• Resolved GeorgiaG

    (@georgiag)


    I am setting up the firewall and received this message:
    To make your site as secure as possible, the Wordfence Web Application Firewall is designed to run via a PHP setting called auto_prepend_file, which ensures it runs before any potentially vulnerable code runs. This PHP setting is currently in use, and is including this file:

    /opt/php7.4.30/lib/mysql-vars.php
    If you don’t recognize this file, please contact us on the WordPress support forums (opens in new tab) before proceeding.

    The host is GoDaddy.

    I just set you up last evening and entered several names to trigger a lockout and this AM had 6 notices of lockouts from different individuals using those names so I want to confirm I can proceed and am not giving them a back door. Thank you.

    Georgia

    The page I need help with: [log in to see the link]

Viewing 1 replies (of 1 total)
  • Plugin Support wfpeter

    (@wfpeter)

    Hi @georgiag, thanks for contacting us.

    I was also unable to find much information about mysql-vars.php out on the web when another customer asked about this last week, but am swaying towards the host including this. You can always check-in with their support just to make sure.

    Once you’re happy that the file is legitimate, when optimizing the firewall using the wizard, selecting the INCLUDE option will ensure that when your auto_prepend_file value is changed to point to wordfence-waf.php, that file will also include mysql-vars.php, ensuring no required files are excluded on your site.

    Thanks,

    Peter.

Viewing 1 replies (of 1 total)
  • The topic ‘I do not recognize this file’ is closed to new replies.