WordPress.org

Posted a reply to File Guard exclude with wildcard/placeholder/pattern?, on the site WordPress.org Forums:
It's not possible. You can enter .jpg,.png,.css,.txt for instance, but that would whitelist all .jpg…

14 hours ago

Posted a reply to Ninjafirewall > Buddy/BBPress, on the site WordPress.org Forums:
If you want to add multiple actions, then you need to use an array and…

14 hours ago

Posted a reply to NInjafirewall is giving error of not having writable permissions on mu-plugins, on the site WordPress.org Forums:
Try to change to the folder permissions to 0777.

1 day ago

Posted a reply to Ninjafirewall > Buddy/BBPress, on the site WordPress.org Forums:
bp_messages_check_new seems to be the right one. Try to whitelist it with the .htninja (…

1 day ago

Posted a reply to Ninjafirewall > Buddy/BBPress, on the site WordPress.org Forums:
In the browser console, click on the "Network tab". Click the link on your page…

3 days ago

Posted a reply to Ninjafirewall > Buddy/BBPress, on the site WordPress.org Forums:
You can try to whitelist the AJAX action(s). Can you check the parameter with your…

4 days ago

Posted a reply to Ninjafirewall > Buddy/BBPress, on the site WordPress.org Forums:
I installed Paid-memberships-pro with Buddypress and didn't see any problem. Can you try to disable…

6 days ago

Posted a reply to Ninjafirewall > Buddy/BBPress, on the site WordPress.org Forums:
I can see the call to session_start in Paid-memberships-pro. I will install and try it,…

7 days ago

Posted a reply to Ninjafirewall > Buddy/BBPress, on the site WordPress.org Forums:
I'm testing Buddypress and don't have issue with the AJAX actions. For instance, the "action:…

1 week ago

Posted a reply to Ninjafirewall > Buddy/BBPress, on the site WordPress.org Forums:
Do you see anything related to those AJAX calls in the firewall log (NinjaFirewall >…

1 week ago

Posted a reply to My home ip is blocked, on the site WordPress.org Forums:
The log will show the reason why you were blocked, as well as the ID…

2 weeks ago

Posted a reply to My home ip is blocked, on the site WordPress.org Forums:
You need to create and upload it in the WordPress root folder, where there are…

2 weeks ago

Posted a reply to NInjafirewall is giving error of not having writable permissions on mu-plugins, on the site WordPress.org Forums:
Can you connect over FTP and check if the wp-content/mu-plugins/ folder exists: * If it…

2 weeks ago

Posted a reply to My home ip is blocked, on the site WordPress.org Forums:
Did you check the firewall log ("NinjaFirewall > Logs") to see why you were blocked?…

2 weeks ago

Posted a reply to Malicious or unsafe file alert – help please, on the site WordPress.org Forums:
It's a false positive because "wp-content/nfwlog/firewall_2015-12.php" is NinjaFirewall's log, i.e., where the firewall stores blocked…

3 weeks ago

Posted a reply to Can not post as an Editor – CRITICAL 119 Cross-site scripting, on the site WordPress.org Forums:
You have the capability, that's fine. If you see the red session in the backend,…

4 weeks ago

Posted a reply to Broken site since 4.4.1 updates, on the site WordPress.org Forums:
@rezocom : I'll make the same changes to the next version of NinjaFirewall so that…

4 weeks ago

Posted a reply to Broken site since 4.4.1 updates, on the site WordPress.org Forums:
@peterkrebs : Can you run the troubleshooter script: https://nintechnet.com/share/wp-check.txt Make sure you're logged in to…

4 weeks ago

Posted a reply to Broken site since 4.4.1 updates, on the site WordPress.org Forums:
@rezocom : The code is in the latest version 4.4.2, not 4.4. I patched it…

4 weeks ago

Posted a reply to Can not post as an Editor – CRITICAL 119 Cross-site scripting, on the site WordPress.org Forums:
It looks like the editor user is missing the unfiltered_html capability. Did you remove it?…

4 weeks ago

Posted a reply to Broken site since 4.4.1 updates, on the site WordPress.org Forums:
@peterkrebs : I don't think the error message is wrong. Can you try to downgrade…

