MDD Hosting – No php.ini support

Hi,

Unfortunately, if you cannot use PHP INI there is no way to run NinjaFirewall as it needs to be loaded by PHP before your WordPress blog is loaded.

I just found this thread: https://forums.mddhosting.com/topic/185-phpini-questions

It seems you can add the PHP directives to your .htaccess.
You can try to select ‘Apache + PHP5 module’ during the installation process.

Hi,

I am a bit confused now. I am also on MDD and I installed the plugins a couple of hours ago and blocked requests, debugging mode enabled and disabled. The requests appear in the Firewall log. Does this mean it’s working or is it possible that it doesn’t work?

The php.ini file exists in the root, btw.

Hi,

To test the firewall, you first need to log out of the admin dashboard (because you are whitelisted by default). Then try this:

1) Go to: https:// YOUR_BLOG /index.php?test=hack%00
2) Go to: https:// YOUR_BLOG /wp-admin/index.php?test=hack%00
3) Go to: https:// YOUR_BLOG /wp-content/plugins/index.php

Are you blocked by the firewall or can you access those 3 pages ?

Hi,

1) I could see the website without being blocked.
2) I got a blank page
3) I got redirected to 127.0.0.1

I had to remove my own htaccess rules before I did these tests and I am not sure if they still interfered with them.

Should we continue this thread on this topic https://www.ads-software.com/support/topic/mddhosting-shouldnt-work-but-it-works?replies=1 or continue here?

Those tests were registered on the Firewall Logs btw.

Are you running in debug mode?

You can keep using this thread, it is related to the original post.

Hehehe, stupid.

Do my own htaccess rules interfere with your plugin? I mean when I have a rule to redirect %00 to a 403 page, will your rules come first?

I removed my rules and I got your 403 page with the logo. So I guess it works on MDDHosting with Lightspeed.

I have 6 website and I want to test it well. I don’t have enough time now, but I want to flush the PC and browsers’ caches first to do better tests, because not in all browsers I get the same 403 page.

It also looks like my own rules in the htaccess will come before your plugin rules.

I will also do a test on a site with ‘Apache + PHP5 module’ settings and let you know the results.

Apache rules will come first, but that is not a big deal.

Regarding cache, NinjaFirewall will always prevent your browser (or CDN) to cache its own 403 page.

To be sure the firewall is working well, you can also check the “Overview” page from your dashboard. That page will display any error and warning messages.

On MDDHosting I have tested both Litespeed and ‘Apache + PHP5 module’ System Configuration options and both are working and blocking test hacks. According to me Ninjafirewall works on MDDHosting.

Going to keep a close eye on the logs the coming week.

By default, LiteSpeed requires the PHP directives to be added to the .htaccess using “php_value”. That works exactly like Apache with its PHP5 module. That seems to be the right way to use it with MDDHosting.

So, it doesn’t matter if I use the Litespeed setting or ‘Apache + PHP5 module’? Because the php.ini file is not doing anything anyway on Litespeed?

It looks like the PHP INI is useless on your server, so selecting either LiteSpeed or Apache/PHP5 will create the same .htaccess.

I have very seldom seen Litespeed using php.ini.

To be sure, the first step in setting up the plugin “System configuration” is only to create the htaccess and php.ini lines and not for anything else? So, if I chose Litespeed I don’t need to change it to ‘Apache + PHP5 module’?