w3tc htaccess and bullet proof

  • Resolved emexonline777

    (@emexonline777)


    11 years, 1 month ago

    Hi, I installed bullet proof security on my website, but it seems to have an issue with w3tc. I tried to resolve it but cannot seem to, can you please let me know what I’m doing wrong.

    I currently have this message…
    BPS Alert! Your site does not appear to be protected by BulletProof Security
    Go to the Security Modes page and click the Create secure.htaccess File AutoMagic button and Activate Root Folder BulletProof Mode.
    If your site is in Maintenance Mode then your site is protected by BPS and this Alert will remain to remind you to put your site back in BulletProof Mode again.
    If your site is in Default Mode then it is NOT protected by BulletProof Security. Check the BPS Security Status page to view your BPS Security Status information.

    So then I go to the BPS Security Status Page and see this error….
    The htaccess file that is activated in your root folder is:
    BULLETPROOF .49.8 >>>>>>> SECURE .HTACCESS

    ERROR: Either a BPS htaccess file was NOT found in your root folder or you have not activated BulletProof Mode for your Root folder yet, Default Mode is activated, Maintenance Mode is activated or the version of the BPS Pro htaccess file that you are using is not the most current version or the BPS QUERY STRING EXPLOITS code does not exist in your root htaccess file. Please view the Read Me Help button above.

    wp-config.php is NOT htaccess protected by BPS

    √ Deny All protection activated for BPS Master /htaccess folder
    √ Deny All protection activated for /wp-content/bps-backup folder

    The htaccess file that is activated in your wp-admin folder is:
    BULLETPROOF .49.8 WP-ADMIN SECURE .HTACCESS

    So then I go to … Security Modes… and I select…
    Activate Website Root Folder .htaccess Security Mode and I select…
    BulletProof Mode and I activate

    Then I select….
    Activate Website wp-admin Folder .htaccess Security Mode… and I select …. BulletProof Mode and I activate

    Then I get this error….
    W3 Total Cache is activated, but W3TC .htaccess code was NOT found in your root .htaccess file.
    W3TC needs to be redeployed by clicking either the auto-install or deploy buttons. If your root .htaccess file is locked then you need to unlock it to allow W3TC to write its htaccess code to your root htaccess file. Click to Redeploy W3TC.BPS Lock and Unlock buttons are on the htaccess File Editor page.

    So then I go to the htaccess fie editor and I select unlock htaccess file.

    Then I do to Redeploy W3TC and I Save my settings.

    And then things look fine for a moment… I get this…

    The htaccess file that is activated in your root folder is:
    BULLETPROOF .49.8 >>>>>>> SECURE .HTACCESS

    √ wp-config.php is htaccess protected by BPS
    √ php.ini and php5.ini are htaccess protected by BPS

    √ Deny All protection activated for BPS Master /htaccess folder
    √ Deny All protection activated for /wp-content/bps-backup folder

    The htaccess file that is activated in your wp-admin folder is:
    BULLETPROOF .49.8 WP-ADMIN SECURE .HTACCESS

    But then, it starts all over again with the first error again? Will this always be like this where I have to keep resetting it? Is it because I logged out and back in? Or is it because I logged in from a different computer?
    How can this be fixed so I don’t get anymore error messages?

    https://www.ads-software.com/plugins/bulletproof-security/

Viewing 15 replies - 1 through 15 (of 29 total)
  • Plugin Author AITpro

    (@aitpro)

    You can add your W3TC htaccess code to BPS Custom Code to save it permanently and this issue will not continue to happen. See the link below for the steps.

    https://forum.ait-pro.com/forums/topic/installing-w3-total-cache-with-bulletproof-security-pro/#post-12199

    Thread Starter emexonline777

    (@emexonline777)

    Hi, ok the posts give them steps, but but I am not familiar with where to find this?

