QQJILI VIP,free joining bonus casino.Recharge Every day and Get Bonus up-to 50%!

Best Firewall Plugin

nwokoh — Mon, 25 Nov 2024 22:41:40 +0000

The best in the WordPress ecosystem. I’ve used them for about 8 years and never been hacked or compromised.

Ninja Firewall creates alert after new staging site creation

adalov — Thu, 09 Nov 2023 18:17:41 +0000

Hi,

after updating to WP Staging 3.1.1 and creating a new staging site on a WP installation where the NinjaFirewall plugin (with no recent updates or changes in the settings) is also installed, Ninja repeatedly sent the following alert after every single change on the staging site: “Someone accessed a script that was modified or created less than 10 hour(s) ago.”

Is that something that should be addressed from your side (WP Staging) or NinjaFirewall as it is clearly a false alarm? Creating/changes to a new staging site never caused this alert before and clearly should not cause an alert at all. Maybe you can clarify directly with NinjaFirewall, as it is very widely used?

Thx!

emails File Guard detection could not be delivered

Okoth1 — Thu, 24 Nov 2022 22:58:01 +0000

Hello,

There are no problems receiving Alert emails like login notifications or log stats, but File Guard detection emails can’t be delivered.

I noticed that the log stats send email address is different than the File Guard one, and I believe that’s the reason. The log stats emails are sent with the email address [email protected].
The File Guard email address won’t pass the DMARC test. It looks like this: [email protected] (without the extension).

I’m getting this message:

Reporting-MTA: DNS; scanner02.mail.supportedns.com

Action: failed
Final-Recipient: rfc822;[email protected]
Status: 5.0.0
Remote-MTA: dns; gmail-smtp-in.l.google.com
Diagnostic-Code: smtp; 550-5.7.26 Unauthenticated email from mydomainname.com is not accepted due to
 550-5.7.26 domain's DMARC policy. Please contact the administrator of
 550-5.7.26 mydomain.com domain if this was a legitimate mail. Please visit
 550-5.7.26  https://support.google.com/mail/answer/2451690 to learn about the
 550 5.7.26 DMARC initiative. b188-20020a0219c5000000b00374fc138a68si529328jab.152 - gsmtp

Subject: 
[NinjaFirewall] Alert: File Guard detection
From: 
"NinjaFirewall" <[email protected]>
Date: 
24/11/2022, 17:39
To: 
[email protected]

Someone accessed a script that was modified or created less than 10 hour(s) ago:

SERVER_NAME: www.mydomain.com
USER IP: xxx.xxx.xxx.xxx
SCRIPT_FILENAME: /home/server/public_html/mydomain.com/wp-admin/admin-ajax.php
REQUEST_URI: /wp-admin/admin-ajax.php
Last changed on: November 24, 2022 @ 03:05:23 (UTC -0500)

I cannot configure the DMARC, dkim, and spf for [email protected]. Is it possible to send the File Guard detection emails also with the same email address as the other Alerts?

Cheers

Ninja Firewall blocks duplicator pro backup

mw66 — Thu, 04 Aug 2022 07:50:04 +0000

Hi,

i have a problem with one of the firewall policies of Ninja Firewall.
If starting a backup with duplicator pro it will render 5% and than nothing happens.
In the Firewall log the following message appears:
[04/Aug/22:07:39:34 +0000] - XXXXXXXXXX "GET /wp-admin/admin-ajax.php?action=duplicator_pro_process_worker&now=1659598774" "https://www.xxxxxx.xx/wp-admin/admin-ajax.php?action=duplicator_pro_process_worker&now=1659598774" "WordPress/6.0.1; xxxx"

When i switch off the policy for “WordPress Ajax” everything is fine and duplicator creates a backup. But i don’t want to leave this setting switched off for longer.
I’ve tried some settings in duplicator, but nothing worked.

Is this a known issue or does anyone have a simple fix?

Thanks in advance
Martin

Ninja FW crashed

leolivier — Mon, 27 Dec 2021 16:40:50 +0000

I get the message (in French) “Impossible de récupérer les informations d’identification de base de données WordPress” inthe dashboard (ie can’t retrieve database information).
I’m using the “standard” docker image of wordpress and I tried to run the troubleshooting that says the following (not very helpful):


NinjaFirewall (WP edition) troubleshooter
HTTP server 	: 	Apache/2.4.51 (Debian)
PHP version 	: 	7.4.27
PHP SAPI 	: 	APACHE2HANDLER
 	 	 
auto_prepend_file 	: 	/var/www/html/wp-content/nfwlog/ninjafirewall.php
Loader's path to firewall 	: 	/var/www/html/wp-content/plugins/ninjafirewall/lib/firewall.php	
wp-config.php 	: 	found in /var/www/html/wp-config.php
NinjaFirewall detection 	: 	NinjaFirewall is loaded but returned error code #3	
 	 	 
Loaded INI file 	: 	none
user_ini.filename 	: 	.user.ini
user_ini.cache_ttl 	: 	300 seconds
User PHP INI 	: 	none found
 	 	 
DOCUMENT_ROOT 	: 	/var/www/html
ABSPATH 	: 	/var/www/html/
WordPress version 	: 	5.8.2
WP_CONTENT_DIR 	: 	/var/www/html/wp-content
Plugins directory 	: 	/var/www/html/wp-content/plugins
User Role 	: 	Administrator
User Capabilities 	: 	manage_options: OK - unfiltered_html: OK
Log dir permissions 	: 	/var/www/html/wp-content/nfwlog dir is writable
Cache dir permissions 	: 	/var/www/html/wp-content/nfwlog/cache dir is writable

