FPM/FastCGI – Basic WordPress Protection Problem

  • Resolved bioherb

    (@bioherb)


    3 months, 2 weeks ago

    Hello,

    we have a problem with the “optimize the wordfence firewall”.
    (FPM 8.1/FastCGI)
    We added the “auto_prepend_file” automatically with “Aapache + CGI/FastCGI (recommended …)
    but it still shows the message to configure the WAF. (now over 24 hours ago)

    The .htaccess entries were successfully set and the .user.ini was created with the correct path to the “wordfence-waf.php”.
    I verified the permissions on the files etc., restarted php8.1-fpm and apache2, cleared the cache via wp-rocket and also the OP-Cache.
    The auto_prepend_file shows up as the Local Value = “/var/www/[installation_folder]/wordfence-waf.php”.

    I also testet an echo in the wordfence-waf.php, to see if it gets loaded and it does.
    Do you have any idea, what the problem could be?
    It seems to be properly installed and set?

    WAF Loaded Successfully = Yes
    WAF auto prepend active = No

    (I already send a report by email with more details of the diagnostics)

Viewing 1 replies (of 1 total)
  • Plugin Support wfpeter

    (@wfpeter)

    Hi @bioherb, thanks for reaching out!

    Your description of action taken sounds correct for a FPM/FastCGI setup and that you’ve verified the path in .user.ini definitely points to where a wordfence-waf.php file exists. At first glance the fact auto_prepend_file isn’t active sounds like a problem where a host may be denying PHP configuration to its customers. If the syntax below matches the contents of your files, consider briefly checking-in with your host’s support as to whether you have the ability to modify your .htaccess and .user.ini files in this way.

    I’ll also include the expected contents for both files in your WordPress root folder below so you can double-check in case anything went wrong.

    .htaccess:

    # Wordfence WAF
<Files ".user.ini">
<IfModule mod_authz_core.c>
    Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
    Order deny,allow
    Deny from all
</IfModule>
</Files>
# END Wordfence WAF

    .user.ini:

    ; Wordfence WAF
auto_prepend_file = '/your/path/to/wordfence-waf.php'
; END Wordfence WAF

    Let us know how you get on!
    Peter.

Viewing 1 replies (of 1 total)
  • You must be logged in to reply to this topic.