Ninja Firewall blocking Admin user uploads

  • Resolved gstark

    (@gstark)


    8 years, 12 months ago

    I have a multi site setup with Ninja Firewall, and it’s mostly working very well.

    My understanding is that, as the admin user (I am the only user on these sites) I should be able to upload files to my sites, regardless of the policy settings for the firewall.

    However, I find that my uploads are being blocked, with an entry on the firewall logs to that effect. If I enable uploads in the policy settings, all is good, but I’m wondering as to what is going on here.

    Thanks in advance for your help.

    https://www.ads-software.com/plugins/ninjafirewall/

Viewing 3 replies - 16 through 18 (of 18 total)

  • In my case, the multisite – when I am logged in as superadmin in a child site, my uploads have non-descriptive error.

    In ninja settings Uploads Allowed is enabled, with sanitize filenames.
    In firewall log, the uploads entries shown as allowed, so technically no error should be there. But WordPress UI fails to upload my simple,safe png images.

    I disable firewall – and uploads work fine on child site.

    I thought if “Uploads Allowed” is set, then uploads should always be allowed.
    So what going on here?

    Plugin Author nintechnet

    (@nintechnet)

    The admin/superadmin should not be blocked, regardless of the settings. If uploads are allowed, then anyone can upload a file. There is a conflict, that is the reason why there is nothing in the log.

    Do you see any warning/error message in the firewall “Overview” page?
    Can you export your configuration and send it to contact at nintechnet dot com?
    1. Download this script: https://nintechnet.com/share/wp-export.txt
    2. Rename this file to “wp-export.php”.
    3. Upload it into your WordPress root folder.
    4. Go to https://YOUR WEBSITE/wp-export.php
    5. Delete the script afterward.

    Private information such as notification email address, brute-force protection password hashes etc will not be exported.

    Plugin Author nintechnet

    (@nintechnet)

    I did not find anything wrong with your configuration.

    So now its working all good. But I do not know how.
    All my ithemes security settings are same!

    Maybe it removed/added rules to your .htaccess when you enabled/disabled it.

    When NinjaFirewall blocks a request, it will always write to its log.
    If there is nothing in the log, that means it can be a conflict with another plugin (e.g., a rule in your .htaccess etc) that blocked the request. The best thing to do if it happened again would be to download and check your HTTP access and error logs, that would show you which HTTP request was blocked.

Viewing 3 replies - 16 through 18 (of 18 total)
  • The topic ‘Ninja Firewall blocking Admin user uploads’ is closed to new replies.