I did everything that was told, but there was no effect.

  • Resolved 24Horas

    (@24hbrazil)


    2 years, 10 months ago

    I don’t know what I do wrong.

    I did everything asked. But the headers don’t appear, and my site still has a D score.

    My website is 24h.com.br

    I activated the plugin, but I notice that nothing comes up in htaccess.

    The page I need help with: [log in to see the link]

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author Andrea Ferro

    (@unicorn03)

    Hi @24hbrazil, thanks for downloading Headers Security Advanced & HSTS WP we are going to launch a plugin update soon with support for WordPress 5.9 and other features/fixes.

    Are you using cloudflare as your headers ? Can you provide us with some more information so we can help you thanks

    Thread Starter 24Horas

    (@24hbrazil)

    Thanks for your answer Andrea!

I believe it is. I've been talking to my hosting server for a few days to understand why htaccess is not passing the headers.

I disabled Nginx for testing and put Cloudflare in "development mode" but still no success.

It is also important to say that cloudflare is configured at the server level. I'm a layman to understand how this affects security headers, and how I can fix it.

On the securityheaders.com page I see something mentioning "server: cloudflare" in the Raw Headers tab.

That makes sense? What do I need to do in cloudflare to get around the problem? htaccess is perfectly configured.
    Thread Starter 24Horas

    (@24hbrazil)

    Hi, I came back to give feedback.

    The issue was resolved and was linked to Cloudflare. Solved it after I changed SSL to strict. I also followed the steps of adding HSTS via cloudflare, and revised my firewall rules.

    Finally, headers were missing. Then I activated the plugin and everything worked perfectly. Score from D to A+.

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘I did everything that was told, but there was no effect.’ is closed to new replies.