Profiles

Posted a reply to JavaScipt cannot be used in Elementor when NinjaFirewall is active, on the site WordPress.org Forums:
It seems that the user session set by NinjaFirewall was not found by the firewall…

Posted a reply to cURL error 28: Connection timed out, on the site WordPress.org Forums:
NinjaFirewall doesn't prevent cURL to update WordPress or its plugins. But there was an issue…

Posted a reply to JavaScipt cannot be used in Elementor when NinjaFirewall is active, on the site WordPress.org Forums:
Are you the administrator while editing the post?If you are, there's likely a PHP sessions…

Posted a reply to Case sensitivity not work, on the site WordPress.org Forums:
That's not a bug: captchas aren't case-sensitive. A few are, for unknown reasons. You can…

Posted a reply to cURL error 28: Connection timed out, on the site WordPress.org Forums:
cURL can't connect to any remote sites. Do you have a shell access? If you…

Posted a reply to frame-ancestors, on the site WordPress.org Forums:
NinjaFirewall doesn't set any HTTP headers. WordPress does set the frame-ancestors 'self' header , but…

Posted a reply to Disable upload plugin or theme?, on the site WordPress.org Forums:
You cannot do that. You would need to remove some of their capabilities, for instance:activate_pluginsupdate_pluginsupdate_themesinstall_pluginsinstall_themesdelete_themesdelete_pluginsedit_pluginsedit_themes…

Posted a reply to Ninjafirewall and wpDiscuz Confilict, on the site WordPress.org Forums:
As you are running the premium version of NinjaFirewall, log in to your account and…

Posted a reply to Incompatibility with updraft plus, on the site WordPress.org Forums:
/wp-content/plugins/security-ninja-premium/vendor/phpseclib/phpseclib/phpseclib/Net/SSH2.php on line 71 This error isn't related to NinjaFirewall but to a plugin named…

Posted a reply to Ninjafirewall and wpDiscuz Confilict, on the site WordPress.org Forums:
Do you have a caching plugin? If you do:1. Set the Protection Level to "Low"…

Posted a reply to Should error_log files get flagged on a scan, on the site WordPress.org Forums:
I was flagged because it is located in an unusual folder: /wp-admin/includes/By default, WordPress saves…

Posted a reply to Ninjafirewall blocks the LiteSpeed crawler., on the site WordPress.org Forums:
LiteSpeed isn't blocked, but it is misconfigured and PHP cannot create the session needed by…

Posted a reply to Troubleshooting Ninjafirewalls Issues with Bricksbuilder Editor, on the site WordPress.org Forums:
If you are the admin, you shouldn't be blocked or need to disable any rules.If…

Posted a reply to GSC Indexing Problem, on the site WordPress.org Forums:
Do you mean you want to block the request with a 403 code, even when…

Posted a reply to Troubleshooting Ninjafirewalls Issues with Bricksbuilder Editor, on the site WordPress.org Forums:
The log shows that some <script>xxxx</script> JavaScript code is inserted in the post content. You…

Posted a reply to 2FA with Ninja, on the site WordPress.org Forums:
There's no 2FA in NinjaFirewall. I recommend this plugin for that purpose: https://wordpress.org/plugins/two-factor/

Posted a reply to GSC Indexing Problem, on the site WordPress.org Forums:
You would need to disable the policy (Firewall Policies > Protect against username enumeration >…

Posted a reply to Troubleshooting Ninjafirewalls Issues with Bricksbuilder Editor, on the site WordPress.org Forums:
As soon as you are blocked, go to "NinjaFirewall > Logs", copy the line that…

Posted a reply to Login Protection – Password, on the site WordPress.org Forums:
Normally, a caching plugin shouldn't cache the login page (or any PHP script) because that…

Posted a reply to Multi select for issues?, on the site WordPress.org Forums:
That feature is available in WordPress.-Fixing multiple WordPress files at once: Go to "Dashboard >…

Posted a reply to Login Protection – Password, on the site WordPress.org Forums:
The protection relies on PHP session cookies.If you go to NinjaFirewall > Dashboard, do you…

Posted a reply to Content Security Policy has no effect, on the site WordPress.org Forums:
Only Apache and LiteSpeed use .htaccess, it wouldn't work with other web servers such as…

