Quantcast
Channel: WordPress.org Forums » [Wordfence Security - Firewall, Malware Scan, and Login Security] Support
Viewing all 33131 articles
Browse latest View live

Fatal Error from lib/rules.php

$
0
0

Replies: 0

Dear Wordfence support,

I’m using Gravity Forms and within this form people can input fields and also upload images to submit. But some people get the following error when they want to submit the whole form:

Fatal error: Maximum execution time of 30 seconds exceeded in /home/(mysiteurl)/domains/(mysiteurl)/public_html/wp-content/plugins/wordfence/vendor/wordfence/wf-waf/src/lib/rules.php on line 809

I guess it has something todo with the Firewall? How do I stop this?

Would love to hear from you!


Translate the plugin into Spanish

$
0
0

Replies: 0

Hello Wordfence, translate the Wordfence Segurity plugin into Spanish, it is very important since many do not understand English of all your options that the plugin has.
Could you help translate I have Poedit Premium to translate plugins and so on

Help sites database hacked repeatedly

$
0
0

Replies: 0

We know its the duplicator thing and removed from all sites. But they are still getting in..

We have access to reseller account but dont know how to lock it down and keep them out on the shared server long enough to deal with the other server clients.

Can anyone just point us in the right direction? We’ve been at war with it for over a week.

Scan stop request received.

$
0
0

Replies: 0

Scans always stop immediately. We’re using a self signed certificate between our server and Cloudflare, and the Cloudflare certificate for public facing connections.

I saw a mention that this is caused by cURL validating the SSL certificate, but add_filter('https_ssl_verify', '__return_false'); makes no difference.

I saw a mention of initiating the scans remotely, but I don’t see any option like that?

I’ve tried everything I’ve found, including memory usage tweaks – but the result is invariably the same.

We also tried everything in https://www.wordfence.com/help/scan/troubleshooting/#if-your-scans-arent-starting

Thanks for reading!

  • This topic was modified 1 hour, 1 minute ago by slapbox.

Browser shows “Your connection is not private”

$
0
0

Replies: 0

I installed wordfence today. After installation, there was no issue for a while… However later on, when I browse my site, the browser started to show “Your connection is not private”. I googled this error, then deleted cookies, and browser cash. Then it recovered. 10-15 minutes later, the problem showed up again. After a short while, it recovered again by itself. That means it is not related to cookies and cash. But the problem is, this problem repeatedly occurs and recovers itself in 10-20 minutes intervals…
What can I do?

  • This topic was modified 10 minutes ago by japsec.
  • This topic was modified 8 minutes ago by japsec.

Can’t connect site to Central

$
0
0

Replies: 0

Hi, I am trying to add a site to Central, but it gets stuck with ‘Checking connection…’. Never had that problem before, and this new site is on the same server as others. Is there an issue on your end?

Thanks
JP

web applicatin firewall only at 35%

$
0
0

Replies: 0

Hi, when optimisng the wordfence firewall, some of my sites only go to 35% protected on the web applicaton firewall. Do you know why this is, or would this be a question for my hosting provider?

WordPress Central Question

$
0
0

Replies: 2

Hello,

Can someone tell me how WordFence Central connects to wordfence? It doesn’t connect ask for username and password and was surprising it just connected.

Thanks


Wordfence blocking Easy Updates Manager

$
0
0

Replies: 0

Hi there,
As a publishing company we are releasing about 4 websites every month. We use Wordfence on all of them. Now it’s becoming very difficult to keep up with updating all of them. Easy Updates Manager takes this problem out of our hands and doing the job for us. The problem is Wordfence is blocking this plugin. I am about to remove wordfence from our website but before doing so, i am gonna asking first. Is there a way to make a exception for one plginin in firewall and let it do it’s job? in this case Easy Updates Manager.
Thank you for this great plug in buy the way.

Best regards Tinzo.

failed logins

$
0
0

Replies: 0

Hello,
I got this log yesterday. says failed logins but those are not my active times, those usually happened while my sleep, so it is definitely not me.
https://imgur.com/a/1xuiktR
those failed logins happened from alst of countries USA, UK, France, Singapore, Russia and more
used also a real username of mine (not ‘admin’) and yes it has admin rights.
once I click RUN WHOIS. most of them are the same

NetName: CLOUDFLARENET
NetHandle: NET-172-64-0-0-1
Parent: NET172 (NET-172-0-0-0-0)
NetType: Direct Assignment
OriginAS: AS13335
Organization: Cloudflare, Inc. (CLOUD14)
RegDate: 2015-02-25
Updated: 2017-02-17
Comment: All Cloudflare abuse reporting can be done via https://www.cloudflare.com/abuse
Ref: https://rdap.arin.net/registry/ip/172.64.0.0

Should I be worried ?

please need some help.

Thanks in Advance.

Wordfence blocks Apple podcast subscription

$
0
0

Replies: 0

Hi there! I publish a podcast through WordPress and recently switched to Wordfence Security. When I made the change, my users began reporting that they are unable to subscribe to the podcast now, receiving a message that just says “Unable to Subscribe”. It’s definitely a Wordfence issue, because when I switch back to my old Security plugin (AIO WP), users can subscribe again.

