• Resolved maremmaonline

    (@maremmaonline)


    Hi, I’ve applied all you advices and also what it’s adviced on this forum, but I stille get Error: the firewall is not loaded.

    I have a WP NameCheap hosting accont. I’ve applied your check file, result is:
    NinjaFirewall (WP edition) troubleshooter

    HTTP server : Apache
    PHP version : 5.4.45
    PHP SAPI : CGI-FCGI

    auto_prepend_file : none
    NinjaFirewall detection : NinjaFirewall is not loaded

    Loaded INI file : /opt/alt/php54/etc/php.ini
    user_ini.filename : .user.ini
    user_ini.cache_ttl : 300 seconds
    User PHP INI : none found

    DOCUMENT_ROOT : /home/xmodrjgy/public_html
    wp-config.php : found in /home/xmodrjgy/public_html/wp-config.php
    ABSPATH : /home/xmodrjgy/public_html/
    WordPress version : 4.1.7
    WP_CONTENT_DIR : /home/xmodrjgy/public_html/wp-content
    Plugins directory : /home/xmodrjgy/public_html/wp-content/plugins

    I’ve waited a lot of time more than five minutes, but without any better result. I’ve tried both with/without php.ini and user.ini; if I try with php.ini result is that Ninjafirewall’s control panel hangs on “enought chitchat,let’s go” and it’s not possible to go on; it’s only possible go on with user.ini, but it seems then that firewall is not loaded.

    On namechep’s assistance page https://www.namecheap.com/support/knowledgebase/article.aspx/9310/2219/suphp-directive-for-phpini-on-shared-servers
    there is this guide:

    SuPHP directive for php.ini on shared servers
    SuPHP (Single user PHP) is a php handler, which executes PHP scripts with the permissions of their owners. It is installed on all our shared servers. Using this option, you can make settings from the chosen php.ini file global for the entire account.
    If php.ini is located in public_html folder, to enable it globally for the hosting account you should add the following configuration directive to .htaccess file:
    <IfModule mod_suphp.c>
    suPHP_ConfigPath /home/USER/public_html
    </IfModule>

    https://www.ads-software.com/plugins/ninjafirewall/

Viewing 15 replies - 1 through 15 (of 18 total)
  • Plugin Author nintechnet

    (@nintechnet)

    Hi,

    User PHP INI : none found

    The script did not find any INI file? You would need to run it again with the PHP INI in the public_html folder. According to Namecheap, it seems you should try first to use a php.ini.

    Regarding suPHP, simply select “Apache + suPHP” when installing NinjaFirewall and it will add the suPHP_ConfigPath to your .htaccess file.

    Thread Starter maremmaonline

    (@maremmaonline)

    Hi, thank you for your answer.
    As I said before, I just tried what you advice me now, however, I did it again.

    Now situation is that NinjaFirewall panel hangs on NEXT STEP, it doesn’t go to the next screen (appling php.ini and Apache+SUPhp).

    Ninjacheck now is as follows:
    HTTP server : Apache
    PHP version : 5.4.45
    PHP SAPI : CGI-FCGI

    auto_prepend_file : none
    NinjaFirewall detection : NinjaFirewall is not loaded

    Loaded INI file : /home/xmodrjgy/public_html/php.ini
    user_ini.filename : .user.ini
    user_ini.cache_ttl : 300 seconds
    User PHP INI : php.ini found –

    DOCUMENT_ROOT : /home/xmodrjgy/public_html
    wp-config.php : found in /home/xmodrjgy/public_html/wp-config.php
    ABSPATH : /home/xmodrjgy/public_html/
    WordPress version : 4.1.7
    WP_CONTENT_DIR : /home/xmodrjgy/public_html/wp-content
    Plugins directory : /home/xmodrjgy/public_html/wp-content/plugins

    htaccess starts with:
    <IfModule mod_suphp.c>
    suPHP_ConfigPath /home/xmodrjgy/public_html
    </IfModule>

    If may be useful, Infpphp() as also, among all, these lines too:

