Worfence block get variables in URL

  • Resolved biatsalu

    (@biatsalu)


    4 years, 10 months ago

    Hi,
    I use wordfence on all my launched sites and I am facing an error never seen before.

    For those who use wordfence and have configured .htaccess for it, they will try to do the following at the URL: domain.com?example=Data:

    I’m in a form getting the variables with the method in get and as incredible as it may seem, wordfence always blocks get when we type Data:

    You can type example:, etc: it leaves, but Data: It blocks and gives the error “A potentially unsafe operation has been detected in your request to this site”

    I can’t infringe on this problem that doesn’t make any sense, and for a form with method post if you put Date: 05/21/2020 it will give the wordfence error.

    Any idea of ??resolution?

Viewing 6 replies - 1 through 6 (of 6 total)

  • Hey @biatsalu,

    Can you please try switching the Firewall into Learning Mode and let me know if it helps?

    https://www.wordfence.com/help/firewall/learning-mode/

    Please let me know how it goes.

    Thanks,

    Gerroald

    Thread Starter biatsalu

    (@biatsalu)

    Hi @wfgerald

    I changed it to what you asked for and now it works.
    What is the difference from “Enabled and Activated” to the one that asked me to change?

    Best Regards.

    Hey @biatsalu,

    While the Firewall is in Learning Mode it’s whitelisting the action so once you switch it back into Enabled and Protected the actions will continue to function. Please click all of the actions that you were having problems with to make sure they’re working. Then navigate to Wordfence > Firewall > Firewall Options > Whitelisted URLs. If the actions are listed there it’s safe to re-enable it.

    Please give this a try and let me know how it goes.

    Thanks

    Gerroald

    • This reply was modified 4 years, 10 months ago by WFGerroald.
    Thread Starter biatsalu

    (@biatsalu)

    Hi,
    Thanks for answering.

    Do not have the desired url, and there is no url with get Data:
    But yes Post, because I have a text area field that I have to by Date: 22/05/2020 (it is copied from another text), to save in the database and the wordfence blocks due to the word Data:

    Is there no other way to put this word on a whitelist or something similar?

    Hey @biatsalu,

    If it is indeed work in Learning Mode can you switch back to Enabled and Protecting and let me know if it’s still working? If not, we’ll dig a little deeper.

    Please let me know.

    Thanks,

    Gerroald

    Thread Starter biatsalu

    (@biatsalu)

    Hi,

    I changed it and it works now! Thank you for your support!

    Best Regard.

Viewing 6 replies - 1 through 6 (of 6 total)
  • The topic ‘Worfence block get variables in URL’ is closed to new replies.