WordPress.org

Posted a reply to Remote IP fix in .htninja stopped working, on the site WordPress.org Forums:
NinjaFirewall can't tell you that it cannot find the .htninja file since it doesn't know…

1 week ago

Posted a reply to HTTP Referer URL, on the site WordPress.org Forums:
Yes, it does protect from the attack.

2 weeks ago

Posted a reply to HTTP Referer URL, on the site WordPress.org Forums:
It's a firewall policy: "Firewall Policies > Intermediate Policies > HTTP_REFERER server variable > Sanitise…

2 weeks ago

Posted a reply to Anti-Malware : Unable to download signatures, on the site WordPress.org Forums:
That's normal: we removed that feature in version 3.6, which was released on january 2018.…

2 weeks ago

Posted a reply to Firewall Rule List, on the site WordPress.org Forums:
There's no list because security rules may change (e.g. old vulnerabilities are removed or replaced…

2 weeks ago

Posted a reply to Broken images, on the site WordPress.org Forums:
They are blocked by the "Set Content-Security-Policy for the website frontend" that you have enabled.…

3 weeks ago

Posted a reply to Broken images, on the site WordPress.org Forums:
It could be the "Strict-Transport-Security" policy if, for instance, you connect to your site over…

3 weeks ago

Posted a reply to Broken images, on the site WordPress.org Forums:
Did you enable one or more options from the "Firewall Policies > Advanced Policies >…

3 weeks ago

Posted a reply to Broken images, on the site WordPress.org Forums:
If you disable NinjaFirewall, can you see the image?

3 weeks ago

Posted a reply to .user.ini problem, on the site WordPress.org Forums:
Update it done as usual, from the WP dashboard. Maybe you need to refresh WordPress'…

4 weeks ago

Posted a reply to REST API problem, on the site WordPress.org Forums:
Yes it is. It was already part of 4.0.2 as well.

4 weeks ago

Posted a reply to .user.ini problem, on the site WordPress.org Forums:
They are hacking attempts. They were blocked.

4 weeks ago

Posted a reply to Security headers not working, on the site WordPress.org Forums:
Keep them in .htaccess if it works, that's fine.

4 weeks ago

Posted a reply to .user.ini problem, on the site WordPress.org Forums:
Fast-CGI will use a .user.ini, but Litespeed does not use Fast-CGI, instead it uses it's…

4 weeks ago

Posted a reply to Ninjacheck.php shows “Full WAF Mode” but WP Backend shows “WordPress WAF” Mode”, on the site WordPress.org Forums:
Which hosting company are you using? Can you contact them and ask them if you…

4 weeks ago

Posted a reply to Locked out all users besides admin ´”You are not allowed to perform this task.”, on the site WordPress.org Forums:
Did you go to the "Firewall Log" and check the reason why you were blocked?…

4 weeks ago

Posted a reply to Security headers not working, on the site WordPress.org Forums:
Maybe a conflict with your cache?

4 weeks ago

Posted a reply to .user.ini problem, on the site WordPress.org Forums:
When you try to install in Full WAF mode, the installer will always make a…

4 weeks ago

Posted a reply to Ninjacheck.php shows “Full WAF Mode” but WP Backend shows “WordPress WAF” Mode”, on the site WordPress.org Forums:
That means your INI file is not recursive, i.e., it does not apply to sub-folders.…

4 weeks ago

Posted a reply to .user.ini problem, on the site WordPress.org Forums:
Hi, Litespeed does not use INI file, it uses .htaccess instead. Do you see any…

1 month ago

Posted a reply to Security headers not working, on the site WordPress.org Forums:
Hi Can you show me the HTTP headers code that you added to your .htaccess?…

1 month ago

Posted a reply to Brute force protection enabled: unable to login, on the site WordPress.org Forums:
I don't know how they do that, I guess they delete any cookies (including PHP…

1 month ago

Posted a reply to Brute force protection enabled: unable to login, on the site WordPress.org Forums:
Interesting. I have seen a few users who had the same problem lately but they…

1 month ago

Posted a reply to Access control with GEO location, on the site WordPress.org Forums:
It depends on your configuration: -If you are using rewrite rules in your .htaccess, you…

1 month ago

Posted a reply to DOCUMENT_ROOT variable in HTTP request, on the site WordPress.org Forums:
It is "Block the DOCUMENT_ROOT server variable in HTTP request" in the advanced firewall policies…

1 month ago

Posted a reply to Protect admin-ajax.php against suspicious bots, on the site WordPress.org Forums:
I cannot reproduce the issue: if this is a private IP, if shouldn't be blocked.…

1 month ago

Posted a reply to Block a remote IP, on the site WordPress.org Forums:
It is blocking them. But they should be blocked earlier by the .htninja. I looks…

1 month ago

Posted a reply to Block a remote IP, on the site WordPress.org Forums:
The GET /index.php should be blocked indeed. Maybe there's a syntax error in your .htninja?…

1 month ago

Posted a reply to php notice firewall.php, on the site WordPress.org Forums:
Yes, I'm aware of that. Last patch is not good enough, I'll fix it in…

1 month ago

Posted a reply to Block a remote IP, on the site WordPress.org Forums:
What kind of files are you scanning? NinjaFirewall is a PHP firewall, so if you…

1 month ago

Posted a reply to Captcha Not working, on the site WordPress.org Forums:
What are the options you enabled in the NinjaFirewall "Login Protection" page? Note that the…

2 months ago

Posted a reply to PHP Fatal error, on the site WordPress.org Forums:
If you have any plugin that, like NinjaFirewall, is using plain text, it will write…

2 months ago

Posted a reply to PHP Fatal error, on the site WordPress.org Forums:
The attachment is a temporary file: NinjaFirewall creates it, calls the WP wp_mail function and…

2 months ago

Posted a reply to MOD Security, on the site WordPress.org Forums:
It's always running when the plugin is activated.

2 months ago

Posted a reply to PHP Fatal error, on the site WordPress.org Forums:
/home/wp-content/nfwlog/cache/nf_filecheck.txt is the file attached to the email sent by File Check. It looks like…

2 months ago

Posted a reply to Question about permissions changing, on the site WordPress.org Forums:
NinjaFirewall does not change file permissions. Maybe your host? Some hosting companies run scripts that…

2 months ago

Posted a reply to MOD Security, on the site WordPress.org Forums:
Yes, it can replace ModSecurity. See this post about how both filtering engines work very…

2 months ago

Posted a reply to False positive admin account change, on the site WordPress.org Forums:
This is not a bug, but the way the detection works: it detects any change…

2 months ago

Posted a reply to warning message from host re ninja firewall file, on the site WordPress.org Forums:
It looks like the firewall blocked a threat and wrote the incident to the firewall…

2 months ago

Posted a reply to Where are stored all logs, on the site WordPress.org Forums:
[1564612763]: 1564612763 is the epoch (seconds since Jan, 1st 1970). You can use PHP: echo…

2 months ago