php.ini problem

Hi,
in my case phpinfo() displays
Server API LiteSpeed V6.9

The hosting company says they use Apache/suPHP without supporting .user.ini, neither changes to php variables or custom php.ini.

Still wondering if
simply adding
php_value auto_prepend_file "/path_to_file/wordfence-waf.php"
at the end of .htaccess (that works) is a good solution.

Maybe the plugin’s developer can add another configuration item in the drop down list for this case.

Hi all —

Our dev team is working on support for some of the situations above, for the next few maintenance releases. It’s correct that different hosts support different files, or have a different configuration, so we’re working on alternate methods for these cases.

If adding the auto_prepend_file line manually makes the setup message disappear, then it is successful — be sure you know how to replace the .htaccess/.user.ini/php.ini if you try these steps manually though. If a setting is not compatible with your server, adding a line that’s meant for a different server might cause the site not to load, until it is removed.

The firewall is still effective against many attacks even before the configuration steps are done, but these steps help it protect against attacks that a plugin can’t normally catch without this. If you don’t try the manual setup, keep an eye out for the upcoming maintenance releases. Thanks!

-Matt R

Thanks!

Echoing others here I too am having problems. Three WordPress sites with Wordfence and one php.ini file (on a Ubuntu 12 server). I’ve tried everything including using a single file to include all three references.

I ended up just setting it up for one site but then found phpMyAdmin didn’t work so I’ve now removed it.

Wordfence is great though ??

Rob

Hi

Just to add it to your list, the set-up isn’t working for Fasthosts hosting either.

Mariette

Just to let you know adding php_value auto_prepend_file '/home/path/path/wordfence-waf.php' to the end of .htaccess works, apparently, on Stablehost while the autoconfig (they use Apache+suPHP did not work.

Mark

Hi all,

For the Ubuntu 12 server — it depends on how Apache is set up. If you want to make a new post, we can try to walk through the options.

On sites “Server API: LiteSpeed” in the phpinfo(), look in the site’s .htaccess file for “<IfModule mod_php5.c>”, and change mod_php5.c to “lsapi_module”. (This will be automated in an upcoming version.)

Most other cases should be covered in the next couple of Wordfence updates. Note that in the meantime, the new firewall does still run within Wordfence, which still provides protection against many types of attacks. Thanks everyone else for the input as well!

-Matt R