Firewall Settings Problem (Basic => Extended)

  • Wordfence will not switch from “Basic WordPress Protection” to “Extended Protection” although setting htaccess and user.ini was successful and phpinfo() indeed reports the correct path to the wordfence-waf.php file in the auto_prepend_file column.

    Furthermore, I could confirm that the wordfence-waf php file is actually prepended (included) to every wordpress page by editing it to output a test message.

    I have traced the problem to the WFWAF_AUTO_PREPEND variable being set to false in wordfence.php line 53, commenting this line out solves the problem but I suppose that is merely symptomatic.

    I have studied the relevant help wiki but could not solve the problem
    (https://docs.wordfence.com/en/Web_Application_Firewall_Setup)
    -> I have waited more than 120 min, so caching is probably not an issue – also, the phpinfo() already lists wordfence-waf.php and it is defintely included into every page (see above)

    -> PHP Version is 5.5.38

    -> User.ini does not contain ini_set(‘output_buffering’, 0);

    I am using the most current version of WordPress (4.7.1) and Wordfence (6.2.10). Server-Environment is Apache FPM/FastCGI.

Viewing 3 replies - 1 through 3 (of 3 total)

  • Hi,
    I can see you confirmed that “auto_prepend_file” is loading “wordfence-waf.php” file from the correct path, could you please double-check paths of the files called inside “wordfence-waf.php” file? “bootstrap.php” and “wflogs” in particular?

    Also, try to disable other plugins installed then re-check this issue and if you can provide your website link that would be helpful.

    Thanks.

    Thread Starter cs1337

    (@cs1337)

    Thank you very much for your feedback!

    I could confirm that echo commands inserted into wp-content/plugins/wordfence/waf/bootstrap.php and wp-content/wflogs/rules.php are being executed.

    I have temporarily deactivated all plugins except for Wordfence and could still not get the Firewall Setting to display anything else than “Basic WordPress Protection”.

    Since the page is still under development, I cannot post it here, but perhaps provide it as pm of some kind.

    Yes, please go to (Wordfence > Tools > Diagnostics) and scroll down the page till “Send Report by Email” and send the report to “alaa [at] wordfence [dot] com”, make sure to include your forum username, I will take a look at this report and let you know my findings.

    Thanks.

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Firewall Settings Problem (Basic => Extended)’ is closed to new replies.