1. The server is running PHP: 5.6.27
2. There is a php.ini file with the requisite prepend line in it
3. There is also a user.ini file with the same line
4. The site is running as an add-on domain under a different domain account
5. The parent domain does not have Wordfence installed
6. There are a couple of other add-on domains running for test purposes, they both display the Wordfence warning message at the top of every dashboard page
7. The configuration page drop-down shows Apache CGi/FastCGI (Recommended based on our tests
8. Going through the process of downloading the two files and continuing does not seem to complete the optimization of the firewall.

Part of me says, just ignore the message and dismiss it; but the other part of me asks if I could be leaving the site somewhat less secure. Is there a way to fix this problem? If so, what is the answer? What is the harm in ignoring the warning message and dismissing it?

The URL is: https://www.keptlight.com

Thank you,

Cemal

So I manually edited the .htaccess and the .user.ini files, using exactly same wording/coding as found in another, identically organized, WordFence installation on another of my WP sites where it works perfectly.

However, even though the 2 key files have been manually adjusted, WordFence still asks to be configured as if nothing has changed.

Both WP installations use the same hosting platform (Unix Apache + suPHP).

So why does one site work perfectly while the other does not?

Thank you for adding the dismiss button to the Wordfence Web Application Firewall configuration. We run Windows IIS servers and have recommend WordFence to our clients. However, now that this message is displaying our client’s don’t understand they should dismiss the message. If they press the continue button their website crashes as there is a conflict with the .htaccess file created by WordFence; additionally, share hosting clients do not have access to a php.ini file.

Please add a server check to automatically dismiss the message on Windows servers as this issue is causing us a lot of issues. Below is a quick write-up.

<?php
$serverType = $_SERVER['SERVER_SOFTWARE'];
if( preg_match( '/^Microsoft.*/', $serverType)) {
    // Do not show firewal configuration message if serverType=Microsoft";
} else {
    //Show firewall configuration message;
}
?>

Windows IIS is still a very widely used web server, this issue must be affecting a lot of users.

I appreciate your consideration,

Ramsey

https://www.ads-software.com/plugins/wordfence/

How to I get all my sites to work with the Application firewall???

https://www.ads-software.com/plugins/wordfence/

Once reaching the upload screen and pressing continue it just goes back to the first installation screen.

So I completed the manual installation instead and restarted the httpd service but it’s still asking me to configure the Wordfence Application Firewall.

I’m also wondering about this file
/var/www/html/wp-content/plugins/wordfence/waf/bootstrap.php, the folder and the file don’t exist. Is it supposed to be created during the installation process that I can’t complete? If so, how is the manual installation process supposed to work?

https://www.ads-software.com/plugins/wordfence/

Not really sure what to do about this. All I need is to be able to edit the form entries.