swebjork

First of all, thanks for your huge patience with my problem! And for BPS of course ??

Ok… now to answer your questions;
All four BP modes under ‘Security Modes’ are activated. Under ‘Status’ I have the following info;

Activated BulletProof Security .htaccess Files;

The .htaccess file that is activated in your root folder is:
string(45) " BULLETPROOF .46.2 >>>>>>> SECURE .HTACCESS " 

√ wp-config.php is .htaccess protected by BPS
√ php.ini and php5.ini are .htaccess protected by BPS

√ Deny All protection activated for BPS Master /htaccess folder
√ Deny All protection activated for /wp-content/bps-backup folder

The .htaccess file that is activated in your wp-admin folder is:
string(45) " BULLETPROOF .46.2 WP-ADMIN SECURE .HTACCESS "

General BulletProof Security File Checks;

√ An .htaccess file was found in your root folder
√ An .htaccess file was found in your /wp-admin folder
√ A default.htaccess file was found in the /htaccess folder
√ A secure.htaccess file was found in the /htaccess folder
√ A maintenance.htaccess file was found in the /htaccess folder
√ A bp-maintenance.php file was found in the /htaccess folder
√ A bps-maintenance-values.php file was found in the /htaccess folder
√ A wpadmin-secure.htaccess file was found in the /htaccess folder
√ Your Current Root .htaccess File is backed up
√ Your Current wp-admin .htaccess File is backed up
√ Your BPS Master default.htaccess file is backed up
√ Your BPS Master secure.htaccess file is backed up
√ Your BPS Master wpadmin-secure.htaccess file is backed up
√ Your BPS Master maintenance.htaccess file is backed up
√ Your BPS Master bp-maintenance.php file is backed up
√ Your BPS Master bps-maintenance-values.php file is backed up

The only thing a bit fishy with that info is that the string(45) command shows in the status, otherwise seems ok too me.

Both .htacess seems fine in editor. I haven’t made any changes here and it does not seem like any plugin has written to them either.

I don’t have any caching plugins either. The only one even close to ‘caching’ was a search plugin that probably indexes info. I disabled that along with just about all other plugins for testing. No change. I also removed robots.txt just in case. I cleared cache in my three different browsers and tried accessing with all three.

I have also checked all possible settings in my web hotel control panel, MySql, WordPress, Theme settings and browsers. When I check my web page for errors I get a few but nothing serious I think. An unclosed ‘span’ and a few forgotten semicolons etc. I will correct them and try again. Next step for me is to start a new website with default theme and settings and then install only BPS and xCloner. I will post results as I get them.

So once again, thanks for your time and effort AITpro. Knowing that your test came up with a perfect result is what makes me continue trying. (It also bugs me bigtime xD)

I’ve tried uninstalling and then reinstalling both BPS and xCloner, but the symptoms remain. When updating settings in xCloner or when generating backup (step 2, file backup) I still get permission denied. Skiprule is in place in root .htacess. And when (temporarily) activating default mode in BPS both updating settings and generating backup runs smooth and without any errors.
How does the skiprule work exactly? Is it limited to actions within the xCloner pluginfolder? Since xCloner runs index2.php within the xCloner plugin directory but it copies files from all directories, are the ‘skiprule permissions’ inherited properly to these actions in other folders as well? Just a thought, maybe I’m way off on this one since I don’t know how the background voodoo works ??
Please advice.

I’ve been away for a few days, but thanks for testing… now I know it should work without any problems. I don’t have supercache installed, and I have both bulletproof modes activated so I think it’s time for me to start from the beginning with both plugins. Uninstall and then add them again. Maybe I’ve messed something up in the process ?? I will try this during the weekend, then I will post results.

Thanks for your quick reply. Since xCloner makes a full backup of both files and database maybe there are .htaccess rules that prohibits these kind of operations. Obviously there should be, but not for admin.

The log in xCloner indicates that when trying to create a backup the sql backup finishes, but not the file backup. When the file backup process is about to start xCloner loads a new page (index2.php) and that is where the error message appears.

(Btw, I will stop referring to memory issues. I was talking about that I could not remember if I changed permissions or not. So the question was related to brain-memory and not computer memory. ?? Sorry for the confusion.)

Yes the skiprule is there.
Let me just recap to sort out my symptoms (mostly for myself and other readers ?? ;
– With earlier version of BPS (before skiprule) I got access denied when updating settings and creating a backup.
– BPS with skiprule (current version of BPS) fixed problems when updating settings. However I could not create a backup, and that was when I started this thread.
– I then went to default mode in BPS as you suggested and both settings and backup worked.
– After updating xCloner today (and activating BPS again) I once again get access denied when updating settings (wich is really weird, because skiprule is in place), and as before I can not create a backup.

Hope this helps. And my question about the file permissions within xCloner is related to my memory (or lack thereof). I seem to remember trying to elevate permissions within xCloner directory to see if that helped, but I’m not sure if I really did that or if I just thought of doing it :). Just wanted to check with you since you obviously know your way around security issues.

My permissions were set to 744 for files and 755 for folders in the xCloner directory. So I made no changes there. I then tried your solution to put BPS in default mode and delete .htaccess from admin and it worked! The xcloner backup completed without errors! So now I’m thinking that BPS secures files or folders that xcloner tries to acess in the index2.php mentioned in the errormessage above? Wich then in turn generates the errormessage from either xCloner or the server…
Anyway, thanks a million for the reply! I really like both xCloner and BPS, and hopefully you and/or Ovidiu could check in on this further to avoid this error in the future. Btw, should I set file permissions to 644 in the xcloner directory? All files in other plugin-directories are set to 644, so it’s only in xCloner they are set to 744.
Thanks again, and if I can help with further testing to solve this problem please let me know!