Firewall on Apache + PHP-FPM hosting

  • Resolved webby1973

    (@webby1973)


    6 years, 5 months ago

    Hello,

    I can’t use anymore the option “Disable Code Execution for Uploads” because suddendly all the images aren’t shown in the browser and apparently it’s because the hoster doesn’t allow CGI execution. I don’t know why/how it worked for years…

    Now I have this doubt: if the hoster is using “Apache + PHP-FPM” which setting is better to optimize the firewall? They don’t allow any “php_*” code inside htaccess, php is not executed as a module.

    Thank you.

Viewing 3 replies - 1 through 3 (of 3 total)

  • Hello @webby1973,

    First off I want to apologize for the delayed response. If this has been working and stopped recently as you mention, I suggest reaching out to your hosting provider and determine what changes on their end have triggered the images to no longer display on your site.

    Every once in while we see a plugin author insert php files into the uploads folder such as images. Typically when this is seen, the plugin will give an error indicating the issue. Deselecting the option restores the functionality.

    Can you please go to Firewall > Manage WAF and tell me how it is configured. Wordfence typically finds the best configuration option for you. In your specific case, the setting is likely set to ‘Apache +CGI’ which is the correct option. Have you had as chance to check out our firewall optimization guide for information about If php.ini has been edited manually but the changes still do not take effect

    Thanks,
    Steve

    Thread Starter webby1973

    (@webby1973)

    Hello Steve,

    my hoster said they dont’ allow CGI execution at all and they don’t provide assistance about that matter.

    Before I deactivated the firewall (and the Uploads folder protection, anyway the hoster said no PHP can be executed in that folder) it was set as Apache + CGI, but I’m wondering if the actual setting “Apache + PHP-FPM” is different.

    So I will activate it again and let you know if it works or if I get any alert.

    Hello!

    I hope we were successful in helping you resolve your issue with Wordfence! Since we have not heard back from you in the past 2 weeks I will now be marking this support thread as resolved. However, if we still haven’t resolved your issue please reach out to us as we would be more than happy to further assist you!

    Thanks and have a great day!
    Chloe

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Firewall on Apache + PHP-FPM hosting’ is closed to new replies.