AIOWPS settings on one site blocks images on 3 others and prevent admin log-in

  • Resolved DaveKinskey

    (@davekinskey)


    7 years, 10 months ago

    Hi. I have 5 WP sites on the same hosting account with SiteGround. AIOWPS installed in one site is causing problems with 3 of the other sites. The 3 sites which are affected have the same directory hierarchy. The other 2 sites have different directory hierarchies. All 5 sites are using WP v 4.7.

    Problem 1: Turning on “Whitelisting” on one site is locking out an administrator on another site, even if I add the administrator’s I.P. address to the whitelist.
    Problem 2: Enabling “Prevent Image Hotlinking” on the same site is blocking images from loading on 3 other sites, and blocking images from being seeing the WP Dashboard “Media Library” or when using the visual editing mode to edit pages.

    Site-1: (Not affected by the problem)
    ? Directory hierarchy: /Home/Site-1/ which has AIOWPS installed.
    ? Includes /Home/Site-1/wp-admin, /Home/Site-1/wp-content, /Home/Site-1/wp-includes, and /Home/Site-1/.htacess with AIOWPS encoding

    Site-2: (Problem: When I change AIOWPS settings on this site, it causes problems on Site-3, Site-4 and Site-5)
    ? Directory hierarchy: /Home/public_html/. AIOWPS is installed.
    ? Includes: /Home/public_html/wp-admin, /Home/public_html/wp-content, /Home/public_html/wp-includes, and /Home/public_html/.htaccess with AIOPS encoding

    Site-3:
    ? Problems: When “Whitelisting” is enabled in AIOWPS on Site-2, it locks out an administrator of Site-3 from her WP dashboard Adding administrator’s I.P. address to whitelist on Site 2 has no affect. Also, when Site-2 has “Prevent Hotlinking” enabled, administator of Site 3 is blocked from seeing images when editing pages in visual mode. Just sees missing image icons. Also, background image does not load on site. This site does not use a header image.
    ? Directory hierarchy: /Home/public_html/Site-3, which does NOT have AIOWPS installed
    ? Includes /Home/public_html/Site-3/wp-content, /Home/public_html/Site-3/wp-content, /Home/public_html/Site-3/wp-includes, and /Home/public_html/Site-3/.htaccess

    .htacess file for Site-3 only has the following encoding:
    RewriteOptions inherit
    # BEGIN WordPress
    <IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteBase /
    RewriteRule ^index\.php$ – [L]
    RewriteCond %{REQUEST_FILENAME} !-f
    RewriteCond %{REQUEST_FILENAME} !-d
    RewriteRule . /index.php [L]
    </IfModule>

    # END WordPress
    # compress text, html, javascript, css, xml:
    <IfModule mod_deflate.c>
    AddOutputFilterByType DEFLATE text/plain
    AddOutputFilterByType DEFLATE text/html
    AddOutputFilterByType DEFLATE text/xml
    AddOutputFilterByType DEFLATE text/css
    AddOutputFilterByType DEFLATE application/xml
    AddOutputFilterByType DEFLATE application/xhtml+xml
    AddOutputFilterByType DEFLATE application/rss+xml
    AddOutputFilterByType DEFLATE application/javascript
    AddOutputFilterByType DEFLATE application/x-javascript
    AddType x-font/otf .otf
    AddType x-font/ttf .ttf
    AddType x-font/eot .eot
    AddType x-font/woff .woff
    AddType image/x-icon .ico
    AddType image/png .png
    </IfModule>

    ## EXPIRES CACHING ##
    <IfModule mod_expires.c>
    ExpiresActive On
    ExpiresByType image/jpg “access 1 year”
    ExpiresByType image/jpeg “access 1 year”
    ExpiresByType image/gif “access 1 year”
    ExpiresByType image/png “access 1 year”
    ExpiresByType text/css “access 1 month”
    ExpiresByType application/pdf “access 1 month”
    ExpiresByType text/x-javascript “access 1 month”
    ExpiresByType application/x-shockwave-flash “access 1 month”
    ExpiresByType image/x-icon “access 1 year”
    </IfModule>
    ## EXPIRES CACHING ##

    AddHandler application/x-httpd-php56 .php .php5 .php4 .php3

    <Files 403.shtml>
    order allow,deny
    allow from all
    </Files>

    Site-4 and Site-5 have the same directory hierarchy as Site-3.

