wordfence-waf.php

Hi @tzadi,

Sorry you’re experiencing this issue.

You will need to manually remove the firewall setup as described in our documentation.

Also just out of curiosity what do you mean when you say:

The current security Plugin was showing an error stating that WordFence was denying permissions to execute functions.

I would have quoted exactly what it said in my post, however I cannot leave the wordpress admin dashboard page to access anything through wordpress now. If I select any other page I get the message: This page isn’t working –
milehimobileconcrete.com is currently unable to handle this request.
HTTP ERROR 500
So I cannot get to any plugins to do anything right now.
I have no clue how to get this fixed.
I was hoping I could load a copy of: wordfence-waf.php
Via Filezilla back in the location it was in the root directory and somehow activate it so the site would be functional again.

Deleting wordfence-waf.php manually was a mistake.
That particular file is hooked into PHP through auto_prepend, so it runs in PHP before the system even tries to start WordPress. That is the initial access check.

Depending on your hosting setup, you will have a line in either php.ini or user.ini, that states something like

auto_prepend = wordfence-waf.php some path.

You can look at those files, primarily user.ini, through FileZilla or SSH, and delete that line. If you have a user.ini (or .user.ini) file, with only the auto_prepend line in it, you can simply delete the whole file, rather than editing it.

That might get the system back online.

On your original problem, the “was denying permissions to execute functions”..
You were obviously trying to use both Belt and Suspenders simultaneously.
To see that message, you must have been running both security plugins at the same time. You cannot assume that two security plugins can try to control the system simultaneously without interfering with each other; they are tightly wound into the system..
So it is very likely that one or both of them could complain that the other security plugin is preventing them from doing some of their “unsafe” things, if you run both at the same time.

Hello (@crudhunter)
Actually WordFence was deactivated and removed back in July.
There were some issues with the site I have been trying to figure out and I just happened to check the current security plugin. It had a list of 8 items, 4 of which had “flags” for lack of a better term on them. All 4 of the alerts could have been causing the issue I was attempting to get rid of. I followed the instructions for the first three; one at a time and everything was fine. I noticed the wordfence-waf.php showing as a problem and since wordfence had not been on the site since July (all of the other files had been successfully removed) I mistakenly thought it was there by a fluke and deleted it.
Who was to know that a plugin that had EVERYTHING else removed from a site would leave a random file that could completely disable a website.

Hello Caleb (@crudhunter)
I was able to locate the user.ini file and delete it.
The site is slow but it is working>
Thank you very much for your help I really do appreciate your assistance with this.

No problem.. Glad you got it working again. ??
I know what site downtime feels like.