request cannot be proceeded. For security reason, it was blocked and logged

  • Resolved awakegal

    (@awakegal)


    6 years, 10 months ago

    I’ve been working on a website changing the featured image on many pages. All of a sudden I get this message when uploading a new image:

    Sorry [my IP Address], your request cannot be proceeded.
    For security reason, it was blocked and logged.

    NinjaFirewall Logo

    If you think that was a mistake, please contact the
    webmaster and enclose the following incident ID: [ #6309765 ]

    The incidents in the Firewall log do not show this incident ID.

    I am the only Administrator and the radio button “Add the Administrator to the white list” is chosen.

    I’ve tried turning off plugins and running again and all the new incident IDs do not match what is in the Firewall log.

    • This topic was modified 6 years, 10 months ago by awakegal.
Viewing 7 replies - 1 through 7 (of 7 total)
  • Plugin Author nintechnet

    (@nintechnet)

    Hi,

    Do you have another instance of NinjaFirewall running in a parent directory? It looks like your site is protected by 2 copies of the firewall.

    Thread Starter awakegal

    (@awakegal)

    Yes.

    In public_html there is the maindomain.com and the folder for dev.maindomain.com

    And, I have 4 other websites folders in the same public_html that have ninjafirewall installed.

    Plugin Author nintechnet

    (@nintechnet)

    You are blocked by the NinjaFirewall installation from the main domain. That’s odd, because it shouldn’t happen normally.
    Your solution is to whitelist all subdomains with the .htninja script.

    1. Create a “.htninja” file in the folder above the “public_html” folder.
    2. Add this code:

    <?php
/*
 +===================================================================+
 | NinjaFirewall optional configuration file                         |
 |                                                                   |
 | See: https://nintechnet.com/ninjafirewall/wp-edition/help/?htninja |
 +===================================================================+
*/
if ( strpos( $_SERVER['SCRIPT_NAME'], '/SUBFOLDER_NAME/') !== FALSE ) {
   return 'ALLOW';
}

    Replace “SUBFOLDER_NAME” with the name of the folder where the subdomain is installed.

    3. Log in to the WP dashboard of the main domain and check the firewall’s “Overview” page. It should be written that it detected the “.htninja” file.
    4. Log in to the WP dashboard of the subdomain. Check the “Overview” page and make sure that there is no reference to the “.htninja”. If it is written that it detected the “.htninja”, that’s not good.
    5. Then try again to change the featured image to make sure that you are not blocked anymore.

    Plugin Author nintechnet

    (@nintechnet)

    Notifications sent by the firewall:
    -NinjaFirewall > Event Notifications: most notifications.
    -NinjaFirewall > File Guard: File Guard notifications.
    -NinjaFirewall > File Check > Scheduled scan report.
    -NinjaFirewall > Updates > Notification: Security rules updates.

    Thread Starter awakegal

    (@awakegal)

    Thank you for the code you posted two weeks ago.

    I ended up uninstalling NF so that I could finish the websiite. Once I moved it to a new cPanel, installed NF again and have not had any problems.

    Very strange though that I didn’t have any issues with NF on the other websites in the subdomain.

    Plugin Author nintechnet

    (@nintechnet)

    Is the firewall log writable? Does it contain at least some lines (blocked threats, events etc)?
    Do you see any error or warning in the firewall’s “Overview” page?

    Plugin Author nintechnet

    (@nintechnet)

    Nothing interesting in the log, unfortunately.

    Are you using the .htninja script? You can see if it is installed and enabled from the firewall “Overview” page:

Viewing 7 replies - 1 through 7 (of 7 total)
  • The topic ‘request cannot be proceeded. For security reason, it was blocked and logged’ is closed to new replies.