    Server API CGI/FastCGI
    Virtual Directory Support disabled
    Configuration File (php.ini) Path /opt/alt/php54/etc
    Loaded Configuration File /home/xmodrjgy/public_html/php.ini
    Scan this dir for additional .ini files /opt/alt/php54/etc/php.d
    Additional .ini files parsed /opt/alt/php54/etc/php.d/alt_php.ini
    _REQUEST[“page”] NinjaFirewall
    _REQUEST[“nfw_act”] 99
    _REQUEST[“nfwnonce”] 243db3ebb8
    _GET[“page”] NinjaFirewall
    _SERVER[“REQUEST_URI”] /wp-admin/network/admin.php?page=NinjaFirewall&nfw_act=99&nfwnonce=243db3ebb8
    _SERVER[“HTTP_REFERER”] https://xmodular.net/wp-admin/network/admin.php?page=NinjaFirewall
    _SERVER[“QUERY_STRING”] page=NinjaFirewall&nfw_act=99&nfwnonce=243db3ebb8
    _SERVER[“argv”]
    Array
    (
    [0] => page=NinjaFirewall&nfw_act=99&nfwnonce=243db3ebb8
    )
    _ENV[“HTTP_REFERER”] https://xmodular.net/wp-admin/network/admin.php?page=NinjaFirewall
    _ENV[“QUERY_STRING”] page=NinjaFirewall&nfw_act=99&nfwnonce=243db3ebb8
    _ENV[“REQUEST_URI”] /wp-admin/network/admin.php?page=NinjaFirewall&nfw_act=99&nfwnonce=243db3ebb8

    Plugin Author nintechnet

    (@nintechnet)

    Do you get a blank page after clicking on the “Next Step” button?
    Did you check your error log to see whether there was some useful information about a potential error (mostly PHP error)?

    Thread Starter maremmaonline

    (@maremmaonline)

    Hi, after clicking “Next step” simply hangs there, doesn’t go on. If I switch to user.ini, goes on, but answers that NF is not installed.

    I don’t find any error log in logs directory, but may be I’m not checking the right place, do you know if have I to check any other directory?

    Plugin Author nintechnet

    (@nintechnet)

    If you have cPanel, you can find them in the “Logs” section (Raw access logs and Error logs).
    In addition, you can check in your public_html folder for the PHP error log (error_log).

    Thread Starter maremmaonline

    (@maremmaonline)

    These are all errors in last days, I think these are all about that server was under attack. However, I don’s any error today or yesterday; last one is on09.11.2015:

    [08-Sep-2015 09:47:50 UTC] PHP Fatal error: Allowed memory size of 134217728 bytes exhausted (tried to allocate 5121192 bytes) in /home/xmodrjgy/public_html/wp-includes/wp-db.php on line 2799
    [09-Sep-2015 14:03:24 UTC] PHP Fatal error: Allowed memory size of 134217728 bytes exhausted (tried to allocate 10699405 bytes) in /home/xmodrjgy/public_html/wp-includes/wp-db.php on line 1081
    [10-Sep-2015 18:32:09 UTC] PHP Fatal error: Allowed memory size of 134217728 bytes exhausted (tried to allocate 4356838 bytes) in /home/xmodrjgy/public_html/wp-includes/wp-db.php on line 2802
    [11-Sep-2015 17:42:56 UTC] PHP Fatal error: Allowed memory size of 134217728 bytes exhausted (tried to allocate 5499959 bytes) in /home/xmodrjgy/public_html/wp-includes/wp-db.php on line 1158

    Plugin Author nintechnet

    (@nintechnet)

    It seems that Namecheap lets you use different versions of PHP. Maybe you could try to contact their support and ask them to check your current PHP settings to ensure there is no problem with it?

    Thread Starter maremmaonline

    (@maremmaonline)

    Yes I can change php version choosing among:
    5.2-5.3-5.4-5.5-5.6-7.0 actually is 5.4.45, tell me if you need any info read from PHPINFO(). Which version do you prefer I switch to? It’s faster to switch php version than ask to check installation, almost shure they answer there is no installation problem because wordpress is running…

    Plugin Author nintechnet

    (@nintechnet)

    Any version from 5.4 will do, but I am not sure that will solve your proble .You can still try though.
    That’s why you should probably ask your host why does it hang when the “php.ini” is created and if there are anything in the server error logs. “.user.ini” does not seem to be compatible with your server.

