Profiles

  • Member Since: December 31st, 2011
  • Location: Texas, USA
  • Find me on:

Bio

Hunting Spammers and Crudders (scrapers, hackers, and other bad scum)

  • Created a topic, Yet another good plugin killed, on the site WordPress.org Forums:
    I had used the old plugin forever. Now suddenly with "…

  • Posted a reply to update just broke all websites contact forms, on the site WordPress.org Forums:
    Forget my previous reply. Related to V2 versus V3 keys in Google. Google did not…

  • Posted a reply to update just broke all websites contact forms, on the site WordPress.org Forums:
    Personally, like @amityweb I also dislike the invisible captcha, as it leaves it much harder…

  • Posted a reply to How to WhiteList IP’s on Newest WF version?, on the site WordPress.org Forums:
    Now moved to "Firewall" -> "All Firewall Options". If you are using a smaller screen,…

  • Posted a reply to Where did all the existing network/IP/URL blocks go?, on the site WordPress.org Forums:
    So.. I decided to re-test the WordFence setup and look at the code again to…

  • Posted a reply to Where did all the existing network/IP/URL blocks go?, on the site WordPress.org Forums:
    Sorry, but Unfortunately, not the case. In the original scenario from 7 months back, you…

  • Posted a reply to Blocked IPs no longer blocked. Block tab no show, on the site WordPress.org Forums:
    Most likely you are seeing the same issues with the Blocking screen and all the…

  • Posted a reply to Where did all the existing network/IP/URL blocks go?, on the site WordPress.org Forums:
    As I later found out, the reason for the non-functional Blocking page (and query failures…

  • Posted a reply to Live Traffic and Blocking list old interface, on the site WordPress.org Forums:
    A sampling of failing queries. This is from opening the "Firewall" tab. Notice that it…

  • Posted a reply to Live Traffic and Blocking list old interface, on the site WordPress.org Forums:
    @greyso, You can still block from the Live Traffic screen (sort of). But it is…

  • Posted a reply to Live Traffic and Blocking list old interface, on the site WordPress.org Forums:
    I am not too worried about the file scans. That seems to be the only…

  • Posted a reply to Live Traffic and Blocking list old interface, on the site WordPress.org Forums:
    @jmeow, I agree with you in general. On the one topic of having to click…

  • Posted a reply to Where did all the existing network/IP/URL blocks go?, on the site WordPress.org Forums:
    The "Advanced settings" I am referring to up above is of course now "All Firewall…

  • Created a topic, Where did all the existing network/IP/URL blocks go?, on the site WordPress.org Forums:
    On the Blocking page, no blocks are listed at all. It …

  • Posted a reply to Live Traffic and Blocking list old interface, on the site WordPress.org Forums:
    @drinxx, I agree. As I have stated to them before. They have bugs hanging around…

  • Posted a reply to Live Traffic and Blocking list old interface, on the site WordPress.org Forums:
    I agree.. Worst new interface ever. Looking pretty does not mean functional. 1. The usual…

  • Posted a reply to BLOG_ID_CURRENT_SITE other than 1?, on the site WordPress.org Forums:
    @irisslesley, I agree. 7 months so far, to fix a clear bug badly messing up…

  • Posted a reply to Activity Report email – Bad guys have left the Internet, on the site WordPress.org Forums:
    After 3 months of waiting, maybe it is time to fix this BUG!? Getting tired…

  • Posted a reply to Should Redirect File Folder Created By Hacker Or Put Them In My Robot.Txt File (, on the site WordPress.org Forums:
    a) Remove the robots.txt stuff.. That is in most cases irrelevant. What will kill off…

  • Posted a reply to Errors On My Site When Using WordFence, on the site WordPress.org Forums:
    wp-settings.php always includes kses.php. That is not an infection. It is standard WordPress and is…

  • Posted a reply to Wordfence blocking Opera servers?, on the site WordPress.org Forums:
    If only admin/editing screens are affected, then you could be seeing actual false hits in…

  • Posted a reply to BLOG_ID_CURRENT_SITE other than 1?, on the site WordPress.org Forums:
    Of course you might need get_blog_prefix() in some queries, but never in any of the…

  • Posted a reply to Wordfence blocking Opera servers?, on the site WordPress.org Forums:
    Opera in data serving modes works by your local Opera browser no longer connecting directly…

  • Posted a reply to BLOG_ID_CURRENT_SITE other than 1?, on the site WordPress.org Forums:
    @wfasa.. I CAN GUARANTEE YOU, that get_blog_prefix(), called through your private networkPrefix() is a BIG…

  • Posted a reply to BLOG_ID_CURRENT_SITE other than 1?, on the site WordPress.org Forums:
    @wfasa/@irisslesley, It is not enough to merely change BLOG_ID_CURRENT_SITE to 3 to test the impact.…

