Failed login: Error: Form security failed after first installation

Hi all!

I’m getting a very typical error but couldn’t find a way to fix it. I’ve checked the other posts here on the forum but it seems the solution depends largely on the configuration of my server. So here’s some info:

  • I’m using nginx server via cloudways, which means that I can not change any files on “server-level” since they don’t give me root access.
  • I’m running my website on wordpress. SSL is installed and all traffic is forced to go to https
  • My config.ini.php looks like this:
[General]
proxy_client_headers[] = "HTTP_X_FORWARDED_FOR"
proxy_host_headers[] = "HTTP_X_FORWARDED_HOST"
salt = "37845hlhf070523fhlh235"
trusted_hosts[] = "xxx.com"
trusted_hosts[] = "www.xxx.com"
force_ssl=1
  • The .htaccess of my wordpress within
# BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteCond %{HTTP:X-Forwarded-Proto} !https
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
RewriteBase /
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>
# END WordPress
  • The .htaccess in the piwik folder:
# This file is auto generated by Piwik, do not edit directly
# Please report any issue or improvement directly to the Piwik team.

# First, deny access to all files in this directory
<Files "*">
<IfModule mod_version.c>
	<IfVersion < 2.4>
		Order Deny,Allow
		Deny from All
	</IfVersion>
	<IfVersion >= 2.4>
		Require all denied
	</IfVersion>
</IfModule>
<IfModule !mod_version.c>
	<IfModule !mod_authz_core.c>
		Order Deny,Allow
		Deny from All
	</IfModule>
	<IfModule mod_authz_core.c>
		Require all denied
	</IfModule>
</IfModule>

</Files>

Don’t ask my why I have two .htaccess. All I know is there is one within the piwik folder and another one in the folder of my wordpress installation (same place where the wp-config.php lies).

Any ideas how to fix this?

Thank you!

Alright I just tried to login with the app which works fine. I have tried several browser and also typed in https:// before the login URL but I still get the error message.