4 weeks ago

Posted a reply to Broken site since 4.4.1 updates, on the site WordPress.org Forums:
@rezocom : This is it: your Litespeed doesn't have the MYSQLI_CLIENT_SSL_DONT_VERIFY_SERVER_CERT constant defined. That's odd,…

4 weeks ago

Posted a reply to Broken site since 4.4.1 updates, on the site WordPress.org Forums:
@rezocom : Can you run those two scripts: -Troubleshooter : https://nintechnet.com/share/wp-check.txt -DB connection test: https://nintechnet.com/share/wp-db.txt…

4 weeks ago

Posted a reply to Broken site since 4.4.1 updates, on the site WordPress.org Forums:
If there's nothing in the PHP log, it means it's not a PHP error. Can…

1 month ago

Posted a reply to Warning about insecure plugins, on the site WordPress.org Forums:
Yes, it was fixed, you can see that in the version 4.4.1 changelog:

1 month ago

Posted a reply to SQLite / PDO support (wp-content/db.php), on the site WordPress.org Forums:
Maybe the simplest solution would be to let users add their own code to connect…

1 month ago

Posted a reply to Broken site since 4.4.1 updates, on the site WordPress.org Forums:
I cannot see any error related to NinjaFirewall. The only fatal error comes from iThemes:…

1 month ago

Posted a reply to Broken site since 4.4.1 updates, on the site WordPress.org Forums:
I'm not aware of any other similar issues so far. A blank page is likely…

1 month ago

Posted a reply to Auto logout session, on the site WordPress.org Forums:
There's no auto logout feature in NinjaFirewall because it doesn't modify or delete WordPress' authentication…

1 month ago

Posted a reply to mainwp + problem login warning, on the site WordPress.org Forums:
We just released v4.4.2 which fixes the issue, please update.

1 month ago

Posted a reply to [NSFW] Scary or Bug: Login on different websites, on the site WordPress.org Forums:
@lawshub @tecladigital : We just released v4.4.2 which fixes the issue, please update.

1 month ago

Posted a reply to How to “Set Content-Security-Policy for the website frontend”?, on the site WordPress.org Forums:
It is a raw format, what you enter is what your site will send to…

1 month ago

Posted a reply to Rule 307 – Excessive user-agent string length, on the site WordPress.org Forums:
The firewall will block the user. It's the first time I see a browser with…

1 month ago

Posted a reply to How to “Set Content-Security-Policy for the website frontend”?, on the site WordPress.org Forums:
You would need first to access your site (frontend) and check all remote content, e.g.,…

1 month ago

Posted a reply to Impact on google analytics, on the site WordPress.org Forums:
It shouldn't block it unless you enabled some policies from the "NinjaFirewall > Firewall Policies…

1 month ago

Posted a reply to Fatal error when running scan, on the site WordPress.org Forums:
LF is a Linux/Mac file ending character while CRLF is from Microsoft Windows. That simply…

1 month ago

Posted a reply to Captcha not accepting input, on the site WordPress.org Forums:
It's likely a PHP session issue as the captcha relies on session. Make sure PHP…

1 month ago

Posted a reply to Fatal error when running scan, on the site WordPress.org Forums:
You can click on the "View Changes" link below the file, that will show the…

1 month ago

Posted a reply to htaccess changed by NinjaFirewall, on the site WordPress.org Forums:
It doesn't change or remove rules from your .htaccess. Maybe another security or caching plugin…

1 month ago

Posted a reply to Option to Exclude non WP Folder, on the site WordPress.org Forums:
I assume you're running NinjaFirewall in "Full WAF" mode. The issue may be related to…

1 month ago

Posted a reply to Captcha not accepting input, on the site WordPress.org Forums:
The login protection configuration is saved to a file on disk: 1. Connect to your…

1 month ago

Posted a reply to Blocked server IP, on the site WordPress.org Forums:
You can whitelist your server IP address with the .htninja script. Scroll down to the…

1 month ago

Posted a reply to Fatal error when running scan, on the site WordPress.org Forums:
Can you connect to your site over FTP, go to the "public_html/wp-content/plugins/ninjascanner/lib/" folder and ensure…

1 month ago