    1. Copy your W3TC cache code to this BPS Custom Code text box: CUSTOM CODE TOP PHP/PHP.INI HANDLER/CACHE CODE:

    ***where is this?***

    Thread Starter emexonline777

    (@emexonline777)

    I even checked with my web hosting company and they looked for me and they said… I am sorry but I asked a colleague of mine and we are not able to find any cache code related on the server.

    Can you please let me know where to find this code?

    Thank you!

    Plugin Author AITpro

    (@aitpro)

    Maybe you are not using any W3TC cache code and that is why you cannot find it. If you are using W3TC cache code then you could get it from the W3TC plugin options/settings page.

    In the BPS plugin you would go to the Custom Code tab page to add custom code or W3TC cache code.

    Thread Starter emexonline777

    (@emexonline777)

    I’m looking in the W3TC plugin General Settings… where is it in there? I’m looking but I don’t know where to look.

    If there wasn’t cache code, then why will I be getting the errors listed above?

    Can tell me where I might find the code in W3TC General Settings?

    I see where you are saying I need to put the code, I just can’t find the code to put it. But I imagine I would have code because BPS is giving me the error… if there’s no code then what do I do about the errors above?

    Please let me know…

    Also, does the pro version prevent Maleware? If so I may upgrade to pro if I can get this resolved.

    Plugin Author AITpro

    (@aitpro)

    I’m not sure where the cache code is in W3TC sorry. Another approach is to do this.

    1. Go to BPS Custom Code and copy this: # W3TC into this BPS Custom Code text box: CUSTOM CODE TOP PHP/PHP.INI HANDLER/CACHE CODE:
    2. Click the Save Root Custom Code button.
    3. Go to the BPS Security Modes page, click the Create secure.htaccess File AutoMagic button and activate Root folder BulletProof Mode again.

    Malware/Spyware/Adware are computer virus things. BPS Pro is strictly website security.

    Thread Starter emexonline777

    (@emexonline777)

    Ok, well, that worked for … the shop subite, but for some reason I got an error message when I tried it on the main site…

    Warning: Cannot modify header information – headers already sent by (output started at /home/theherbh/public_html/wp-settings.php:3) in /home/theherbh/public_html/wp-includes/pluggable.php on line 896

    I just went back and then made the .htaccess and then got this…
    HUD Check: PHP/php.ini handler htaccess code check
    PHP/php.ini handler htaccess code was found in your root .htaccess file, but was NOT found in BPS Custom Code.
    It is recommended that you copy your PHP/php.ini handler htaccess code in your root htaccess file to BPS Custom Code.
    Click Here for instructions on how to copy your PHP/php.ini handler htaccess code to BPS Custom Code.
    To Dismiss this Notice click the Dismiss Notice link below. To Dismiss this Notice click the Dismiss Notice link below. To Reset Dismiss Notices click the Reset/Recheck Dismiss Notices button on the Security Status page.
    Dismiss Notice

    Not sure why I got the first error, do you?

    Thread Starter emexonline777

    (@emexonline777)

    So then, I contacted my hosting company, they gave me this Handler info

    # SITE5 PHPINI CODE
    AddHandler application/x-httpd-php53 .php

    But then when I clicked to add custom content, this error still came, so I can’t get this to work on the main site?

    Warning: Cannot modify header information – headers already sent by (output started at /home/theherbh/public_html/wp-settings.php:3) in /home/theherbh/public_html/wp-includes/pluggable.php on line 896

    Any idea?

    I’d like to put BPS on all my sites, but I need to be sure that I can get it to work. This is my largest site, so all the others should be easier I hope.

    Thread Starter emexonline777

    (@emexonline777)

    Now, I get other errors on the subsite, the shop site

    FTP credentials don’t allow to write to file /home/theherbh/public_html/shop.theherbhouseonline.com/.htaccess

    W3 Total Cache Error: Files and directories could not be automatically created to complete the installation.
    Please execute commands manually
    or use FTP form to allow W3 Total Cache make it automatically.