  • Posted a reply to Customizing Block & Locked Messages from Wordfence, on the site WordPress.org Forums:
    With the multiple requests to customize the messaging going back at least more than a…

  • Posted a reply to The Endless Confusion of Blocked IPs, on the site WordPress.org Forums:
    :-) :-)

  • Posted a reply to Blocked IP issue, on the site WordPress.org Forums:
    Yes, I got the technical detail from your site, but there is no security related…

  • Posted a reply to BLOG_ID_CURRENT_SITE other than 1?, on the site WordPress.org Forums:
    This is caused by this BUG in WordFence https://wordpress.org/support/topic/activity-report-email-bad-guys-have-left-the-internet/ which so far has not gotten…

  • Posted a reply to Blocked IP issue, on the site WordPress.org Forums:
    FYI, These are your site's response headers, which show the Nginx reverse-proxy caching server being…

  • Posted a reply to Blocked IP issue, on the site WordPress.org Forums:
    Cpanel's (and WHM's) IP Blocker functionality is very simplistic. It does NOT interface with any…

  • Posted a reply to Live Traffic view ignore and do not log bad hits to /wp-admin., on the site WordPress.org Forums:
    I should mention, that the only reason I fell over this is_admin() issue (which probably…

  • Posted a reply to The Endless Confusion of Blocked IPs, on the site WordPress.org Forums:
    Yes.. Your blocking period on the options page is set way higher than the default…

  • Posted a reply to The Endless Confusion of Blocked IPs, on the site WordPress.org Forums:
    So, someone (frequently on a dynamic IP, never to be seen again) arrived at your…

  • Created a topic, Live Traffic view ignore and do not log bad hits to /wp-admin., on the site WordPress.org Forums:
    In wfLog.php, function LogHitOK(), this code if(is_ad…

  • Posted a reply to Causing issues blocking HTML in other directories?, on the site WordPress.org Forums:
    The auto_prepend would normally be only on one place. So if you found it in…

  • Posted a reply to wordfence-waf.php Standard fixes don’t work, on the site WordPress.org Forums:
    Well, the call for wordfence-waf.php is obviously there, since it bombs the site, and it…

  • Posted a reply to Wordfence allowing access to various pages that should be blocked, on the site WordPress.org Forums:
    Another way, if only certain directories are not allowed to be "indexed" (show file-listing), would…

  • Posted a reply to Wordfence allowing access to various pages that should be blocked, on the site WordPress.org Forums:
    Has nothing to do with WordFence. Apache (your web-server) by defaul, and if it is…

  • Posted a reply to Need to remove WF but site breaks, on the site WordPress.org Forums:
    https://wordpress.org/support/topic/how-fix-wordfence-waf-php-error/

  • Posted a reply to WAF doesn’t block access to cached pages, on the site WordPress.org Forums:
    Two different kinds of "protection". Most main security is set up to protect your site…

  • Posted a reply to Audit trail Viewer showing site IP for all logins, on the site WordPress.org Forums:
    As you said. No way to know. The plugin (and you) cannot know what is…

  • Posted a reply to Audit trail Viewer showing site IP for all logins, on the site WordPress.org Forums:
    @doit686868, Well.. :-) Actually solving the problem can only be done by the Shield folks…

  • Posted a reply to Automated scans on multiple sites all start exactly same time, killing CPU, on the site WordPress.org Forums:
    Can I ask a dumb question? Are all these sites yours? If they are, if…

  • Posted a reply to Audit trail Viewer showing site IP for all logins, on the site WordPress.org Forums:
    Unfortunately, Wp-Simple-Firewall (AKA Shield) uses a very insecure way of gathering IP addresses. (As a…

  • Posted a reply to WAF doesn’t block access to cached pages, on the site WordPress.org Forums:
    That is the nature of many types of caching. Both WordPress Caching Plugins or when…

  • Posted a reply to how to remove wordfence_loghuman? Google is indexing it, on the site WordPress.org Forums:
    Well.. I have a separate "incident" in this forum about these parameters WordFence "Injects" into…

  • Posted a reply to How Fix wordfence-waf.php error, on the site WordPress.org Forums:
    Just disconnect it in .user.ini, .htaccess, or php.ini, wherever the auto_prepend config was put. Should…

  • Posted a reply to Wordfence email frequency, on the site WordPress.org Forums:
    You should probably look to configure WP-Super-Cache, which actually send out those messages. :-) WP-Super-Cache…

  • Posted a reply to Causing issues blocking HTML in other directories?, on the site WordPress.org Forums:
    Not all hosting environments support .user.ini files. They are only supported and processed if you…