wpdiscuz_ajax_nonce value in the payload, yet the nonce is still rejected. Could you advise if there are any known conflicts with Cloudflare or LiteSpeed that might cause this, whether there is a debug mode or extra logging I can enable in wpDiscuz to trace the failure, or any configuration tweaks to allow subscribers to comment successfully under this setup?
4 Replies
May 30, 2025 8:47 am