REST API works in browser and via AJAX but fails via cURL

It seem I am very late for this question, but I post my experience to here anyway, and hope it can help anyone with similar experience, since it is so hard to google an answer for this kind of rare situation.

I have a very similar problem.
I tested thru Browser and AJAX, they are OK,
but I got connection timed out when I send the request with PHP cURL.

But my situation is a bit different.
I have 2 servers, server A is the host of the API, and server B is the requesting server.

Server B is my production server that, people have been using it without any problem, until one day, I got connection timed out error from Server A.

Then, I found out that, Server A firewall blacklisted Server B, because Server B tried to perform SQL injection. (That is why browser and AJAX didn’t blocked by Server A, because you are sending the request from your PC, not thru the server)
So, I solved my problem by whitelisting Server B in Server A.

But the story is not end yet.
The reason why server A blacklist server B was because one of my user enter a big chunk of paragraph via the API that contain the word “selected” (it is selected, not select alone) and “from“, for some reason the server A marked it as SQL injection.
It sound weird, but I guess the server’s ModSecurity is too sensitive.

Related Posts:

  1. cURL 28 error after switch from to brew php 7.2 on localhost
  2. Creating a post with the REST API, curl and oauth returning 401 error
  3. rest_cannot_create_user – Sorry, you are not allowed to create new users. CURL WORDPRESS REST API
  4. What’s the net::ERR_HTTP2_PROTOCOL_ERROR about?
  5. Uploading media with the REST API
  6. How to loop through JSON data in wordpress WP REST API
  7. Does the REST API (official) support custom post types?
  8. How to make an meta_query optional?
  9. Create a new user using WP REST API and declare meta object
  10. Ajax call to my WordPress website from an external application [duplicate]
  11. Problem with Woocommerce REST API Authentication
  12. How Do I Add User Custom Field to REST API Response?
  13. wordpress custom endpoint multiple params
  14. register_rest_route regex option for base64 or alternate
  15. Continue execution after WP REST API response
  16. using woocommerce_template_single_add_to_cart in shop-loop – javascript issues [closed]
  17. Use wp_remote_get to get JSON instagram feed from public profile
  18. How to generate HMAC-SHA1 signature to use with WP REST API and OAuth1
  19. Creating login session via CURL
  20. How do I fetch all comments per post via WP REST API?
  21. How to filter posts by post format “standard” from wp-json api?
  22. Why is the post meta[] empty when I make a call to the wordpress rest api?
  23. WordPress 5 WP REST routes – No errors
  24. Is there an equivalent to WP_Error object I can return in the case of a successful REST request?
  25. Where Does WordPress Make cURL Requests? How To Add cURL Option
  26. export a csv file from the database with a cronjob
  27. Woocommerce hook run after an Order been created through REST API
  28. what is the best practice to add new field to an api route
  29. Programmatic Login from 3rd Party site
  30. How to show single category archive
  31. Woocommerce api: create product with images – bad request
  32. Woocommerce: hook action/filter I could use to add variation id and price with each attribute opt on WooCommerce Rest api
  33. Are nonces in WP REST API optional by default?
  34. how to save selected option in variable for rest api category filter
  35. get post content of particular post by url
  36. WordPress from url get external source title
  37. JSON REST API WordPress only showing first 10 categories
  38. Buddypress update user avatar image via REST
  39. Delete taxonomy and delete all post related it
  40. Building a REST API for your web app exposes primary keys of DB records?
  41. How to set a template with wp_insert_post
  42. Permission callback to check if user has application password
  43. Multiple requests external data api dynamic block gutenberg
  44. How can I spin up a new website for a registered user automatically?
  45. Simple WordPress endpoint route doesn’t work
  46. Is it possible to create new user from external form using REST API?
  47. Cant register rest routs from class instance
  48. WordPress REST API register_rest_route give a 500 error
  49. WordPress transient not working with WP Engine
  50. WC_Customer delete function returns error
  51. How to send a HTTP Post request using PHP Curl and WordPress
  52. Custom route and query
  53. Validate and Sanitize WP REST API Request using WP JSON Schema?
  54. SOAP Request/Parsing XML From wp_send_json_success
  55. Filter by field with array value in ACF on WP REST API
  56. How to clone all WordPress Rest API end points
  57. cURL error 6 on news area, and also won’t auto update
  58. Post to WordPress from another Server via PHP
  59. Accessing an API with jQuery and AJAX
  60. calling admin-ajax.php from admin-ajax.php
  61. no_rest_route error on custom routes
  62. Flatten Responses returned via WP REST API via WP_Error for obfuscation
  63. WP_REST_Response – How to return Gzip answer and add Content-encoding header?
  64. WordPress api post image raw data without being blank in media library
  65. REST api returns 404 on some WordPress sites
  66. Integrate admin plugin into template. Very interesant (live search + autocomplete with wp rest api, in vanilla js)
  67. Require()/Include() post template adding extra content
  68. WordPress 5.6 Application Passwords
  69. Force REST API Authentication for each request method
  70. How do i post data to url with fields?
  71. Call WP Rest-Api to GET /users/me returned NOTHING in console
  72. REST API custom endpoint to fetch pages and posts not working
  73. WooCommerce REST API AJAX Auth – 401 response
  74. Looping through and combining calls to Woocommerce REST API
  75. get Woocommerce product format json for WP_Query
  76. Need to forward Data from WooCommerce Webhook sent to same site WordPress REST API custom endpoint
  77. Contactform7: display results from CURL
  78. Require advice handling a URL redirect from a Third Party. URL Params need to populate and then forward to payment
  79. How can i get the same ajax result using WP REST API instead of admin-ajax?
  80. Headers already sent error with get_template_part in REST API call
  81. Properly process a custom WP REST API request (Authenticate, Authorize + Validate)?
  82. How to pass and validate nonce in custom REST routes
  83. Query posts by custom taxonomy slug in WP REST API?
  84. oneOf JSON Schema validation not properly working for custom post meta value?
  85. REST API custom endpoints for metaboxes
  86. Authenticate + Authorize WP REST API request before built-in WP JSON Schema Payload Validation?
  87. Adding Microsoft Teams Incoming Webhook to WordPress, Problem with Rest Route?
  88. WordPress REST API – Custom field not added to pages
  89. Displaying Only Certain Tags in Loop
  90. WordPress automatically adds tags when pasting code, how to stop it?
  91. ACF: Only get first row of a Repeater Field
  92. How to show phpinfo() only in a new tab?
  93. Export Form Data to a CSV then send it as an attachment – contact form 7
  94. Shortcode for a Series of Elevating Image Files, Excluding a Range?
  95. Is it possible to isolate and use WordPress functions outside of wordpress
  96. Custom html/php/jquery map code in WordPress/elementor?
  97. Deny php execution in /wp-includes – using .htaccess in /wp-includes VS root folder
  98. Unable to get Post Category Name and URL
  99. Accessing external database: ERR_INCOMPLETE_CHUNKED_ENCODING
  100. How to strip/remove all blank spaces at the beginning/end of a search string