Wordfence on multisite : plenty of wp_XX_user_roles raws in options table

  • Resolved louisblancho

    (@louisblancho)


    2 years, 4 months ago

    Hello,

    I am using wordfence on wordpress multisite, network activated.
    It’s working very well, but I noticed something unusual : in every subsite wp_XX_options table in database, there is plenty of rows about other subsite with the options name wp_XX_user_roles and in option_value there is information about the different role. (XX represent the site ID)

    for example, in wp_5_options table I will have :
    wp_3_user_roles with the value :

    a:12:{s:13:"administrator";a:2:{s:4:"name";s:13:"Administrator";s:12:"capabilities";a:0:{}}s:6:"editor";a:2:{s:4:"name";s:6:"Editor";s:12:"capabilities";a:0:{}}s:6:"author";a:2:{s:4:"name";s:6:"Author";s:12:"capabilities";a:0:{}}s:11:"contributor";a:2:{s:4:"name";s:11:"Contributor";s:12:"capabilities";a:0:{}}s:10:"subscriber";a:2:{s:4:"name";s:10:"Subscriber";s:12:"capabilities";a:0:{}}s:8:"customer";a:2:{s:4:"name";s:8:"Customer";s:12:"capabilities";a:0:{}}s:12:"shop_manager";a:2:{s:4:"name";s:12:"Shop manager";s:12:"capabilities";a:0:{}}s:10:"translator";a:2:{s:4:"name";s:10:"Translator";s:12:"capabilities";a:0:{}}s:6:"client";a:2:{s:4:"name";s:6:"Client";s:12:"capabilities";a:0:{}}}

    And I will also have wp_4_user_roles with a similar value, wp_2_user_roles … etc and in main site wp_options table, I have all the wp_XX_user_roles for all the subsite.

    How to recreate the issue :

    – Create a multisite and several sub-site, let’s say 10.
    – Install and network activate wordfence. Then wordfence will create all wp_XX_user_roles raws in main wp_options table for every subsite.

    How can I stop wordfence to do this ?
    I guess that’s an option in the settings ? ??

    And, can I safely delete all this rows ?

    Why this is a problem : all this rows are set on “autoload”, so on large multisite networks … that’s a big problem. I have subsite with more than 10mb+ autoloaded content from this tables only.

    Thank you for your help!

Viewing 5 replies - 1 through 5 (of 5 total)
  • Thread Starter louisblancho

    (@louisblancho)

    @wordfence team could you help clarify this ?

    Thanks in advance ??

    Plugin Support wfpeter

    (@wfpeter)

    Hi @louisblancho, thanks for getting in touch.

    Checking on our test multisite, we don’t see extra rows with the wrong site number as you describe here. In our wp_5_options we only see wp_5_user_roles and none for the other sub-site roles. It is possible that another plugin could be interfering, but it’s hard to say from what we can see in your case.

    It may assist us to see further configuration around your site, installed WP plugins etc., so can you send a diagnostic report to wftest @ wordfence . com? You can find the link to do so at the top of the Wordfence > Tools > Diagnostics page. Then click on “Send Report by Email”. Please add your forum username where indicated and respond here after you have sent it.

    NOTE: It should look as follows – Screenshot of Tools > Diagnostic > Send by Email

    Thanks,

    Peter.

    Thread Starter louisblancho

    (@louisblancho)

    Hello peter,

    Yes I am not confirmed yet how those tables get created in subsite wp_XX_options, but I have wp_XX_user_roles in some subsite, but not all wp_XX_user_roles in all subsite. But, if you check in main site wp_options you may have each wp_XX_user_roles for each subsite.

    And if I deactivate wordfence, and activate it again, Then it will re-create wp_XX_user_roles that are missing (for example, if I delete them manually) rows in wp_options. I tried to deactivate all plugin and themes and only keep wordfence, and this is what happen when I deactivate wordfence and then activate it again.

    I am sorry but for security purposes I would prefer not sending you the report.Can we proceed an other way, do you have an idea of where the issue can come from OR something else that I can do / test ?

    Thank you for your help!

    Thread Starter louisblancho

    (@louisblancho)

    I found this in my logs :

    SELECT option_value FROM wp_5_options WHERE option_name = 'icl_sitepress_settings' LIMIT 1 faite par require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('init'), WP_Hook->do_action, WP_Hook->apply_filters, WordfenceLS\\Controller_Permissions->check_role_sync, WordfenceLS\\Controller_Permissions->sync_roles, WordfenceLS\\Controller_Permissions->_wp_roles, WP_Roles->__construct, WP_Roles->for_site, WP_Roles->get_roles_data, get_blog_option, switch_to_blog, do_action('switch_blog'), WP_Hook->do_action, WP_Hook->apply_filters, SitePress->init_settings, get_option

    Thi happen when I activate wordfence, and it’s doing this each and every one of my subsite. I guess sitepress refers to WPML, so somehow wordfence check WPML settings and then construct something .. ?

    Not really sure how to read this, I hope you can help stop it ?? Maybe it’s just a setting inside Wordfence to disable …

    Thank you!

    Thread Starter louisblancho

    (@louisblancho)

    Any update ? ??

    Thank you in advance!

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘Wordfence on multisite : plenty of wp_XX_user_roles raws in options table’ is closed to new replies.