Wordfence Extended firewall not working on Litespeed

Hi @beeriz

1) Open the Tools >> Diagnostics page.

2) Expand the Wordfence Firewall Current WAF configuration section.

3) Look at the value on the line that says wordfence-waf.php path

Let us use this example:

/absolute/path/to/wordfence-waf.php

Now carefully add this code below to the .htaccess file in the root directory of your WordPress installation, but replace the example file path with the file path that you found on your Diagnostics page:

# Wordfence WAF
<IfModule LiteSpeed>
php_value auto_prepend_file '/absolute/path/to/wordfence-waf.php'
</IfModule>
# END Wordfence WAF

Let me know if this optimizes the firewall so that the Protection Level says Extended Protection.

Hello. In the file .htaccess I already :

<IfModule LiteSpeed>
php_value auto_prepend_file '/var/www/html/wordfence-waf.php'
</IfModule>
<IfModule lsapi_module>
php_value auto_prepend_file '/var/www/html/wordfence-waf.php'
</IfModule>
<Files ".user.ini">
<IfModule mod_authz_core.c>
        Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
        Order deny,allow
        Deny from all
</IfModule>
</Files>

Hi @beeriz

Thank you for the update.

I would like to have a look at your Wordfence diagnostics report. Please go to the top of the “Diagnostics” tab on the Wordfence “Tools” page. There will be a “SEND REPORT BY EMAIL” button to send the diagnostics report. Enter wftest [@] wordfence [dot] com as the email and @beeriz as the forum username please.

Once you have emailed me the diagnostics report can you reply here to let me know that it has been sent. This is important in the unlikely event that your installation of WordPress is having an issue with sending mail.

Thank you.

Hello Phil,
I just sent you the report, ” Diagnostic report has been sent successfully.”

Thank you

Hi @beeriz

Thank you for the update.

You will need to ask your hosting provider why the value is not being set for the auto_prepend_file PHP directive via the code that Wordfence has added to your site’s .htaccess file.

Hello.
We are self hosting on AWS/Ubuntu

Hi @beeriz

Thank you for the update.

If you don’t know how to diagnose this yourself then you will need to ask AWS support to diagnose why the value is not being set for the auto_prepend_file PHP directive via the code that Wordfence has added to your site’s .htaccess file.