    Thread Starter maremmaonline

    (@maremmaonline)

    I’ve tried to switch on PHP version until 7.0, this last one gives problems with wordpress in generale, so now I’m using 5.6.12. It hangs on the same point, I mean, it tries to change to next page but after a while stands on the page with NEXT
    Here is what displays PHPinfo():

    PHP Version 5.6.12

    System Linux premium4.web-hosting.com 2.6.32-531.11.2.lve1.2.55.el6.x86_64 #1 SMP Fri Apr 18 09:06:31 EDT 2014 x86_64
    Build Date Aug 8 2015 22:10:42
    Configure Command ‘./configure’ ‘–build=x86_64-redhat-linux-gnu’ ‘–host=x86_64-redhat-linux-gnu’ ‘–target=x86_64-redhat-linux-gnu’ ‘–program-prefix=’ ‘–prefix=/opt/alt/php56’ ‘–exec-prefix=/opt/alt/php56’ ‘–bindir=/opt/alt/php56/usr/bin’ ‘–sbindir=/opt/alt/php56/usr/sbin’ ‘–sysconfdir=/opt/alt/php56/etc’ ‘–datadir=/opt/alt/php56/usr/share’ ‘–includedir=/opt/alt/php56/usr/include’ ‘–libdir=/opt/alt/php56/usr/lib64’ ‘–libexecdir=/opt/alt/php56/usr/libexec’ ‘–localstatedir=/var’ ‘–with-curl=/opt/alt/curlssl/usr’ ‘–sharedstatedir=/usr/com’ ‘–mandir=/opt/alt/php56/usr/share/man’ ‘–infodir=/opt/alt/php56/usr/share/info’ ‘–cache-file=../config.cache’ ‘–with-libdir=lib64’ ‘–with-config-file-path=/opt/alt/php56/etc’ ‘–with-config-file-scan-dir=/opt/alt/php56/etc/php.d’ ‘–disable-debug’ ‘–with-pic’ ‘–disable-rpath’ ‘–without-pear’ ‘–with-bz2’ ‘–with-exec-dir=/usr/bin’ ‘–with-freetype-dir=/usr’ ‘–with-png-dir=/usr’ ‘–with-xpm-dir=/usr’ ‘–enable-gd-native-ttf’ ‘–with-t1lib=/opt/alt/t1lib/usr’ ‘–without-gdbm’ ‘–with-gettext’ ‘–with-gmp’ ‘–with-iconv’ ‘–with-jpeg-dir=/usr’ ‘–with-openssl’ ‘–with-pcre-regex=/opt/alt/pcre/usr’ ‘–with-zlib’ ‘–with-layout=GNU’ ‘–enable-exif’ ‘–enable-ftp’ ‘–enable-sockets=shared’ ‘–enable-sysvsem=shared’ ‘–enable-sysvshm=shared’ ‘–enable-sysvmsg=shared’ ‘–with-kerberos’ ‘–enable-shmop’ ‘–enable-calendar’ ‘–with-libxml-dir=/opt/alt/libxml2/usr’ ‘–enable-xml’ ‘–with-mcrypt=shared,/usr’ ‘–with-tidy=shared,/usr’ ‘–with-readline’ ‘–with-mhash’ ‘–enable-dbx=shared’ ‘–with-zlib-dir=/usr’ ‘–enable-opcache’ ‘–with-mssql=shared,/opt/alt/freetds/usr’ ‘–with-pdo-dblib=shared,/opt/alt/freetds/usr’ ‘–with-interbase=shared,/opt/alt/firebird/usr’ ‘–with-pdo-firebird=shared,/opt/alt/firebird/usr’ ‘–enable-phpdbg’ ‘–enable-force-cgi-redirect’ ‘–enable-pcntl’ ‘–with-imap=shared’ ‘–with-imap-ssl’ ‘–enable-mbstring=shared’ ‘–enable-mbregex’ ‘–with-gd=shared’ ‘–enable-bcmath=shared’ ‘–enable-dba=shared’ ‘–with-db4=/usr’ ‘–with-xmlrpc=shared’ ‘–with-ldap=shared’ ‘–with-ldap-sasl’ ‘–enable-dom=shared’ ‘–with-pgsql=shared’ ‘–enable-wddx=shared’ ‘–with-snmp=shared,/usr’ ‘–enable-soap=shared’ ‘–with-xsl=shared,/usr’ ‘–enable-xmlreader=shared’ ‘–enable-xmlwriter=shared’ ‘–with-icu-dir=/opt/alt/libicu/usr’ ‘–enable-fastcgi’ ‘–enable-pdo=shared’ ‘–with-pdo-odbc=shared,unixODBC,/usr’ ‘–with-pdo-pgsql=shared,/usr’ ‘–with-pdo-sqlite=shared,/opt/alt/sqlite/usr’ ‘–enable-json=shared’ ‘–enable-zip=shared’ ‘–with-pspell=shared’ ‘–enable-phar=shared’ ‘–enable-posix=shared’ ‘–with-unixODBC=shared,/usr’ ‘–enable-fileinfo=shared’ ‘–enable-intl=shared’ ‘–enable-sqlite3=shared,/opt/alt/sqlite/usr’ ‘–with-enchant=shared,/usr’ ‘–with-recode=shared,/usr’ ‘build_alias=x86_64-redhat-linux-gnu’ ‘host_alias=x86_64-redhat-linux-gnu’ ‘target_alias=x86_64-redhat-linux-gnu’ ‘CFLAGS=-O2 ‘-g’ ‘-pipe’ ‘-Wall’ ‘-Wp,-D_FORTIFY_SOURCE=2’ ‘-fexceptions’ ‘-fstack-protector’ ‘–param=ssp-buffer-size=4’ ‘-m64’ ‘-mtune=generic’ ‘-fno-strict-aliasing’ ‘-Wno-pointer-sign” ‘LDFLAGS= ‘-Wl,-rpath=/opt/alt/curlssl/usr/lib64,-rpath=/opt/alt/libssh2/usr/lib64,-rpath=/opt/alt/libxml2/usr/lib64,-rpath=/opt/alt/pcre/usr/lib64,-rpath=/opt/alt/t1lib/usr/lib64,-rpath=/opt/alt/freetds/usr/lib64,-rpath=/opt/alt/sqlite/usr/lib64,-rpath=/opt/alt/libicu/usr/lib64’
    Server API CGI/FastCGI
    Virtual Directory Support disabled
    Configuration File (php.ini) Path /opt/alt/php56/etc
    Loaded Configuration File /home/xmodrjgy/public_html/php.ini
    Scan this dir for additional .ini files /opt/alt/php56/etc/php.d
    Additional .ini files parsed /opt/alt/php56/etc/php.d/alt_php.ini
    PHP API 20131106
    PHP Extension 20131226
    Zend Extension 220131226
    Zend Extension Build API220131226,NTS
    PHP Extension Build API20131226,NTS
    Debug Build no
    Thread Safety disabled
    Zend Signal Handling disabled
    Zend Memory Manager enabled
    Zend Multibyte Support provided by mbstring
    IPv6 Support enabled
    DTrace Support disabled
    Registered PHP Streams https, ftps, compress.zlib, compress.bzip2, php, file, glob, data, http, ftp, phar, zip
    Registered Stream Socket Transports tcp, udp, unix, udg, ssl, sslv3, sslv2, tls, tlsv1.0, tlsv1.1, tlsv1.2
    Registered Stream Filters zlib.*, bzip2.*, convert.iconv.*, string.rot13, string.toupper, string.tolower, string.strip_tags, convert.*, consumed, dechunk, mcrypt.*, mdecrypt.*
    This program makes use of the Zend Scripting Language Engine:
    Zend Engine v2.6.0, Copyright (c) 1998-2015 Zend Technologies