I’ve tried regular and learning mode over the course of a few weeks, and I’m not sure what else to try. I’d really prefer to use Wordfence and was considering upgrading to Premium for all of my sites. But, if my users can’t subscribe to my podcast, that’s a bit of a deal breaker for me.

Any ideas on how I can configure my settings and keep Wordfence running?

Thank you in advance!

Scan notification

$
0
0

Replies: 0

Hello,
I’ve got this message yesterday : 1 path was skipped for the malware scan due to scan settings Type: Skipped Paths
The version installed is the most recent one : 7.4.6
Is there something I need to do ?
Thanks for your help

Critical notification about YUZO plugin

$
0
0

Replies: 0

Plugin Wordfence after update YUZO send my a notice:

Filename: wp-content/plugins/yuzo-related-post/admin/classes/class-admin.php
File Type: Not a core, theme, or plugin file from wordpress.org.
Details: This file appears to be installed or modified by a hacker to perform malicious activity. If you know about this file you can choose to ignore it to exclude it from future scans. The matched text in this file is: eval(base64_decode(

The issue type is: Suspicious:PHP/evalB64.4068
Description: Suspicious eval with a base64_decode

What does it mean?

Topic on plugin page: https://wordpress.org/support/topic/wordfence-alert-suspiciousphp-evalb64-4068

I found this in file class-admin.php (on wordpress server also):

'bp' => base64_encode(eval(base64_decode('cmV0dXJuIHl1em9fZ2V0X3BsdWdpbigpOw=='))),

and this

'bt' => base64_encode(eval(base64_decode('cmV0dXJuIHl1em9fZ2V0X3RoZW1lKCk7')))

After decoding I got in 1st:

return yuzo_get_plugin();

and in 2nd:

return yuzo_get_theme();

—-

What does it mean? What plugin gets access to other plugins and themes?

  • This topic was modified 1 hour, 9 minutes ago by tihjawi.

IP getting blocked

$
0
0

Replies: 0

Hi

I am facing a peculiar problem and am not sure if it is due to Wordfence. I am using Wordfence on my site. I earlier had blocked internal traffic on my site by making filters in the google analytics admin. I had blocked the ip addresses for my home and office network. I have now deleted all the filters (I deleted them yesterday) however to my dismay when I now access my site (I am able to access my site), Google Analytics still does not show my visit and I am unable to test event triggers, etc.

Is there any way wordfence could be responsible for this? I do not remember having entered any ip addresses in wordfence.

Thanks

Wordfence installation is incomplete

$
0
0

Replies: 0

We are about to migrate our servers to a new datatenter – I have been going in and making changes recommended for migration and this one site had a warning: Wordfence installation is incomplete: I see a continue installation when I try to go to plugins – so cannot de-activate from dashboard. I added a premium key – but the pop-ups remain and I cannot get past them.
Under diagnostics there are 2 problems under Wordfence Config Ability to save Wordfence settings to the database.

  • Checking basic config reading/writing
  • Checking serialized config reading/writing

Will send report to wftest


Reactivating WF Firewall after possible hack

$
0
0

Replies: 1

We suspect that our site has been hacked – home page has changed to an older version. When I logged in, all installed plugins had been deactivated.

I updated and reactivated WordFence and clicked the setting to optimize the firewall. Got a message saying the auto_prepend_file PHP setting is being used, and to contact the Support forum if we don’t recognize the filename, which is:

/home/content/p3pewpnas02pod02_data05/97/2193797/html/wordfence-waf.php

We weren’t using any significant modifications to the default setup. Should we use the Override setting for this?

Yoast file blocked

$
0
0

Replies: 1

My Yoast SEO sitemap stylesheet is being blocked (403 error) and I can’t tell if it’s the server or Wordfence blocking it.

/wp-content/plugins/wordpress-seo-premium/css/main-sitemap.xsl

Hence, our sitemap_index.xml is showing a blank page when we try to visit it.

Ideas?

Wordfence Web Application Firewall

$
0
0

Replies: 0

I cannot optimize Wordfence Web Application Firewall, I get the following msg:

The changes have not yet taken effect. If you are using LiteSpeed or IIS as your web server or CGI/FastCGI interface, you may need to wait a few minutes for the changes to take effect since the configuration files are sometimes cached. You also may need to select a different server configuration in order to complete this step, but wait for a few minutes before trying. You can try refreshing this page.

Sitemap blank

$
0
0

Replies: 0

Hi,

Today, I have import data from Yoast plugin to Rank Math.

Now, I am getting this error [sitemap is blank or white page]

After deactivating the wordfence plugin error solved.

but I want to activate wordfence plugin as well because I loved wordfence security performance.

Please help me

Sitemap blank page- https://www.lootdealsoffers.in/sitemap_index.xml%5D

Thanks

  • This topic was modified 37 minutes ago by uttam802.

edit the ip address lock screen

$
0
0

Replies: 0

Hello,
How can you edit the ip address lock screen after exceeding the specified number of incorrect logins?
I prefer to avoid showing the tools I use, and in your case the big Wordfence logo appears

Viewing all 33131 articles
Browse latest View live