happik

Dear @wfyann,

thank you for your ongoing contributions to this theme, I really appreciate it. I have tried new installation of wordpress with new database and wordfence and after some investigation I have found, that wordpress has modified my .htaccess file with following rows (as I have mentioned before):

# Wordfence WAF
<Files “.user.ini”>
<IfModule mod_authz_core.c>
Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
Order deny,allow
Deny from all
</IfModule>
</Files>

# END Wordfence WAF

So I suppose the record to .htaccess by the WF plugin is allowed. The sentence

; Wordfence WAF
auto_prepend_file = '/home/k/karelleubner/www/leubner.cz/wordfence-waf.php'
; END Wordfence WAF

was recorded to the file user.ini that was created. I am not sure if something else is missing. Now I have the same situation:

a) There is still the notification: To make your site as secure as possible, take a moment to optimize the Wordfence Web Application Firewall: Click here to configure. Dismiss.
If you cannot complete the setup process, click here for help.

b) Wordfence Live Activity: Idle

c) Firewall: Protection Level – Basic WordPress Protection

Is it possible that all this is due to the learning mode that will stop after few days?

Dear all,

I have tried almost everything I have found on internet. I have added a line

php_value auto_prepend_file “/home/k/karelleubner/www/leubner.cz/wordfence-waf.php”

or

php_value auto_prepend_file “./wordfence-waf.php”

as is written in the documentation, but the “500 – Server error!” has occured. I am sure that the “wordfence-waf.php” file is in the root directory. Why is this happening? What should I write to the htaccess file?

Hi, I have had a discussion with my provider and I can auto_prepend_file manually in htaccess. Is this sufficient? What should I write there?

Karel

Hi @wfyann.

I have just received the information from my provider and he answered that I can modify the .htaccess file but he did not answered if the use of auto_prepend_file is enabled. I will specify it tomorrow to him by chat.

The part with WordFence WAF is here:

# Wordfence WAF
<Files “.user.ini”>
<IfModule mod_authz_core.c>
Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
Order deny,allow
Deny from all
</IfModule>
</Files>

# END Wordfence WAF

where is the information about the auto_prepend_file? I have copied all website files by myself via FTP so I should have privileges to modify the files. Do you think the auto_prepend_file can be disabled?

Karel

Hi @wfyann.
The diagnostics tab shows these data:
Server API: FPM/FastCGI
Loaded Configuration File: /cfg/etc/php70-php.ini
PHP Version: 7.0.15

I have almost the latest PHP version and I have tried Apache + CGI/FastCGI (recommended based on tests) and waited long time (days) and there still appears the same Wordfence Live Activity:Idle and Firewall Protection Level: Basic WordPress Protection.

Should I write the code auto_prepend_file = '/home/k/karelleubner/www/leubner.cz/wordfence-waf.php' somewhere?

Where can I find the loaded configuration file?

Thank you,

B.R. Karel Leubner

Dear luckychingi,

I have had more time to try the older version and all other suggestions on the web with unsuccessful result. I have gotten rid of it only when all plugins are disabled.

I have moved all plugins to -old folder and replaced everything except wp-content and wp-config with the newest version of wp. I have deleted the browser cache and installed the spacer plugin.

Unfortunately following messages have appeared:

Warning: include(sva/sva.php): failed to open stream: No such file or directory in /home/k/karelleubner/www/leubner.cz/wp-content/plugins/spacer/index.php on line 1908

Warning: Cannot modify header information – headers already sent by (output started at /home/k/karelleubner/www/leubner.cz/wp-content/plugins/spacer/index.php:1908) in /home/k/karelleubner/www/leubner.cz/wp-includes/pluggable.php on line 1179

I don’t know what else to try.

Please help.

Thank you, Karel (WordPress 4.7.3)

Dear all,

I cannot get rid of this message with the spacer plugin.

I have moved all plugins to -old folder and replaced everything except wp-content and wp-config with the newest version of wp. I have deleted the cache and installed the spacer plugin.

Unfortunately the message has appeared:

Warning: include(sva/sva.php): failed to open stream: No such file or directory in /home/k/karelleubner/www/leubner.cz/wp-content/plugins/spacer/index.php on line 1908

Warning: Cannot modify header information – headers already sent by (output started at /home/k/karelleubner/www/leubner.cz/wp-content/plugins/spacer/index.php:1908) in /home/k/karelleubner/www/leubner.cz/wp-includes/pluggable.php on line 1179

I don’t know what else to try. Please help.

Thank you, Karel (WordPress 4.7.3)

I have updated WP before updating plugins. Some of them (not only the spacer) were probably not compatible with the new version of WP. I have renamed the plugin directories and the messages have disappeared. I have added the plugins as new ones (so newest version) and the same situation happened … the same message. So maybe it is not a problem of compatibility. I don’t know any other possibility than try to install older version and find if it is working (as you proposed in my second post).

Where do you think is the problem?

• This reply was modified 7 years, 12 months ago by happik.

I will try it, great idea. Thank you.