AIO 6G Firewall rules interfere with PHPMyAdmin

  • Resolved gilesnr

    (@gilesnr)


    2 years ago

    Hi,
    I have my wordpress site on the same Apache server as the Mariadb database and PhpMyAdmin.

    When I enabled the AIO plugin’s ‘Enable 6G firewall protection’ or the ‘6G Block query strings’ settings PhpMyAdmin constantly shows 403 errors.

    Maybe it’s PhpMyAdmin’s fault but just to let people know here in case they hit the same problem.

Viewing 8 replies - 1 through 8 (of 8 total)
  • Plugin Support aporter

    (@aporter)

    Hi,

    Where to is your PHPMyAdmin install located?

    Is it inside your WordPress installation.

    Best Wishes,

    Ashley

    Thread Starter gilesnr

    (@gilesnr)

    Hi,
    No, it’s located in the standard location /usr/share separate to wordpress in /srv/http so I was surprised it was being affected but somehow it is.

    Cheers
    Giles

    Plugin Support aporter

    (@aporter)

    Hi,

    Do you have the AIOS firewall setup?

    If you do can you add these constants in aios-bootstrap.php after the “<?php” line:

    define(‘AIOS_FIREWALL_DEBUG’, true);
    define(‘AIOS_FIREWALL_SERVER_DUMP’, true);

    If it is not setup put them in wp-config.php

    Then try access PHPMyAdmin with them rules turned on when it gets blocked it should then log all the needed data to your PHP Error logs.

    Can you then send me that information?

    You can send it privately via our premium support (use order number 0000 and link to this support ticket):

    https://aiosplugin.com/premium-support/

    Best Wishes,

    Ashley

    • This reply was modified 2 years ago by aporter.
    Thread Starter gilesnr

    (@gilesnr)

    Hi Ashley,
    Indeed ‘block query strings’ was triggered, sent the log as requested.

    Thanks!
    Giles.

    Plugin Support aporter

    (@aporter)

    Hi Giles,

    Thanks I’ve got the log for this request.

    So it appears the AIOS PHP firewall is running server wide on your install.

    Have you set the auto_prepend_file directive in your php.ini file to include aios-bootstrap.php?

    Or by default AIOS will set aios-bootstrap.php to autoload either via a .htaccess file or .user.ini file in the WordPress root folder has one of these files accidentally been copied to your PHPMyAdmin install folder?

    Best Wishes,

    Ashley

    Thread Starter gilesnr

    (@gilesnr)

    Hi Ashley,
    OK, then that explains it, it’s indeed in the php.ini so it’s global, I think that was in the plugin instructions right ?

    I will look at moving it to the site .htaccess.

    Thanks!
    Giles.

    Plugin Support aporter

    (@aporter)

    Hi Giles,

    Remove it from your php.ini so that it’s no longer global.

    Then in the plugin:

    WP Security -> Firewall -> Advanced settings

    You should see either a “downgrade firewall” button or “Set up firewall”

    If it says “Set up firewall” press it and the plugin will automatically set it up correctly for you.

    If it says “downgrade firewall” press it, then when it refreshes press the “set up firewall” button.

    The firewall should then be correctly setup.

    Best Wishes,

    Ashley

    Thread Starter gilesnr

    (@gilesnr)

    thanks, done!

Viewing 8 replies - 1 through 8 (of 8 total)
  • The topic ‘AIO 6G Firewall rules interfere with PHPMyAdmin’ is closed to new replies.