Activate Full WAF on Hetzner Webhosting with PHP 8

  • Resolved agssl

    (@agssl)


    1 month, 4 weeks ago

    Has anyone managed to activate full WAF on Hetzner with PHP greater than 8? Under PHP 7, it still works with:

    <IfModule mod_php7.c>
   php_value auto_prepend_file […]
</IfModule>

    But with PHP 8 and:

    <IfModule mod_php.c>
   php_value auto_prepend_file […]
</IfModule>

    everything is ignored. It doesn’t matter if it’s through .htaccess, .user.ini, or php.ini.

Viewing 5 replies - 1 through 5 (of 5 total)
  • Plugin Author nintechnet

    (@nintechnet)

    Can you add the directive for PHP 8 to your .htaccess and then run the troubleshooter script:
    https://nintechnet.com/share/wp-check.txt

    Thread Starter agssl

    (@agssl)

    Hey, I just did that. Here’s the relevant part (I masked the paths with […]):

    HTTP server	:	Apache
    PHP version	:	8.2.23
    PHP SAPI	:	CGI-FCGI

    auto_prepend_file	:	none
    .htninja	:	found in […]/.htninja
    wp-config.php	:	found in […]/wp-config.php
    NinjaFirewall detection	:	NinjaFirewall WP Edition is loaded (WordPress WAF mode)

    Loaded INI file	:	/home/httpd/php82-ini/[…]/php.ini
    user_ini.filename	:	none
    user_ini.cache_ttl	:	300 seconds
    User PHP INI	:	php.ini found -
     	 	 
    DOCUMENT_ROOT	:	[…]
    ABSPATH	:	[…]
    WordPress version	:	6.6.2
    WP_CONTENT_DIR	: […]/wp-content
    Plugins directory	:	[…]/wp-content/plugins
    User Role	:	Administrator
    User Capabilities	:	manage_options: OK - unfiltered_html: OK
    Log dir permissions	:	[…]/wp-content/nfwlog dir is writable
    Cache dir permissions	:	[…]/wp-content/nfwlog/cache dir is writable
    Plugin Author nintechnet

    (@nintechnet)

    Can you ask your host how/where to add the PHP auto_prepend_file directive? That’s very odd that it stopped working with PHP 8. Or maybe there’s a new option in your hosting admin panel where you can add the directive?

    Thread Starter agssl

    (@agssl)

    I created a ticket and just received a response that Hetzner can manually set this in the PHP.ini for each account. I also asked if there’s any way to make the change myself, but haven’t received an answer on that yet. Creating a support ticket with Hetzner for each site is a bit tedious. I’ll post an update here once Hetzner gets back to me.

    Thread Starter agssl

    (@agssl)

    I just received the response. Hetzner no longer uses mod_php (at least not from PHP 8 onwards). The setting simply needs to be added without the “IfModule mod_phpX.c” directive ??

    Just write it like

    # BEGIN NinjaFirewall
    php_value auto_prepend_file "[…]/wp-content/nfwlog/ninjafirewall.php"
    # END NinjaFirewall
Viewing 5 replies - 1 through 5 (of 5 total)
  • You must be logged in to reply to this topic.