2 Questions & 1 Tip for the .htaccess issue for BPS users

Hi Miled,

– First, the tip: I use the Bulletproof Security plugin. Then when using the WordPress Social Login Diagnostics I get the

Error: Your web server returned “403 Forbidden” when checking WSL end-points.

This issue usually happen when :

1. Your web host uses mod_security to block requests containing URLs (eg. hosts like HostGator, GoDaddy and The Planet). On this case, you should contact your provider to have WSL end-points urls white-listed.

2. There is a .htaccess file that prevent direct access to the WordPress plugins directory.

In any case, WSL requires this url to be white-listed:
https://www.example.com/wp-content/plugins/wordpress-social-login/hybridauth/

To solve this, I go to the BPS Custom Code section and then look for the CUSTOM CODE PLUGIN/THEME SKIP/BYPASS RULES box. There, I add the following code:

# WSL by-pass Rule
RewriteCond %{REQUEST_URI} ^/wp-content/plugins/wordpress-social-login/hybridauth/ [NC]
RewriteRule . - [S=13]

This .htaccess rule allows access (whitelists) the url needed by WSL.

Note the S=13 should be S=13, S=14, S=15 or a higher number. You have to check how many Skip rules there are in your actual .htaccess file. Mine has 12 skip rules written by BPS authors, so yours MUST be at least number S13, as is mine.

Ok. My questions are about a different matter.

– My 1st Question:

I’ve recently installed WSL on a site test. It worked without problem, I even created application for FB, Twitter and Google+. As I was testing it, I deactivated it. Then I activated it again (without changing anything else). It doesn’t seem to work. I’ve tried everything, even from other computers but it doesn’t work anymore.
Any idea?

– 2nd Question:

I have a Multisite with one main site (www.example.com) and a second site as a subdirectory (not a subdomain) in the form of https://www.example.com/en

I know WSL is technically compatible with WordPress Multisite, but it obviously has problems with the subdirectory part of the url. For example, I cannot whitelist https://www.example.com/en/wp-content/plugins/wordpress-social-login/hybridauth/ because this url doesn’t exist. It should be calling the one from the root.

The applications have also the same problem, since they think they have to call for the wrong url.

Is there something that can be done to fix this?

Thanks in advance

https://www.ads-software.com/plugins/wordpress-social-login/