How to Allowlist this?

Hi @danielx147, thanks for your message.

I may need to check whether the “/wp-content/themes/rehub/functions/rhpostviewcounter.php” file accepts the “ID” POST parameter that the “/rehub-ajax.php” file accepts because that’d be the easier one to add to the allowlist. I say this because rehub-ajax may have been relocated as per those instructions. If you have, you could add:

• URL: /rehub-ajax.php (alter path if this file isn’t in root)
• Param Type: POST Body
• Param Name: ID

You could also try swapping in /wp-content/themes/rehub/functions/rhpostviewcounter.php as the URL in case this also accepts the ID parameter as discussed above.

Learning Mode might help, although the firewall is usually in this mode by default for 7 days after installation so I’d have expected this to be allowlisted already if that method was going to work.

From the Wordfence Dashboard click on Manage WAF. Then you will see Basic Firewall Options > Web Application Firewall Status. Change the option to Learning Mode. Now perform actions such as viewing pages that trigger the counter script(s). This will help Wordfence learn that these actions are normal and it will allow them in the future. After you have finished performing the actions, switch the WAF from Learning Mode back to Enabled and Protecting. Now test to see if these actions work correctly.

Let me know how you get on!

Thanks,

Peter.

Hey!
I try to switch to Learning Mode but it does not help.

Hi @danielx147,

How did the manual URL/Param Type/Param Name change in Wordfence > All Options > Allowlisted URLs go for you?

Thanks,

Peter.

Hey.
this is the file
https://pastebin.com/9a14WdWh
what should I do now?

thanks

Hi @danielx147,

It appears the pastebin link was removed by the site, so I’m not sure if it contained some sensitive information or perhaps an issue with the code within the file.

Did you add the param manually as instructed? Feel free to show me screenshots of what you’ve added using a service like Snipboard. That may help us discover whether things are added correctly or aren’t working based on the information we’ve been given in the setup documentation.

Thanks,

Peter.