Whitelist Stops Working

  • Resolved mimetic

    (@mimetic)


    8 years, 4 months ago

    The whitelist in Sucuri occasionally stops working, and I cannot predict when.
    When it stops working, then ms-files.php and/or wp-tinymce.php are blocked, and either I cannot upload media, or I cannot edit text in posts!

    When ms-files.php is blocked, I see this error in my PHP error file:
    [01-Nov-2016 00:06:54 UTC] MS_Aq_Resize.process() error: $url parameter is required

    I solve the problem by adding a new whitelist rule that duplicates the ms-files or tineymce rule.

    However, this shouldn’t happen. Just spent 5 hours discovering the problem….

    • This topic was modified 8 years, 4 months ago by mimetic.
Viewing 1 replies (of 1 total)

  • Thanks for the bug report. Please consider to install the development version of the code [1] we have made great improvements to the way the hardening works including a commit that addresses some issues with the whitelisting of these two PHP files. I personally do not recognize the error message that you are seeing when the whitelisting is randomly removed, maybe there is something else in your website that is clearing the content of the access control file. You can try to harden the directory once again and then set the permissions of the file to read-only, this should prevent anything from rewriting the whitelisting rules.

    Marking as resolved, feel free to re-open if the issue persists.

    [1] https://github.com/Sucuri/sucuri-wordpress-plugin

Viewing 1 replies (of 1 total)
  • The topic ‘Whitelist Stops Working’ is closed to new replies.

Tags