Posted a reply to Cannot retrieve WordPress database credentials, on the site WordPress.org Forums:
You can use the ".htninja" configuration file to tell the firewall where is located your…

Posted a reply to unknown user upload, on the site WordPress.org Forums:
In addition to sending an email notification, File Guard will also write the event to…

Posted a reply to unknown user upload, on the site WordPress.org Forums:
The log lines tells you that you allow uploads (Firewall Policies > Uploads) and when…

Posted a reply to Unable to access my website, on the site WordPress.org Forums:
If you remove "wp-content/nfwlog/cache/bf_conf.php", the firewall login protection is totally deactivated. Do you see any…

Posted a reply to Cannot connect to WordPress database, on the site WordPress.org Forums:
You cannot find/exclude comments with regex, that's unreliable. You'd need to tokenize the code, just…

Posted a reply to Correct Settings to enable external code., on the site WordPress.org Forums:
I could only check the following 3 free plugins: fluent-smtp, flying-analytics and wpvivid-backuprestore. None of…

Posted a reply to Cannot connect to WordPress database, on the site WordPress.org Forums:
The password is rejected by the database. If you click on "click to view password", do…

Posted a reply to Correct Settings to enable external code., on the site WordPress.org Forums:
Can you paste here the list of (active) plugins/themes that contain the string?

Posted a reply to Cannot connect to WordPress database, on the site WordPress.org Forums:
Can you use that script to debug the problem: https://nintechnet.com/share/wp-db.txt Rename this file to "wp-db.php".…

Posted a reply to [NinjaFirewall (WP Edition) - Advanced Security Plugin and Firewall] Unclear action – possible intrusion ?, on the site WordPress.org Forums:
That line is informative just like all lines with the following labels: INFO, DEBUG and…

Posted a reply to Correct Settings to enable external code., on the site WordPress.org Forums:
You would need to search the code of all your themes and plugins files for…

Posted a reply to solid security scan blocked by ninjafirewall, on the site WordPress.org Forums:
It's "NinjaFirewall > Firewall Policies > Intermediate Policies > Block suspicious bots/scanners".

Posted a reply to solid security scan blocked by ninjafirewall, on the site WordPress.org Forums:
You would need to disable rule 531. It's not a big issue, that rule blocks…

Posted a reply to NinjaFirewall: no access to the Access restricted page login page., on the site WordPress.org Forums:
It looks like you're having a problem with cookies and/or PHP sessions (which are saved…

Posted a reply to Unable to Install NinjaFirewall in an Environment with Proxy Connection, on the site WordPress.org Forums:
You need to add those 3 subdomains:plugins.svn.wordpress.orgupdates.nintechnet.comwordpress.nintechnet.com I recommend to remove NFW_DONT_USE_SSL because it's unsafe…

Posted a reply to Excluide plugin de, on the site WordPress.org Forums:
You nee to add those 3 subdomains to your whitelist: plugins.svn.wordpress.orgupdates.nintechnet.comwordpress.nintechnet.com

Posted a reply to Correct Settings to enable external code., on the site WordPress.org Forums:
It looks fine and doesn't seem to be an issue with your PHP configuration.It seems…

Posted a reply to Correct Settings to enable external code., on the site WordPress.org Forums:
User sessionIt seems that the user session set by NinjaFirewall was not found by the…

Posted a reply to Correct Settings to enable external code., on the site WordPress.org Forums:
You shouldn't be blocked. Maybe you have a plugin or theme that destroys the PHP…

Posted a reply to Correct Settings to enable external code., on the site WordPress.org Forums:
Could you check in the firewall's log (NinjaFirewall > Logs) the line showing the blocked…

Posted a reply to blocking by user hostname, on the site WordPress.org Forums:
AS whitelist/blacklist isn't available in the free version on NinjaFirewall, but only in the WP+…

Posted a reply to blocking by user hostname, on the site WordPress.org Forums:
No, they won't as Google uses another AS number for its own services, AS15169.

Posted a reply to blocking by user hostname, on the site WordPress.org Forums:
That's from AS396982 (GOOGLE-CLOUD-PLATFORM). Blocking on that AS number would get rid of them.