WordPress.org

Posted a reply to After Rules Update no Login, on the site WordPress.org Forums:
Did you look at the headers if that was an encoding issue? Or send the…

4 days ago

Posted a reply to After Rules Update no Login, on the site WordPress.org Forums:
The firewall rules don't affect NinjaFirewall's login page which works before, and they apply to…

6 days ago

Posted a reply to Comparison to the original package, on the site WordPress.org Forums:
The order is: The scanner always checks first in the /local/ folder if there is…

6 days ago

Posted a reply to After Rules Update no Login, on the site WordPress.org Forums:
It looks like a caching issue. Do you have a caching plugin or service (CDN)?…

6 days ago

Posted a reply to Comparison to the original package, on the site WordPress.org Forums:
It is #1: the installation ZIP file of the plugin or theme that is currently…

1 week ago

Posted a reply to Cannot redeclare nfw_anonymize_ip2(), on the site WordPress.org Forums:
I can't reproduce this issue. Do you have another instance of the firewall installed in…

1 week ago

Posted a reply to Firewall Log, on the site WordPress.org Forums:
If the referrer is correct, then you need to disable this policy: "Firewall Policies >…

2 weeks ago

Posted a reply to Firewall Log, on the site WordPress.org Forums:
Can you show me a few lines of the log? I would need to see…

2 weeks ago

Posted a reply to Event notification problem, on the site WordPress.org Forums:
I can't reproduce the issue. Maybe you could try to debug the wp_mail function on…

2 weeks ago

Posted a reply to MOD Security, on the site WordPress.org Forums:
ModSecurity will come first and you can use it with NinjaFirewall, there's no problem or…

2 weeks ago

Posted a reply to How to clear the Firewall logs, on the site WordPress.org Forums:
Below the log, you can use the "Auto-delete log" option to have it deleted automatically.…

3 weeks ago

Posted a reply to Event notification problem, on the site WordPress.org Forums:
The firewall uses the wp_mail function from WordPress. If that is your server, check the…

3 weeks ago

Posted a reply to Blocked privilege escalation attempt from plugin, on the site WordPress.org Forums:
It will disable the protection that blocks attempts to modify a user capability (e.g., creating…

4 weeks ago

Posted a reply to Blocked privilege escalation attempt from plugin, on the site WordPress.org Forums:
You can't whitelist it, that's not possible. To create an editor or an admin user,…

4 weeks ago

Posted a reply to Event notification problem, on the site WordPress.org Forums:
Can you go to the "Logs > Firewall Log" section and check if the first…

4 weeks ago

Posted a reply to Wrong notification, on the site WordPress.org Forums:
That's very odd indeed. As you can see in the source code, the following conditions…

4 weeks ago

Posted a reply to Wrong notification, on the site WordPress.org Forums:
Maybe someone incidentally clicked on the button? The link must be clicked to trigger the…

4 weeks ago

Posted a reply to CSP Security headers are not working, on the site WordPress.org Forums:
You'll find some examples here: https://help.dreamhost.com/hc/en-us/articles/215747598-Setting-headers-with-an-htaccess-file Apache mod_header documentation: https://httpd.apache.org/docs/current/mod/mod_headers.html

1 month ago

Posted a reply to CSP Security headers are not working, on the site WordPress.org Forums:
Did you check this discussion: https://wordpress.org/support/topic/http-response-headers/ You can add headers to your .htaccess if you…

1 month ago

Posted a reply to FIxing IP logging with Varnish reverse proxy, on the site WordPress.org Forums:
By default, Varnish should forward the real IP in the HTTP_X_FORWARDED_FOR header: <?php /* +====================================================================+…

1 month ago

Posted a reply to Website Login issue, on the site WordPress.org Forums:
If NinjaFirewall is disabled, can you log in? Try to enable the PHP error log…

1 month ago

Posted a reply to Error 500 after an update of NinjaFireWall plugin, on the site WordPress.org Forums:
Did you check your PHP error log? Enable WP_DEBUG in your WordPress wp-config.php: Search for:…

1 month ago

Posted a reply to Website Login issue, on the site WordPress.org Forums:
Rename it back to bf_conf.php and check if it works. If it doesn't work, try…

1 month ago

Posted a reply to Website Login issue, on the site WordPress.org Forums:
You'll need to reconfigure it, or restore the bf_conf.php script.

1 month ago

Posted a reply to Website Login issue, on the site WordPress.org Forums:
It will delete the firewall "Login Protection" configuration. Rename it instead and see if that…

2 months ago

Posted a reply to Website Login issue, on the site WordPress.org Forums:
You can temporarily rename (or delete) the /wp-content/nfwlog/cache/bf_conf.php script used by the login protection.

2 months ago

Posted a reply to False positive admin account change, on the site WordPress.org Forums:
This is a notice to inform you about the modification in the DB. It was…

2 months ago

Posted a reply to False positive admin account change, on the site WordPress.org Forums:
Does your backup process locks the tables? If that were the case, then it could…

2 months ago

Posted a reply to Question about IP Ban when attacked, on the site WordPress.org Forums:
@tomdkat : There are a few tutorials about that: https://www.kazimer.com/fail2ban-ninjafirewall-wp-plus-syslog-events/ https://wordpress.org/support/topic/fail2ban-integration-for-ninja-firewall-wp-plugin-log/

2 months ago

Posted a reply to Question about rule #115, on the site WordPress.org Forums:
This is a generic rule to protect against JavaScript code injected into a POST payload,…

2 months ago

Posted a reply to Remote IP fix in .htninja stopped working, on the site WordPress.org Forums:
NinjaFirewall can't tell you that it cannot find the .htninja file since it doesn't know…

2 months ago

Posted a reply to HTTP Referer URL, on the site WordPress.org Forums:
Yes, it does protect from the attack.

2 months ago

Posted a reply to HTTP Referer URL, on the site WordPress.org Forums:
It's a firewall policy: "Firewall Policies > Intermediate Policies > HTTP_REFERER server variable > Sanitise…

2 months ago

Posted a reply to Anti-Malware : Unable to download signatures, on the site WordPress.org Forums:
That's normal: we removed that feature in version 3.6, which was released on january 2018.…

2 months ago

Posted a reply to Firewall Rule List, on the site WordPress.org Forums:
There's no list because security rules may change (e.g. old vulnerabilities are removed or replaced…

2 months ago

Posted a reply to Broken images, on the site WordPress.org Forums:
They are blocked by the "Set Content-Security-Policy for the website frontend" that you have enabled.…

2 months ago

Posted a reply to Broken images, on the site WordPress.org Forums:
It could be the "Strict-Transport-Security" policy if, for instance, you connect to your site over…

2 months ago

Posted a reply to Broken images, on the site WordPress.org Forums:
Did you enable one or more options from the "Firewall Policies > Advanced Policies >…

2 months ago

Posted a reply to Broken images, on the site WordPress.org Forums:
If you disable NinjaFirewall, can you see the image?

2 months ago

Posted a reply to .user.ini problem, on the site WordPress.org Forums:
Update it done as usual, from the WP dashboard. Maybe you need to refresh WordPress'…

3 months ago