All in one Security and Firewall broken links

Hi Richard, that is good to know that you solved your own issue ??

Would you be able to share which rules you had to rewrite “don’t include any personal or private information” in the .htaccess file and for what security feature?

This would help those that might run into a similar issue.

Thank you

Well, apparently it rewrote its own rules. It went like this:
(i had tried other things at this time, like checking the links, they were all good, resetting file and folder ownership nothing changed, was really getting nuts at this point, then i thought ‘maybe its a plugin’ (yeah, why do all bright moments allways come last?))

– entered the dashboard, noticed the images werent there (also all ‘native’ wordpress and plugin images werent showing), as before;
– disabled All in one Security & Firewall, boom, all images returned instantly
– re-enabled the All in one Security & Firewall plugin, everything kept on working just fine.

Later, when i checked .htaccess i found these URL specific rules in “5G:[REQUEST METHOD]” ->

<IfModule mod_rewrite.c>
RewriteCond %{REQUEST_METHOD} POST
RewriteCond %{REQUEST_URI} ^(.*)?wp-comments-post\.php(.*)$
RewriteCond %{HTTP_REFERER} !^http(s)?s://(.*)?\.NEWdomain\.eu [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^$
RewriteRule .* https://127.0.0.1 [L]
</IfModule>
...
<IfModule mod_rewrite.c>
RewriteEngine on
RewriteCond %{HTTP_REFERER} !^$
RewriteCond %{REQUEST_FILENAME} -f
RewriteCond %{REQUEST_FILENAME} \.(gif|jpe?g?|png)$ [NC]
RewriteCond %{HTTP_REFERER} !^http(s)?s://(.*)?\.NEWdomain\.eu [NC]
RewriteRule \.(gif|jpe?g?|png)$ - [F,NC,L]
</IfModule>

By this time OLDdomain had allready been replaced by NEWdomain but offcourse these were the culprits. I also notices my cache plugin had the same problem, it still shows the OLDdomain everywhere so im going to restart that one as well.

Hope i helped, Good luck

Richard