Viewing 4 replies - 1 through 4 (of 4 total)
  • Plugin Author Jeff Starr

    (@specialk)

    It’s not a bug. Many malicious requests involve inclusion of “localhost” in the query string. So BBQ blocks it to protect your site. To allow the string, you can configure whitelist rules for “localhost”. To make things super easy, I have configured the whitelist plugin for you. Simply download the plugin from Plugin Planet, and then activate on your site. After doing so, all requests that include the string “localhost” will be allowed access.

    Thread Starter TorontoBoy

    (@torontoboy)

    I do realize many malicious requests involve the inclusion of “localhost”, and I would not want to open up this security hole. Spammers with the hostname “localhost” have caused me great difficulty in the past.

    Ok, please confirm my understanding. Even though the All Posts search is within the WP Admin screen, when you do a search, the search criteria is sent through the URL back to the server. In a search for “localhost”, BBQ will block this request, as designed. If my understanding is correct, then I’d rather not use “localhost” in my search criteria, and keep WP secure.

    Thanks for clarifying my understanding.

    Plugin Author Jeff Starr

    (@specialk)

    I think you’ve got the general idea. Basically you can allow “localhost” queries or not.

    If allowed via the whitelist plugin, then it will apply to any/all queries made to the site (search or otherwise). Likewise if you decide to continue blocking “localhost”, then any/all queries made to the site that contain that particular string will be blocked.

    • This reply was modified 8 years, 6 months ago by Jeff Starr.
    • This reply was modified 8 years, 6 months ago by Jeff Starr.
    Plugin Author Jeff Starr

    (@specialk)

    Gonna go ahead and mark this as resolved to help keep things organized. Feel free to follow-up or post afresh with any new issues or questions. Thank you.

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Admin > Posts > Search “All Posts” for ‘localhost” results in blank screen’ is closed to new replies.