All URLs ending with index.php blocked by Cerber

  • Resolved critara

    (@critara)


    6 years, 6 months ago

    Traffic inspector is blocking all access to the subfolders’ index.php files.
    However, I have the following htaccess directive:
    <IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteBase /
    RewriteRule ^index\.php$ – [L]
    RewriteCond %{REQUEST_FILENAME} !-f
    RewriteCond %{REQUEST_FILENAME} !-d
    RewriteRule . /index.php [L]
    </IfModule>

    I do not know how tu use REGEX to whitelist all index.php from the Cerber plugin, nor do I know if that is the best solution.

    I found out about this while checking my ANALYTICS. All urls end with index.php and if I checked them in the browser, I was blocked by Cerber’s 403 error page (and my IP is whitelisted!)

    Can you please help me out?

    Thank you in advance!

Viewing 6 replies - 1 through 6 (of 6 total)
  • Thread Starter critara

    (@critara)

    I mean that I do not know if it is better to change the htaccess directive or to whitelist index.php files (non existant files)…

    Plugin Author gioni

    (@gioni)

    Hi! It’s better not to do anything because the plugin doesn’t block access to EXISTING index.php files. Just check if an appropriate index.php file really exists.

    Thread Starter critara

    (@critara)

    They should not exist: it is a WP install configured with pretty urls.

    Thread Starter critara

    (@critara)

    OK, I believe it is a mere problem of Analytics settings: I added “index.php” to the end of the URI as the “default page” in the View configuration, in order to merge results for */ and */index.php of any given page.

    I will keep it as is for the time being. Unless someone has can help me out with this.

    Thank you for replying, anyway.

    Plugin Author gioni

    (@gioni)

    Why should you care about processing non-existing index.php files? You’re just going in the wrong direction. Normally nobody requests an index.php on your website unless either you explicitly make a link to it or it’s a bot/hacker that scans the website for something vulnerable.

    Thread Starter critara

    (@critara)

    Thank you, Gioni, I figured out what the problem was. It’s only relevant to the analytics view settings, as I mentioned above. Thanks for your time and assistance.

Viewing 6 replies - 1 through 6 (of 6 total)
  • The topic ‘All URLs ending with index.php blocked by Cerber’ is closed to new replies.