    PHP Variables

    Variable Value
    PHP_SELF /wp-admin/network/admin.php
    _REQUEST[“page”] NinjaFirewall
    _REQUEST[“nfw_act”] 99
    _REQUEST[“nfwnonce”] 055e7f55f8
    _GET[“page”] NinjaFirewall
    _GET[“nfw_act”] 99
    _GET[…]
    _COOKIE[…]
    _SERVER[“SERVER_SOFTWARE”] Apache
    _SERVER[“REQUEST_URI”] /wp-admin/network/admin.php?page=NinjaFirewall&nfw_act=99&nfwnonce=055e7f55f8
    _SERVER[“DOCUMENT_ROOT”] /home/xmodrjgy/public_html
    _SERVER[“GATEWAY_INTERFACE”] CGI/1.1
    _SERVER[“HTTP_ACCEPT”] text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
    _SERVER[“HTTP_ACCEPT_ENCODING”] gzip, deflate, sdch
    _SERVER[“HTTP_ACCEPT_LANGUAGE”] it-IT,it;q=0.8,en-US;q=0.6,en;q=0.4,es;q=0.2
    _SERVER[“HTTP_COOKIE”] sm_at_todo_main_block_cookie=none; sm_at_todo_main_block_cookie=none; PHPSESSID=da8bca7915bf7f37f2bd7af486705044; cookieconsent_dismissed=yes; wp-settings-time-28=1440776578; wp-settings-1=libraryContent%3Dbrowse%26hidetb%3D1%26editor%3Dtinymce%26imgsize%3Dlarge%26dfw_width%3D691%26advImgDetails%3Dshow%26wplink%3D1%26ed_size%3D360%26align%3Dcenter%26urlbutton%3Dcustom%26posts_list_mode%3Dlist; wp-settings-time-1=1441292441; wordpress_test_cookie=WP+Cookie+check; wordpress_fc85ebb71dcc7b0798cc34bf8d0697a3=EnricoXmod%7C1443354782%7CokLoSQIGgKZpvYRwnOCPN74nJavx4ZNchDE7Zsh4RM1%7Cb4cf624b992e39dc328bcfbefabf0f8414fa72e52ead77ce1401f7668bd9a1c7; wordpress_logged_in_fc85ebb71dcc7b0798cc34bf8d0697a3=EnricoXmod%7C1443354782%7CokLoSQIGgKZpvYRwnOCPN74nJavx4ZNchDE7Zsh4RM1%7Cb214f441b11cb630f313841da0a76d4b309da106e21cd3301d24b4caa0cc0e8f; bp-activity-oldestpage=1
    _SERVER[“HTTP_HOST”] xmodular.net
    _SERVER[“HTTP_REFERER”] https://xmodular.net/wp-admin/network/admin.php?page=NinjaFirewall
    _SERVER[“HTTP_UPGRADE_INSECURE_REQUESTS”] 1
    _SERVER[“HTTP_USER_AGENT”] Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36
    _SERVER[“HTTP_X_FORWARDED_FOR”] 93.32.72.142
    _SERVER[“PATH”] /bin:/usr/bin
    _SERVER[“PHPRC”] /home/xmodrjgy/public_html
    _SERVER[“QUERY_STRING”] page=NinjaFirewall&nfw_act=99&nfwnonce=055e7f55f8
    _SERVER[“REDIRECT_STATUS”] 200
    _SERVER[“REMOTE_ADDR”] 93.32.72.142
    _SERVER[“REMOTE_PORT”] 51290
    _SERVER[“REQUEST_METHOD”] GET
    _SERVER[“SCRIPT_FILENAME”] /home/xmodrjgy/public_html/wp-admin/network/admin.php
    _SERVER[“SCRIPT_NAME”] /wp-admin/network/admin.php
    _SERVER[“SERVER_ADDR”] 192.64.112.246
    _SERVER[“SERVER_ADMIN”] [email protected]
    _SERVER[“SERVER_NAME”] xmodular.net
    _SERVER[“SERVER_PORT”] 80
    _SERVER[“SERVER_PROTOCOL”] HTTP/1.1
    _SERVER[“SERVER_SIGNATURE”] no value
