Rule 214 false positive

Hi,

You can simply disable that rule from the “Rules Editor” menu.

There have been two other discussions here about this rule:
–Blocks legit page updates by logged in user.
–Question about whitelists and user accounts

I’ll check how to improve it, if possible.

i have a same problem when login by UserPro Plugin

03/Sep/15 04:24:22  #2760771  critical   214  123.18.107.160   POST /wp-admin/admin-ajax.php - SQL injection (alter/create/drop) - [POST:shortcode = [userpro layout="float" collage_per_page="20" emd_paginate_top="1" emd_paginate="1" emd_gender="Gender,radio" emd_country="Search by Country,dropdown" emd_photopreference="Photo Prefe...]
03/Sep/15 04:25:26  #6794876  critical   214  123.18.107.160   POST /wp-admin/admin-ajax.php - SQL injection (alter/create/drop) - [POST:shortcode = [userpro layout="float" collage_per_page="20" emd_paginate_top="1" emd_paginate="1" emd_gender="Gender,radio" emd_country="Search by Country,dropdown" emd_photopreference="Photo Prefe...]

i have a same problem when login by UserPro Plugin

03/Sep/15 04:24:22 #2760771 critical 214 123.18.107.160 POST /wp-admin/admin-ajax.php – SQL injection (alter/create/drop) – [POST:shortcode = [userpro layout=”float” collage_per_page=”20″ emd_paginate_top=”1″ emd_paginate=”1″ emd_gender=”Gender,radio” emd_country=”Search by Country,dropdown” emd_photopreference=”Photo Prefe…]
03/Sep/15 04:25:26 #6794876 critical 214 123.18.107.160 POST /wp-admin/admin-ajax.php – SQL injection (alter/create/drop) – [POST:shortcode = [userpro layout=”float” collage_per_page=”20″ emd_paginate_top=”1″ emd_paginate=”1″ emd_gender=”Gender,radio” emd_country=”Search by Country,dropdown” emd_photopreference=”Photo Prefe…]

Hi,

You can safely disable that rule from the “Rules Editor”.

Thanks,
A small question: Which port does NinjaFirewall use to send mails ?

It uses the WordPress wp_mail() function for most emails.

It also uses the PHP mail() function but only for emails that are sent from the firewall (because WordPress is not loaded when it is running). This applies to:
-File Guard alerts (WP and WP+ editions).
-Web Filter alerts (WP+ edition only).

Thanks,