NinjaFirewall (WP edition) troubleshooter v1.9.4

Another troubleshooter said


Version: 2.0.2
Found /var/www/html/wp-config.php.
Opening it for reading.
Looking for DB_NAME, DB_USER, DB_PASSWORD, DB_HOST and $table_prefix:

    cannot read DB_NAME
    cannot read DB_USER
    cannot read DB_PASSWORD
    cannot read DB_HOST
    cannot read table_prefix

Notice: Undefined index: DB_HOST in /var/www/html/wg-db.php on line 193 Attempting to connect to the DB: Notice: Undefined index: DB_HOST in /var/www/html/wg-db.php on line 125 Notice: Undefined index: DB_USER in /var/www/html/wg-db.php on line 125 Notice: Undefined index: DB_PASSWORD in /var/www/html/wg-db.php on line 125 Notice: Undefined index: DB_NAME in /var/www/html/wg-db.php on line 125 Warning: mysqli_real_connect(): (HY000/2002): No such file or directory in /var/www/html/wg-db.php on line 125 Connection Error: No such file or directory

Exiting.

but wp-config contains:

root@ca88017b661f:/var/www/html# grep DB_ wp-config.php 
define( 'DB_NAME', getenv_docker('WORDPRESS_DB_NAME', 'wordpress') );
define( 'DB_USER', getenv_docker('WORDPRESS_DB_USER', 'example username') );
define( 'DB_PASSWORD', getenv_docker('WORDPRESS_DB_PASSWORD', 'example password') );
define( 'DB_HOST', getenv_docker('WORDPRESS_DB_HOST', 'mysql') );
define( 'DB_CHARSET', getenv_docker('WORDPRESS_DB_CHARSET', 'utf8') );
define( 'DB_COLLATE', getenv_docker('WORDPRESS_DB_COLLATE', '') );

Most Underrated Security Plugin

smartdiyer — Wed, 16 Jun 2021 11:14:07 +0000

Ninja Firewall is the best Firewall I ever used. I tested it by comparing with Cloudflare results. This does its job really well. Results are real-time and genuine. The ultimate feature I was searching since years is its ‘Login Protection’. The way this works is great. It asks for a username/password OR captcha even before letting in to type the real credentials. This gives login.php full protection against brute force. This saves server resources. Dump all the Two Factor plugins. Install this and just forget.
Previously I was using htaccess password protection for wp-login.php. Thats OK if you are the only one person handling the website. If there are other users / woocommerce customers, then htaccess password lock doesn’t work. If you keep it on, it asks for ht password for a customer who is trying to signout. That was annoying. This plugin is more than a Firewall. Its a two factor auth too, You also get some wp hardening features.
Moreover, this plugin has almost negligible impact on resources. They also have a scanner which can be integrated with Firewall Plugin. Firewall Signatures are received almost real-time unlike other plugins. Thanks to the Authors of this most underrated plugin. If you are reading this, if satisfied with this, consider supporting the author.

Ninja FW File Guard whiteList does not work

gabier2 — Fri, 12 Feb 2021 10:08:34 +0000

Hello everybody
I have Ninja Firewall installed and also Wordfence. If I enable File Guard in NFW I keep getting alerts from NFW warning me that

`== NinjaFirewall File Check (diff)
== https://www.chomage-et-monnaie.org
== Fév 11, 2021 @ 14:18:42 +0100
[+] = Nouveau fichier [!] = Fichier modifié [-] = Fichier supprimé
[!] /home/chomagee/www/wp-content/wflogs/config-synced.php
[!] /home/chomagee/www/wp-content/wflogs/rules.php
[!] /home/chomagee/www/wp-content/wflogs/config-transient.php
[!] /home/chomagee/www/wp-content/wflogs/config-livewaf.php
[!] /home/chomagee/www/wp-content/wflogs/ips.php

I inserted the following line in the “Excluded files” field

/home/chomagee/www/wp-content/wflogs/

But it does not change anything. The alerts go on.

What is wrong in my settings ?

gabier

Ninja Scanner achieves 5 stars for me!

wpadmin4prmm — Thu, 08 Oct 2020 02:39:13 +0000

The Scanner is so flexible and covers so many vital segments of my websites that I can understand the nuances of IT better that ever. Making our internet lives as easy as flipping on a light switch is the goal of modern computing and Ninja Scanner certainly does exactly that. And when there is something I don’t understand, they reply promptly. Plus they are twelve hours ahead of me, so I can contact them after my day is through and their day is just beginning. Thus, they are working on my issue while I am in my downtime. How Efficient…. Ready for the next day (unless it’s the weekend).

Captcha Not working

booksdaddy — Fri, 23 Aug 2019 12:23:18 +0000

The captcha is not showing up on my admin login page. I have enabled it in the Login Protection section.
I am using Ninja Firewall combined with All in one wordpress security.
Help me out this.
Thanks in Advance!!!

Version Info:
Ninja Firewall lastest version,
Wordpress – 5.2.2

Possinle false alarm (adminstrator accounts modified )

rauhami — Thu, 15 Mar 2018 13:53:02 +0000

Hi,
Just received a “weird” notification from Ninja Firewall claiming that one or more administrator accounts were modified in the database. After having a look at the email it was pointing at my very own ip address and no modifications were made on the two admins of the site. Both can login with own credentials, no emails or anything were changed.

What i have done is that i logged in to the server for about two to five minutes before the alert email. Any ideas what could have caused it?

Thanks.