5.5.2 php firewall not working?

  • Resolved IanTh

    (@ianth)


    1 year, 3 months ago

    After the 5.5.2 upgrade I started seeing multiple login attempts on sites that previously had none.

    5.5.2 tells me my xmlrpc setting was disabled – as that feature is now in the php firewall. But it doesn’t appear to be working.

    Last night I manually disabled xmlrpc on all my sites – and this morning no more login attempts.

    The 5.5.2 message regarding disabling these settings is not very clear to me and I don’t see any other documentation.

    Can we look into the xmlrpc disabling? (and improve the explanatory messages?)

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Support hjogiupdraftplus

    (@hjogiupdraftplus)

    Hi @ianth

    PHP 5.2.2 Disables the firewall settings XML RPC Pingback, Forbid proxy comments, deny bad query strings and advanced char and string filter as they are moved to PHP based firewall rules instead .htaccess rules.

    An email has been sent and also dashboard should be showing notice like below image and you can reactivate it again also.

    https://snipboard.io/IFV3TL.jpg

    Regards

    Thread Starter IanTh

    (@ianth)

    Thanks, I saw that message and I understood the xmlrpc protection had been moved to the php firewall.

    What I am saying is that the php firewall protection didn’t work. After several sites upgraded to 5.5.2 they started getting login attempts that they didn’t get before..

    And why deactivate this protection if I have to manually reactivate it again?

    Plugin Support hjogiupdraftplus

    (@hjogiupdraftplus)

    Hi,

    For 5.2.2 when updated it has disabled the xml rpc setting and if you reactivated again it should show 403 forbidden for {siteurl}xmlrpc.php let me know if that is not the case there. It works fine I cross checked.

    The reason it has been disabled for nginx / light speed etc server user where it was enabled and as update started working do not have conflict with other plugin etc.

    Regards

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘5.5.2 php firewall not working?’ is closed to new replies.

Tags