quadrumanous

Forum Replies Created

Viewing 5 replies - 1 through 5 (of 5 total)

  • We to have the problemen that not all settings are be?ng applied.
    It might be a syntax error somewhere in the policie content, but there is no easy way to find that.

    Thread Starter quadrumanous

    (@quadrumanous)

    Hi Dimitar, I might have found some hint on to malfunctioning of the settings.

    when I hit the save changes button on the advanced settings pages a empty page with status code 500 is returned and the .htaccess file is not updated/changed.

    Thread Starter quadrumanous

    (@quadrumanous)

    Hi Dimitar,

    Have our .htaccess:
    RewriteEngine On
    RewriteBase /

    RewriteCond %{HTTPS} !=on
    RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

    <IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteBase //
    RewriteRule ^index\.php$ – [L]
    RewriteCond %{REQUEST_FILENAME} !-f
    RewriteCond %{REQUEST_FILENAME} !-d
    RewriteRule . //index.php [L]
    </IfModule>

    # BEGIN WordPress
    <IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteBase /
    RewriteRule ^index\.php$ – [L]
    RewriteCond %{REQUEST_FILENAME} !-f
    RewriteCond %{REQUEST_FILENAME} !-d
    RewriteRule . /index.php [L]
    </IfModule>

    # END WordPress
    # Wordfence WAF
    <Files “.user.ini”>
    <IfModule mod_authz_core.c>
    Require all denied
    </IfModule>
    <IfModule !mod_authz_core.c>
    Order deny,allow
    Deny from all
    </IfModule>
    </Files>
    # END Wordfence WAF

    Test: curl -I https://www.xillion.nl/diensten/advies-consultancy/ -H “Origin: bing.com”

    Thread Starter quadrumanous

    (@quadrumanous)

    Hi Dimitar,

    I’ve just tried that.. no difference.
    Might there be some syntax error which causes the .htaccess update to break or so?

    Regards,

    Jean

    Thread Starter quadrumanous

    (@quadrumanous)

    Hi Dimitar,

    Unfortunately no improvement with 1.9.5 on our config.

    If I make an config export I see these in the .sql:

    
<em>INSERT INTO wp_options (option_id, option_name, option_value, autoload)
VALUES (NULL, 'hh_access_control_allow_methods', '1', 'yes')
ON DUPLICATE KEY UPDATE option_value = '1', autoload = 'yes';

INSERT INTO wp_options (option_id, option_name, option_value, autoload)
VALUES (NULL, 'hh_access_control_allow_methods_value', 'a:3:{s:3:"GET";s:1:"1";s:4:"POST";s:1:"1";s:4:"HEAD";s:1:"1";}', 'yes')
ON DUPLICATE KEY UPDATE option_value = 'a:3:{s:3:"GET";s:1:"1";s:4:"POST";s:1:"1";s:4:"HEAD";s:1:"1";}', autoload = 'yes';

INSERT INTO wp_options (option_id, option_name, option_value, autoload)
VALUES (NULL, 'hh_access_control_allow_origin', '1', 'yes')
ON DUPLICATE KEY UPDATE option_value = '1', autoload = 'yes';

INSERT INTO wp_options (option_id, option_name, option_value, autoload)
VALUES (NULL, 'hh_access_control_allow_origin_url', 'a:4:{i:0;s:21:"https://www.xillion.nl";i:1;s:22:"https://www.xillion.nl";i:2;s:18:"https://xillion.nl";i:3;s:17:"https://xillion.nl";}', 'yes')
ON DUPLICATE KEY UPDATE option_value = 'a:4:{i:0;s:21:"https://www.xillion.nl";i:1;s:22:"https://www.xillion.nl";i:2;s:18:"https://xillion.nl";i:3;s:17:"https://xillion.nl";}', autoload = 'yes';</em>

    But they don’t show up when i inspect the headers. Some other parameters do, like the CSP policy do show up.

    • This reply was modified 6 years, 4 months ago by quadrumanous.
    • This reply was modified 6 years, 4 months ago by Jan Dembowski.
Viewing 5 replies - 1 through 5 (of 5 total)