• Russ

    (@gfxdesigner)


    To minimize server load, I have disabled wp-cron on all WordPress sites so that I can run cron tasks directly from the server. However, I have found that with “Enable HackRepair.com’s blacklist feature”, it will block the wget request.

    Is there a way that I can have HackRepair.com’s blacklist feature enabled while allowing wget access to wp-cron?

    Thanks!

    https://www.ads-software.com/plugins/better-wp-security/

Viewing 7 replies - 1 through 7 (of 7 total)
  • @russ

    Yes, you can.

    Edit the wp-content/plugins/better-wp-security/core/modules/ban-users/lists/*.inc file that matches the web server you are using.
    Add a # to comment the wget entry like this (Apache example):

    # RewriteCond %{HTTP_USER_AGENT} “^Wget” [NC,OR]

    Finally disable the HackRepair.com’s blacklist setting and click on the Save All Settings button. Then reenable the HackRepair.com’s blacklist setting and once again click on the Save All Settings button.

    That should do the trick.

    Note updating the plugin will discard any changes made.

    dwinden

    Ok, just log into your File Editor, and remove the line in your .htaccess.

    @the Hack Repair Guy

    … but as soon as you save any changes to the settings in the iTSec plugin you need to … log into your File Editor, and remove the line in your .htaccess AGAIN

    So it’s more convenient to change the right template (*.inc) file.
    Not perfect since any change to the template file will be discarded after a plugin update.

    dwinden

    Thread Starter Russ

    (@gfxdesigner)

    Thank you for the recommendations. However, what would be great is if I could add a custom function in a custom plugin that would allow Wget and overwrite iThemes Security’s removal of it.

    That way, I would be assured that iThemes Security wouldn’t overwrite anything with either an update to the settings or plugin version.

    Is an iThemes thing and above my pay grade, sorry.
    I developed the list but don’t work on the iThemes Security team personally. It’s in the works…

    That also worked fine for me, thanks!

    Did all that and still getting 403. The list was already set to off to begin with.

    Cant find any wget code in htaccess.

    Any advice.

Viewing 7 replies - 1 through 7 (of 7 total)
  • The topic ‘HackRepair.com blacklist feature blocking wget for wp-cron’ is closed to new replies.