    _SERVER[“UNIQUE_ID”] Vfgp1ce8zJwADIy8dlUAAACB
    _SERVER[“PHP_SELF”] /wp-admin/network/admin.php
    _SERVER[“REQUEST_TIME_FLOAT”] 1442326997.1385
    _SERVER[“REQUEST_TIME”] 1442326997
    _SERVER[“argv”]
    Array
    (
    [0] => page=NinjaFirewall&nfw_act=99&nfwnonce=055e7f55f8
    )
    _SERVER[“argc”] 1
    _ENV[“DOCUMENT_ROOT”] /home/xmodrjgy/public_html
    _ENV[“GATEWAY_INTERFACE”] CGI/1.1
    _ENV[“HTTP_ACCEPT”] text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
    _ENV[“HTTP_ACCEPT_ENCODING”] gzip, deflate, sdch
    _ENV[“HTTP_ACCEPT_LANGUAGE”] it-IT,it;q=0.8,en-US;q=0.6,en;q=0.4,es;q=0.2
    _ENV[“HTTP_COOKIE”] sm_at_todo_main_block_cookie=none; sm_at_todo_main_block_cookie=none; PHPSESSID=da8bca7915bf7f37f2bd7af486705044; cookieconsent_dismissed=yes; wp-settings-time-28=1440776578; wp-settings-1=libraryContent%3Dbrowse%26hidetb%3D1%26editor%3Dtinymce%26imgsize%3Dlarge%26dfw_width%3D691%26advImgDetails%3Dshow%26wplink%3D1%26ed_size%3D360%26align%3Dcenter%26urlbutton%3Dcustom%26posts_list_mode%3Dlist; wp-settings-time-1=1441292441; wordpress_test_cookie=WP+Cookie+check; wordpress_fc85ebb71dcc7b0798cc34bf8d0697a3=EnricoXmod%7C1443354782%7CokLoSQIGgKZpvYRwnOCPN74nJavx4ZNchDE7Zsh4RM1%7Cb4cf624b992e39dc328bcfbefabf0f8414fa72e52ead77ce1401f7668bd9a1c7; wordpress_logged_in_fc85ebb71dcc7b0798cc34bf8d0697a3=EnricoXmod%7C1443354782%7CokLoSQIGgKZpvYRwnOCPN74nJavx4ZNchDE7Zsh4RM1%7Cb214f441b11cb630f313841da0a76d4b309da106e21cd3301d24b4caa0cc0e8f; bp-activity-oldestpage=1
    _ENV[“HTTP_HOST”] xmodular.net
    _ENV[“HTTP_REFERER”] https://xmodular.net/wp-admin/network/admin.php?page=NinjaFirewall
    _ENV[“HTTP_UPGRADE_INSECURE_REQUESTS”] 1
    _ENV[“HTTP_USER_AGENT”] Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36
    _ENV[“HTTP_X_FORWARDED_FOR”] 93.32.72.142
    _ENV[“PATH”] /bin:/usr/bin
    _ENV[“PHPRC”] /home/xmodrjgy/public_html
    _ENV[“QUERY_STRING”] page=NinjaFirewall&nfw_act=99&nfwnonce=055e7f55f8
    _ENV[“REDIRECT_STATUS”] 200
    _ENV[“REMOTE_ADDR”] 93.32.72.142
    _ENV[“REMOTE_PORT”] 51290
    _ENV[“REQUEST_METHOD”] GET
    _ENV[“REQUEST_URI”] /wp-admin/network/admin.php?page=NinjaFirewall&nfw_act=99&nfwnonce=055e7f55f8
    _ENV[“SCRIPT_FILENAME”] /home/xmodrjgy/public_html/wp-admin/network/admin.php
    _ENV[“SCRIPT_NAME”] /wp-admin/network/admin.php
    _ENV[“SERVER_ADDR”] 192.64.112.246
    _ENV[“SERVER_ADMIN”] [email protected]
    _ENV[“SERVER_NAME”] xmodular.net
    _ENV[“SERVER_PORT”] 80
    _ENV[“SERVER_PROTOCOL”] HTTP/1.1
    _ENV[“SERVER_SIGNATURE”] no value
    _ENV[“SERVER_SOFTWARE”] Apache
    _ENV[“UNIQUE_ID”] Vfgp1ce8zJwADIy8dlUAAACB

