WordPress.org

Posted a reply to False positive admin account change, on the site WordPress.org Forums:
This is not a bug, but the way the detection works: it detects any change…

3 days ago

Posted a reply to warning message from host re ninja firewall file, on the site WordPress.org Forums:
It looks like the firewall blocked a threat and wrote the incident to the firewall…

1 week ago

Posted a reply to Where are stored all logs, on the site WordPress.org Forums:
[1564612763]: 1564612763 is the epoch (seconds since Jan, 1st 1970). You can use PHP: echo…

2 weeks ago

Posted a reply to Where are stored all logs, on the site WordPress.org Forums:
The firewall logs are located in the wp-content/nfwlog/ folder and are named firewall_2019-xx.php.

2 weeks ago

Posted a reply to Firewall does not want to work in FullWAF mode, on the site WordPress.org Forums:
It looks like the firewall directive is in your .user.ini file, not in your .htaccess.…

2 weeks ago

Posted a reply to REST API problem, on the site WordPress.org Forums:
The firewall is not calling the API, but it hooks update_user_meta and your application calls…

2 weeks ago

Posted a reply to REST API problem, on the site WordPress.org Forums:
Using x-debug, I was able to locate the issue on this line: https://plugins.trac.wordpress.org/browser/ninjafirewall/tags/4.0.1/lib/utils.php#L962 current_user_can('edit_users') This…

2 weeks ago

Posted a reply to Stuck after submiting the captcha, on the site WordPress.org Forums:
That's what I thought: Modsecurity is likely blocking you.

2 weeks ago

Posted a reply to Stuck after submiting the captcha, on the site WordPress.org Forums:
Yes, just for testing purpose. Try once only and set it back to your original…

3 weeks ago

Posted a reply to Question about IP Ban when attacked, on the site WordPress.org Forums:
This feature was not implemented in the WP and WP+ Edition. We did implement it…

3 weeks ago

Posted a reply to Stuck after submiting the captcha, on the site WordPress.org Forums:
Did you try with the captcha and "Always enabled" to see whether you can log…

3 weeks ago

Posted a reply to REST API problem, on the site WordPress.org Forums:
There must be a conflict with that plugin. I'll check that as soon as I…

3 weeks ago

Posted a reply to Security plugin choice to combine with NinjaFirewall, on the site WordPress.org Forums:
This is the most complete and up to date documentation: https://blog.nintechnet.com/securing-wordpress-with-a-web-application-firewall-ninjafirewall/

3 weeks ago

Posted a reply to Cannot find the snapshot file, scan report cannot be created., on the site WordPress.org Forums:
Can you go to "Settings > Advanced Users Settings > Nerds Settings", check the garbage…

3 weeks ago

Posted a reply to Stuck after submiting the captcha, on the site WordPress.org Forums:
What is your "Login Protection" configuration ("When to enable the protection" option)?

3 weeks ago

Posted a reply to Security plugin choice to combine with NinjaFirewall, on the site WordPress.org Forums:
I wouldn't stack security plugins, but it's up to you. As I don't use either…

3 weeks ago

Posted a reply to REST API problem, on the site WordPress.org Forums:
Can you try to access the API directly from another device or browser? Or better,…

3 weeks ago

Posted a reply to Plugin with a membership site, on the site WordPress.org Forums:
You are using the latest version 4.0.1?

3 weeks ago

Posted a reply to REST API problem, on the site WordPress.org Forums:
The error message is the same, but it must be a different issue. I believe…

3 weeks ago

Posted a reply to REST API problem, on the site WordPress.org Forums:
That seems to be a different issue that the one mentioned by the OP, because…

3 weeks ago

Posted a reply to Plugin with a membership site, on the site WordPress.org Forums:
How do they login: via the wp-login.php as everyone do, or there's a specific login…

3 weeks ago

Posted a reply to Database changes detected, on the site WordPress.org Forums:
I'm not familiar at all with the wp rocket cache plugin, but if you go…

3 weeks ago

Posted a reply to REST API problem, on the site WordPress.org Forums:
There must be a difference somewhere. Maybe the protocol? One use HTTPS and the other…

3 weeks ago

Posted a reply to REST API problem, on the site WordPress.org Forums:
Does the blog and REST API have the same URL (see this discussion)?

4 weeks ago

Posted a reply to Database changes detected, on the site WordPress.org Forums:
Can you check the configuration of your caching plugin: did you enable any option related…

4 weeks ago

Posted a reply to Database changes detected, on the site WordPress.org Forums:
I have made a small change to the function that is used to monitor the…

4 weeks ago

Posted a reply to CDN configuration, on the site WordPress.org Forums:
It looks all good.

4 weeks ago

Posted a reply to CDN configuration, on the site WordPress.org Forums:
Beside the REMOTE_ADDR label, there should be the IP. Is it yours or the CDN…

4 weeks ago

Posted a reply to CDN configuration, on the site WordPress.org Forums:
Did you check in the firewall "Overview" page if there was any warning about your…

4 weeks ago

Posted a reply to File check – false positive?, on the site WordPress.org Forums:
On your server, the date and time you'll see is likely the mtime, not the…

4 weeks ago

Posted a reply to Database changes detected, on the site WordPress.org Forums:
I think it is related to your caching plugin. NinjaFirewall simply calls the WordPress get_users…

4 weeks ago

Posted a reply to Database changes detected, on the site WordPress.org Forums:
Can you give me the list of plugins that are enabled on your blog? Any…

1 month ago

Posted a reply to Database changes detected, on the site WordPress.org Forums:
Is it a multisite?

1 month ago

Posted a reply to Database changes detected, on the site WordPress.org Forums:
1. Copy/paste the following code to a file, name it whatever.php, upload it into the…

1 month ago

Posted a reply to Settings not saved, on the site WordPress.org Forums:
See this discussion: https://wordpress.org/support/topic/protect-the-login-page-against/

1 month ago

Posted a reply to Protect the login page against, on the site WordPress.org Forums:
If you enabled "Block any access to the API", the next two options will be…

1 month ago

Posted a reply to Database changes detected, on the site WordPress.org Forums:
NinjaFirewall takes all admin accounts data, makes a hash and saves it. Then, later on,…

1 month ago

Posted a reply to Protect the login page against, on the site WordPress.org Forums:
Yes, it's a known issue that was reported a few weeks ago. The firewall will…

1 month ago

Posted a reply to Some Notices and Some Warnings, on the site WordPress.org Forums:
Thanks, I'll fix it in the next release.

1 month ago

Posted a reply to BASE64-encoded injection (wrong), on the site WordPress.org Forums:
It is a base64-encoded payload and, because you have the "Firewall Policies > Intermediate Policies…

1 month ago

Posted a reply to Google Spider Blocked ?, on the site WordPress.org Forums:
I don't know why those two Google IPs are doing that, but that is a…

1 month ago

Posted a reply to Daily report not being sent/received, on the site WordPress.org Forums:
That's very odd that you have another "non-repeatin" entry. When you click on the "Run…

1 month ago

Posted a reply to Enabling Full WAF, on the site WordPress.org Forums:
Maybe it is due to some aggressive caching? I'll change the message for Litespeed.

1 month ago