Cannot edit pages or posts

  • Resolved WebPrezence

    (@webprezence)


    9 years, 3 months ago

    Hey Bruce or Paul, first off, thanks for making this plugin available on the WordPress repo. I realize there are tons of security plugins, but I like performance, and your plugin is lightweight but still effective.

    When updating a page or post, I receive the following error on occasion:

    You were blocked by the WordPress Security Firewall. Something in the URL, Form or Cookie data wasn’t appropriate.

    Warning – You have 9 remaining transgression(s) against this site and then you will be black listed.
    Seriously, stop repeating what you are doing or you will be locked out.

    After looking at the audit trail, I see this notice:

    Page parameter failed firewall check. The offending parameter was “35” with a value of “wp_pro_forum_system/wp_forum_system.php”. Firewall Trigger: WordPress Terms. Firewall Block Response: Visitor connection was killed with wp_die() and a message.

    The only thing is, it’s a multisite installation, my nonprofit organization, and I only use the WP Pro Forum System on one subsite — not the root domain where I am getting these errors. On the root domain, WP Pro Forum System isn’t even activated.

    I’m not sure what to do, but any guidance you could provide would be greatly appreciated.

    Thanks Bruce (or Paul)!

    https://www.ads-software.com/plugins/wp-simple-firewall/

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author Paul

    (@paultgoodchild)

    This plugin doesn’t distinguish between the subsites or the root domain. The problem is that that plugin must be populating the post page with those fields and they’re triggering the ‘WordPress Terms’ firewall block which is matching on “wp_”.

    The WordPress terms filter isn’t enabled by default so you could solve this problem by turning off this block. This is the thing with firewalls, they are generally broad-matching and can catch legitimate cases which you can review in the logs – as you’ve done.

    You could try white listing the parameter (see the FAQ) – so your white list entry would be something like:
    *, 35

    Try that and see how it goes..

    Thread Starter WebPrezence

    (@webprezence)

    Thank you, Paul. That seems to have resolved the issue, as I’m able to edit posts now.

    And thank you for making this lightweight security plugin available on the WordPress repository!

    Plugin Author Paul

    (@paultgoodchild)

    No problem at all… glad you got it working for you!

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Cannot edit pages or posts’ is closed to new replies.