WordPress.org

Posted a reply to Ninjafirewall activation using WPCLI, on the site WordPress.org Forums:
You need the 'manage_options' and 'unfiltered_html' capabilities to enable and disable it. With WP CLI,…

17 hours ago

Posted a reply to Huge escalation in blocked threats – why?, on the site WordPress.org Forums:
Can you go to the "Logs" page, copy and paste here some of those log…

17 hours ago

Posted a reply to .htninja whitelisting IPs, on the site WordPress.org Forums:
You can use either one in the .htninja, for instance HTTP_CF_CONNECTING_IP: <?php /* +===========================================================================================+ |…

4 days ago

Posted a reply to Necesidad de Agregar Permissions Policy, on the site WordPress.org Forums:
Can you clarify which "Permissions Policy" you meant?

5 days ago

Posted a reply to .htninja whitelisting IPs, on the site WordPress.org Forums:
Can you try to create a info.php file with those two lines of code: <?php…

5 days ago

Posted a reply to DISALLOW_FILE_EDIT not working, on the site WordPress.org Forums:
Can you try to add this line to your wp-config.php: define( 'DISALLOW_FILE_EDIT', true ); Does…

5 days ago

Posted a reply to NinjaFirewall destroys the backend of the template “Courage”, on the site WordPress.org Forums:
I installed NinjaFirewall with the Courage theme and there was no issue. Is there any…

5 days ago

Posted a reply to Samshed by these requests, on the site WordPress.org Forums:
"ioptimization" is a backdoor uploaded by hackers that looks like a plugin.

6 days ago

Posted a reply to DISALLOW_FILE_EDIT not working, on the site WordPress.org Forums:
Can you check your wp-config.php script if there's a DISALLOW_FILE_EDIT constant defined? If you find…

6 days ago

Posted a reply to hosting provider 1and1 blocks .sigs.tmp as malicious, on the site WordPress.org Forums:
Hex-encoding is often decoded by scanners. I'll encode it in base64 in the next release…

1 week ago

Posted a reply to hosting provider 1and1 blocks .sigs.tmp as malicious, on the site WordPress.org Forums:
This is a temp file used during the anti-malware scan. The plugin downloads the signatures…

1 week ago

Posted a reply to FULL WAF Mode not Possible caused by error, on the site WordPress.org Forums:
Do you have another installation of NinjaFirewall in a parent directory which could interfere with…

2 weeks ago

Posted a reply to Blocked and Logged, on the site WordPress.org Forums:
Were you the administrator when you submitted those requests? By default, the admin should not…

2 weeks ago

Posted a reply to FULL WAF Mode not Possible caused by error, on the site WordPress.org Forums:
Which path? In the PHP INI file?

2 weeks ago

Posted a reply to Blocked and Logged, on the site WordPress.org Forums:
Can you search "8001687" in the firewall log and paste here the corresponding line? It…

2 weeks ago

Posted a reply to Nginx rate limiting, on the site WordPress.org Forums:
Rate limiting the wp-login.php and xmlrpc.php scripts is part of the Login Protection in the…

2 weeks ago

Posted a reply to Nginx rate limiting, on the site WordPress.org Forums:
The login protection (WP and WP+) is the only rate limiting feature that can be…

2 weeks ago

Posted a reply to Nginx rate limiting, on the site WordPress.org Forums:
The Rate Limiting option available in the WP+ Edition is similar to Nginx: it monitors…

2 weeks ago

Posted a reply to Blocked REST API from webserver IP (site ip), on the site WordPress.org Forums:
You can whitelist the server IP with the .htninja script.

2 weeks ago

Posted a reply to Nginx rate limiting, on the site WordPress.org Forums:
NinjaFirewall doesn't limit the number of HTTP requests a visitor can make. Instead, it monitors…

2 weeks ago

Posted a reply to NinjaFirewall Login issue, on the site WordPress.org Forums:
I will increase its max length to 256 characters in the next release.

3 weeks ago

Posted a reply to NinjaFirewall Login issue, on the site WordPress.org Forums:
That's really odd. If you enable the captcha instead of the login/password, does it work?

