comxcom

Try too the black&white list plug for registering : CM E-Mail Registration Blacklist.

Pour une liste blanche de domaine + une liste noire d’emails + une liste noire de domaines = CM E-Mail Registration Blacklist

Et pour un filtrage par localisation (évitant tout trafic inutile faussant la fréquentation) :
Login IP & Country Restriction

Great !!
Thanks for sharing the issue that is REALLY helpful

Salvation in minutes. Just follow ??

Yep thanks for priceless precisions !
Hope this discussion will help s.o in the future.

Congrats for this firewall: i already had 7 alerts about hacks. 6 was not dangerous (actually, it was some cromp tasks i had previously programmed) and it allowed me to ajust the rules, but one was a real try to hack.

I looked for a reinforced protection because i had php injections on one of my wordpress website, with “eval(base64_decode($_POST[xxxxx])) codes everywhere on 2 websites. I spent lot of time to clean it but now it seems to be ok.

Wait & See, and thanks again !

YESS !
i was about to uninstall ninja firewall and wanted to check the good procedure and -surprise!!- the firewall is active !!!

So with OVH i have to use .user.ini instead of php.ini or php5.ini !

Thanks a lot ??

Hi nintechnet
i just tried .user.ini but i got the same issue ??

i think you’re right, with ovh restrictions of shared hosting i think i cannot use ninja firewall

i will check modsecurity and i thank you a lot for help
Regards

Hi Nintechnet & thx for fast answer !

here are the results, i replaced name of root folder & domain name as suggested :
================== %< ====================
HTTP server: Apache
PHP version: 5.4.30
PHP SAPI: FPM-FCGI
Loaded INI file: /usr/local/php5.4/etc/php.ini
auto_prepend_file: none
user_ini.filename: .user.ini
user_ini.cache_ttl: 300
user INI: php5.ini found
PHPRC: unknown
DOCUMENT_ROOT: /home/rootfolder/domain
wp-config.php: found
ABSPATH: /home/rootfolder/domain/
WP version: 467
WP_CONTENT_DIR: /home/rootfolder/domain/wp-content
================== %< ====================

It seems that my php5.ini is not loaded.
My web hosting is OVH, and i use for hosting my websites an option called “multidom” that is described on this page.

With this option, the domain site folder is not in the usual “www” but at the root folder of the hosting (/).

I’m afraid OVH does not the use of another php.ini, as i just red a support page explaining how to modify php config on mutualized servers by ovh: it can be done by editing a file “.ovhconfig” and modifying it. It is mentionned : the .ovhconfig file must be at the root folder and it is not possible to use several .ovhconfig files and to have different configurations of php active on the same hosting.

So, you think the use of Ninja firewall is possible although?

Sorry if my english is sometimes approximative & thanks for support !

Hi everybody !

I just made the upgrade to WP3.8 and i HATE the fat and evil font used in administration panel.

Is there a way to change it back to the old and neutral arial, using the .po files as mentioned below? I’m french so perhaps it’s possible?

Please let me know for the well-being of my eyes ??
Regards!