    Thread Starter emexonline777

    (@emexonline777)

    Oh no!!! I just deactivated BPS and got the error again.

    How can I change my setting back to before I did this? its messing up my site… please help!!!!

    Plugin Author AITpro

    (@aitpro)

    FTP to your website and delete the root and wp-admin .htaccess files. Then log back into your site and correct the issues/problems.

    Plugin Author AITpro

    (@aitpro)

    I’m not really sure what your “main site” and “subsite” means or how they are related to each other or if they are Network/Mulsite sites, etc etc etc??? So I cannot really offer much help until I understand what your sites are, how they are related to each other and any clues to what you are doing wrong would also be helpful. So add as much detail as you can so that I understand what you are doing first.

    Thread Starter emexonline777

    (@emexonline777)

    Hi,

    Thank you for getting back to me… I really appreciate it.

    I really need to get this resolved because the I’m supposed to train my client how to use the site on Friday, I’ve been building it for onver 6 months. This was the last plugin I was putting on the site to keep it secure. now I’m in a panic cause I don’t know what to do to get things back to working.

    I have main website… say…
    main.com and a subsite under than which is shop.site.com

    So here’s what I did… ron both the main site and shop site I renamed put the .htaccess files (the only problem is that I dont’ know if I had thee files previously…. so now I don’t know what to do.

    So then I went to the BPS Custom Code section and deleted all this
    # W3TC

    # SITE5 PHPINI CODE
    AddHandler application/x-httpd-php53 .php

    Then I deactivated the BPS, but I am still getting the same error message (which I never had before)

    So I contacted my theme people and they said…
    Sounds like the plugin modified the output in a few key sections of the WordPress files and is now no longer sending content in the correct order to the browser

    So… besides the .htaccess files… what else does the plugin do to the files?

    I am still getting this error message and I never had it before!!! Please help!!!

    Warning: Cannot modify header information – headers already sent by (output started at /home/theherbh/public_html/wp-settings.php:3) in /home/theherbh/public_html/wp-includes/pluggable.php on line 896

    Plugin Author AITpro

    (@aitpro)

    BPS only adds 2 files on your website (a root .htaccess file and a wp-admin .htaccess file) and creates database tables that BPS uses. These databases tables are only used for BPS and do not affect anything else. BPS does not modify any other files on your website.

    What I recommend is complete BPS removal for now and if at a later time you want to figure this out then do it later when you are not in a rush.

    BPS removal steps:

    1. Activate Default Mode on the Security Modes page.
    2. Use the Delete wp-admin .htaccess feature on the Security Modes page.
    3. Deactivate and delete BPS on the WP Plugins page.
    4. Go to WordPress Settings >>> Permalinks and resave your Permalink Settings.

    Unable to login into your website:

    1. Use FTP or your Web Host Control Panel File Manager and delete the .htaccess file in your website root folder and the .htaccess file in your wp-admin folder.
    2. Log into your website, click the BPS AutoMagic Buttons and Activate all BulletProof Modes. Or if you are removing BPS do steps 3 and 4 under BPS removal steps.

    Thread Starter emexonline777

    (@emexonline777)

    OK, it looks like the latest version of w3tc is giving problems… I will see if I can get a fix from them. If I can I will come back to this. Looks like other security plugins are also having a w3tc conflict with the new version as well. I will wait and see if I can get a forum answer from w3tc. If I can I will try to get them both to work together as I would really like to use both plugins because they really make a difference. If not I will have to uninstall.

    Thank you for you time and help! I really really appreciate you getting back to me! Actually your help makes me want to get the pro version just cause of all your help!

    Let me try to get w3tc resolved. I hope to be back with good news and finally getting both to work.

    Thanks!

Viewing 15 replies - 1 through 15 (of 29 total)
  • The topic ‘w3tc htaccess and bullet proof’ is closed to new replies.