3 weeks ago

Posted a reply to NinjaFirewall Login issue, on the site WordPress.org Forums:
I have no error or issue when using your INI file on PHP 7.4. Did…

3 weeks ago

Posted a reply to Help with “400 Bad Request” ?, on the site WordPress.org Forums:
I can't reproduce the issue. I installed both plugins with the default settings and it…

3 weeks ago

Posted a reply to NinjaFirewall Login issue, on the site WordPress.org Forums:
You have an error on the first line of the INI file: session.save_handler[PHP] It should…

3 weeks ago

Posted a reply to Help with “400 Bad Request” ?, on the site WordPress.org Forums:
Do you have any security plugin that could block the scan from accessing the /wp-admin/admin-ajax.php…

3 weeks ago

Posted a reply to NinjaFirewall Login issue, on the site WordPress.org Forums:
You can solve this warning message by using the .htninja file. Regarding the login page,…

3 weeks ago

Posted a reply to NinjaFirewall Login issue, on the site WordPress.org Forums:
Do you see any warning or error about PHP sessions in the "NinjaFirewall > Dashboard"…

3 weeks ago

Posted a reply to Bugreport for Ninjafirewall 4.3.1, on the site WordPress.org Forums:
Thanks for reporting. I'll fix it in the next release.

4 weeks ago

Posted a reply to NinjaFirewall Login issue, on the site WordPress.org Forums:
It looks like a cookie or PHP session issue. Can you try to delete your…

4 weeks ago

Posted a reply to Blocked REST API from webserver IP (site ip), on the site WordPress.org Forums:
As long as everything is working, you should be fine.

4 weeks ago

Posted a reply to Blocked REST API from webserver IP (site ip), on the site WordPress.org Forums:
Where you're editing a post or page, are you admin? Or are you using another…

4 weeks ago

Posted a reply to Litespeed Webserver and Full WAF not working, on the site WordPress.org Forums:
I assume it has to do with your configuration. By default, the Full WAF mode…

4 weeks ago

Posted a reply to Blocked REST API from webserver IP (site ip), on the site WordPress.org Forums:
If it were you, we would likely see your IP. Maybe you have a plugin…

4 weeks ago

Posted a reply to differences between captacha protection and second layer of user and password, on the site WordPress.org Forums:
Regarding bots, both provide the same level of security. But assuming someone stole your admin…

4 weeks ago

Posted a reply to does disabling account creation prevent admin to create them manualy ?, on the site WordPress.org Forums:
Where your're the admin, you can create users account even if the "Block user account…

4 weeks ago

Posted a reply to Litespeed Webserver and Full WAF not working, on the site WordPress.org Forums:
That means the directive in your .htaccess is not recursive, i.e., it applies only to…

4 weeks ago

Posted a reply to Litespeed Webserver and Full WAF not working, on the site WordPress.org Forums:
When I check your site, it shows you're running Nginx. Is that a reverse proxy?…

4 weeks ago

Posted a reply to Some of the settings button appear broken, on the site WordPress.org Forums:
Running WP CLI would be the same. I can't tell you yet when the next…

4 weeks ago

Posted a reply to Some of the settings button appear broken, on the site WordPress.org Forums:
The scanner requires the "install_plugins" capability, but I just noticed that when if you set…

1 month ago

Posted a reply to Some of the settings button appear broken, on the site WordPress.org Forums:
If you still get the same error about undefined JS functions, it means the JS…

1 month ago

Posted a reply to Ninja is breaking healthcheck, on the site WordPress.org Forums:
That's normal, NinjaFirewall is not a regular plugin. The way it works is not compatible…

1 month ago

Posted a reply to Some of the settings button appear broken, on the site WordPress.org Forums:
Your installation of NinjaScanner is corrupted, those JS functions are in the code (wp-content/plugins/ninjascanner/static/ninjascanner.js). There's…

1 month ago

Posted a reply to NinjafireWall , woocommerce, elementor problems, on the site WordPress.org Forums:
Did you enable any policy from the "“Firewall Policies > Advanced Policies > HTTP response…

1 month ago

Posted a reply to link to unsubscribe from email notifications, on the site WordPress.org Forums:
It has been on our todo list for years, but never implemented. I'll check if/how…

1 month ago

Posted a reply to Remove License key, on the site WordPress.org Forums:
There's no option to remove the license key, but if you have NinjaFirewall WP+ (premium),…

1 month ago

Posted a reply to Massive amount of undesired mails, on the site WordPress.org Forums:
What kind of emails is it? Can you paste one of them here?

1 month ago