    Site-4:
    ? Problem: Loses header image in WP Dashboard and on the website when Site-2 has Prevent Image Hotlinking enabled. Just see missing image icons.
    ? Directory hierarchy: /Home/public_html/Site-5
    ? Site-4 does have AIOWPS installed, but does not have Prevent Image Hotlinking activated.

    Site-5:
    ? Problem: Loses header image when Site-2 has Prevent Image Hotlinking enabled. Just see missing image icon.
    ? Directory hierarchy: /Home/public_html/Site-5
    ? Site-5 does not use AIOWPS.

    • This topic was modified 7 years, 10 months ago by DaveKinskey.
Viewing 8 replies - 1 through 8 (of 8 total)
  • Plugin Contributor mbrsolution

    (@mbrsolution)

    Hi, just before we go any further. I have one question are all the sites sharing the same IP address?

    Thread Starter DaveKinskey

    (@davekinskey)

    Yes, all 5 sites have the same IP address.

    Plugin Contributor mbrsolution

    (@mbrsolution)

    Hi, try the following. Go to WP Security -> Firewall -> Prevent Hotlinks and disable Prevent Hotlinking if you have it active. Then carry out a test.

    If the above does not work then disable all firewall rules and carry out a test. If the images are not blocked in the other sites then we know it is one of the firewall rule causing this.

    Let me know how you go.

    Regards

    Thread Starter DaveKinskey

    (@davekinskey)

    Hi. Thanks for prompt replies.

    Unless I’m misunderstanding you, what you’re requesting is exactly the testing I described in my support request as having already done. I tested repeatedly and identified “Prevent Hotlinking” as the cause of “Problem #2”. Enabling “Prevent Hotlinking” in Site-2 causes the image problems in Site-3, Site-4, and Site-5. As I noted, Site-3 and Site-5 don’t even have AIOWPS installed. Toggling “Prevent Hotlinking” off in Site-2 eliminates the problems in the other 3 sites.

    Also, toggling off “Whitelisting” in Site-2 cures “Problem #1”, which blocks the administrator of Site-3 from accessing her WP Dashboard. Whenever I turn on “Whitelisting” in Site-2, it causes the log-in problem to reappear in Site-3.

    Plugin Contributor mbrsolution

    (@mbrsolution)

    Sorry for missing that vital point in your instructions.

    It looks very challenging your current issue. You might not be able to use those features in the security plugin for now.

    What do you think?

    Thread Starter DaveKinskey

    (@davekinskey)

    Thank you. Please take a look at my detailed notes regarding the directory hierarchy for the 5 sites. I mentioned it in my support request because I wondered if settings made to AIOWPS in Site-2 might be affecting Site-3, Site-4, and Site-5 because of where the WP site installations are located in relation to each other in my hosting account.

    Site-2 is installed in /home/public_html. It is the site I used to open my hosting account. Sites 3, 4, and 5 are add-on domains. They are installed one level lower in the directory hierarchy at:
    /home/public_html/Site-3.com
    /home/public_html/Site-4.com
    /home/public_html/Site-5.com

    I’ve never moved a WordPress installation before, but I’m wondering if the conflicts would be eliminated if Site-2 were moved down a level to a new directory, /home/public_html/Site-2.com, putting it at the same level in directory hierarchy as sites 3, 4, and 5. That would be instead of Site-2’s current location at /home/public_html, which is one step above the others in the directory hierarchy.

    An extra note that might help: Settings changes to AIOWPS made to Site-1 have not had any carry-over affect on sites, 2, 3, 4 or 5. Site-1 is an add-on domain located at a different level in the directory structure at /home/Site-1.com

    • This reply was modified 7 years, 10 months ago by DaveKinskey.
    Plugin Contributor mbrsolution

    (@mbrsolution)

    Hi, you could try that option and see how you go. Here is a link giving wordpress its own directory that will interest you.

    Although it is very strange your issue. I have a similar set up as you have and I have never experienced the issue you are having.

    Thread Starter DaveKinskey

    (@davekinskey)

    Thank you again for you help and quick replies! ?? I’ll see if it looks like I’m up to moving Site-2 without crashing the site. ?? If so, I’ll let you know how it works out.

Viewing 8 replies - 1 through 8 (of 8 total)
  • The topic ‘AIOWPS settings on one site blocks images on 3 others and prevent admin log-in’ is closed to new replies.