    Thread Starter maremmaonline

    (@maremmaonline)

    Hi, here is what Namecheap answered:
    ———————————————————————-
    We would like to inform you that it is possible to check PHP error logs for your site in error_logs file that is located in document rule for the domain name (public_html folder for xmodular.net domain name).

    Also as we can see there is some mod_security rule that has been triggered and it can result in blocks for your plugin.
    We installed a Mod_Security for increasing the security of our servers. It is an Apache module which works as a web application firewall. It blocks known exploits and provides protection from a range of attacks against web applications. Its activity may cause such issues from time to time, when requests sent to the server match with mod_sec rules. Sometimes such requests are false-positive.

    If you do not mind we can whitelist the rule and you will be able to check whether it will solve the issue.
    ————————————————————————–

    So, ha ve I to ask to deactivate this mod_security apache module?

    I have checked again the error log file that Namecheap confirms to be the right one, here are last 2 errors, they seems related with the activity of Wordfence:

    [13-Sep-2015 11:52:23 UTC] PHP Fatal error: Uncaught exception ‘phpmailerException’ with message ‘Invalid address: ‘ in /home/xmodrjgy/public_html/wp-includes/class-phpmailer.php:797
    Stack trace:
    #0 /home/xmodrjgy/public_html/wp-content/plugins/easy-wp-smtp/easy-wp-smtp.php(131): PHPMailer->setFrom(NULL, NULL)
    #1 [internal function]: swpsmtp_init_smtp(Object(PHPMailer))
    #2 /home/xmodrjgy/public_html/wp-includes/plugin.php(571): call_user_func_array(‘swpsmtp_init_sm…’, Array)
    #3 /home/xmodrjgy/public_html/wp-includes/pluggable.php(519): do_action_ref_array(‘phpmailer_init’, Array)
    #4 /home/xmodrjgy/public_html/wp-content/plugins/wordfence/lib/wordfenceClass.php(3318): wp_mail(‘enrico@enricocr…’, ‘[Wordfence Aler…’, ‘This email was …’)
    #5 /home/xmodrjgy/public_html/wp-content/plugins/wordfence/lib/wordfenceClass.php(876): wordfence::alert(‘Admin Login’, ‘A user with use…’, ‘93.49.67.36’)
    #6 [internal function]: wordfence::loginAction(‘EnricoXmod’)
    #7 /home/xmodrjgy/public_html/wp-includes/plugin.php(496): call_user_func_array(‘wordfence::logi.. in /home/xmodrjgy/public_html/wp-includes/class-phpmailer.php on line 797
    [13-Sep-2015 14:23:05 UTC] PHP Fatal error: Uncaught exception ‘phpmailerException’ with message ‘Invalid address: ‘ in /home/xmodrjgy/public_html/wp-includes/class-phpmailer.php:797
    Stack trace:
    #0 /home/xmodrjgy/public_html/wp-content/plugins/easy-wp-smtp/easy-wp-smtp.php(131): PHPMailer->setFrom(NULL, NULL)
    #1 [internal function]: swpsmtp_init_smtp(Object(PHPMailer))
    #2 /home/xmodrjgy/public_html/wp-includes/plugin.php(571): call_user_func_array(‘swpsmtp_init_sm…’, Array)
    #3 /home/xmodrjgy/public_html/wp-includes/pluggable.php(519): do_action_ref_array(‘phpmailer_init’, Array)
    #4 /home/xmodrjgy/public_html/wp-content/plugins/wordfence/lib/wordfenceClass.php(3318): wp_mail(‘enrico@enricocr…’, ‘[Wordfence Aler…’, ‘This email was …’)
    #5 /home/xmodrjgy/public_html/wp-content/plugins/wordfence/lib/wordfenceClass.php(876): wordfence::alert(‘Admin Login’, ‘A user with use…’, ‘93.32.72.142’)
    #6 [internal function]: wordfence::loginAction(‘EnricoXmod’)
    #7 /home/xmodrjgy/public_html/wp-includes/plugin.php(496): call_user_func_array(‘wordfence::logi. in /home/xmodrjgy/public_html/wp-includes/class-phpmailer.php on line 797

    Plugin Author nintechnet

    (@nintechnet)

    There is no error from NinjaFirewall, so that could indeed be due to Modsecurity. You can ask them to disable the rule and then try again.

    Be careful when you post data here (I can see your cookies and nonces in your previous post), as someone could use them to hack into your admin dashboard!

    Thread Starter maremmaonline

    (@maremmaonline)

    OK thanks for security advice, is there now something that I can do to fix this problem with cookies and nonces?
    I ask in the meantime to disable this rule, I will inform you about the result

    Thread Starter maremmaonline

    (@maremmaonline)

    modlook for moderator: please remove my php details that I’ve post by mistake and are a security problem

    Thread Starter maremmaonline

    (@maremmaonline)

    Hi, on Namecheap they whitelisted the Modsecurity rule, I’ve tried again, nothing changes!

Viewing 15 replies - 1 through 15 (of 18 total)
  • The topic ‘Install on Namecheap shared hosting’ is closed to new replies.