Unable to revert hardening; restricted file editing

I installed the development version of the Sucuri plugin [1] and the latest version of the conflicting plugin from here [2] and the “Tools” page loads just fine, I can access the “File Editor” sub-page and modify the content of the “Robots.txt” file.

Since I do not have access to your server I can not provide a solution to the issue that you are experiencing, I can not fix it because I can not reproduce it in my environment, so please copy the API key, then go to the plugin’ settings page and click the button “Reset Everything” this will remove every entry from the database associated to the Sucuri plugin and revert all the hardening options previously applied, after this the Sucuri plugin will be in the default state as it is in my website, that will fix the issue with the other plugin you mentioned.

Let me know if you have more information of how to reproduce the issue.

Still didn’t work even after following your instructions and also deactivating/re-activating the plugin. In fact, after reactivating the plugin, the previous settings for hardening were active – nothing appeared reset to a default state.

If you would like access to the server, please DM via twitter @johnrozzo or provide a way to forward credentials. Thanks.

Thanks for the offer to access your server, unfortunately I am not allowed to do that if you do not have a Sucuri subscription, otherwise you can fill a support ticket in our internal system [1].

For now, please rename these files [2][3][4] if they exist, then try to load the file editor once again, do it with the Sucuri plugin disabled and enabled too just to confirm if the issue is with the code or the access control rules applied in those three (optional) files.

[1] https://support.sucuri.net/support/
[2] ./wp-includes/.htaccess
[3] ./wp-content/.htaccess
[4] ./wp-content/uploads/.htaccess

I am having exactly the same problem. I an unable to revert hardening for plugins and theme file changes so that I can edit the robots.txt file. I tried the suggestion above to reset and it changed nothing except to erase the API key.

I also went to the link https://support.sucuri.net/support/ as suggested in the post above. It tells me I do not have an account. To create an account it appears on your website that I have to purchase something. I just need the problem fixed with the plugin already installed. I chatted with someone on the sucuri website and he sent me the link back to this page!

Upon further research I found that iThemes Security had inserted code into wp-config to disallow file edits. I manually removed the code and updated my settings in iThemes security. It appears to be working again. So if anyone is having a similar problem, you may also want to check iThemes Security plugin in addition to Sucuri.

I believe this issue is already fixed in the development version of the code [1] but I will keep this thread marked as not-resolved until the new stable version is publicly released.

[1] https://github.com/Sucuri/sucuri-wordpress-plugin