Double “Event Notifications” daily for one domain

Do you mean the “Daily Activity Report”?
Can you check your WordPress scheduled tasks with this plugin:
https://www.ads-software.com/plugins/wp-crontrol/
Install and activate it, then go to “Tools > Cron Events”.
Do you see one or more “nfdailyreport” tasks in the “Hook” column?

>> Do you mean the “Daily Activity Report”?
Yes

>> Do you see one or more “nfdailyreport” tasks in the “Hook” column?
I’ve checked it with the WP-Control plugin, but I can see only one “nfdailyreport” task for 00:00:05. It is strange that regardless of this I get the daily report twice a day.

Is there another instance of NinjaFirewall running in a parent directory?

Did you, by mistake, enter twice you email address in the “NinjaFirewall > Event Notifications” page (or 2 different email addresses, but one is redirecting/forwarding to the other one)?

Can you check the email headers. Is there any differences or are they strictly identical (timestamps, from/too/cc/bcc fields etc)?

I’ve checked everything you have asked.

>> Did you, by mistake, enter twice you email address in the “NinjaFirewall >
>> Event Notifications” page (or 2 different email addresses, but one is
>> redirecting/forwarding to the other one)?
No.

>> Can you check the email headers. Is there any differences or are they
>> strictly identical (timestamps, from/too/cc/bcc fields etc)?
No, they are not identical. They have different Message-IDs and also different timestamps. The timestamp difference is 1 second.

>> Is there another instance of NinjaFirewall running in a parent directory?
I’m using “Plesk Obsidian 18.0.27”:
– Hosting packages are organized in “abonnenments”
– An abonnenmet can have multiple domains

I’m using two WordPress installations in an Plesk abonnenment for two diffenrent domains. The two NinjaFirewall configs for PHP look like this:

+++ Config for domain-1.com +++
auto_prepend_file = /var/www/vhosts/domain-1.com/httpdocs/wp-content/nfwlog/ninjafirewall.php

+++ Config for domain-2.com +++
auto_prepend_file = /var/www/vhosts/domain-1.com/domain-2.com/wp-content/nfwlog/ninjafirewall.php

I don’t know, if you can call it “running in a parent directory?”.

Correction:
The timestamp difference of both mails is 33 seconds.

You can try to add this to your php.ini or .user.ini:
mail.add_x_header = On

This will add a header to each email with the full path to the script that sent the email. It can be useful for debugging purposes.

Okay, I’ve added the line: mail.add_x_header = On;

I have to wait for the next daily notification now.

Sorry, adding the line
mail.add_x_header = On
to the php.ini did not change anything.
I still get two daily notifications for the 2nd domain.

It seems, that the only working workaround at the moment is to use a different email address for the 2nd domain.

Maybe one more chance: go to the “Plugins” page, disable NinjaFirewall and re-enable it. That will delete and re-create all scheduled tasks.

If you still receive two notifications, there may be an issue at the WordPress level, because NinjaFirewall has no control over scheduled tasks: it just asks WP to send it and that’s about all.

Maybe one more chance: go to the “Plugins” page, disable NinjaFirewall and re-enable it. That will delete and re-create all scheduled tasks.

Ok, I did it. Now I have to wait. I’ll come back to you with the result.

Sorry for my late response.

Unfortunately also deactivating/reactivating did not help to stop the double sending of daily notifications.

In my case the only working workaround at the moment is to use a different email address for the 2nd domain.

Thanks anyway for your very kind support.

I will check in the next release if we can add some kind of check that will make sure that, if there was a cron issue like yours, NinjaFirewall’s tasks wouldn’t be executed twice or more.