WordPress editor blocked

  • Resolved wsoftware

    (@wsoftware)


    8 years, 4 months ago

    When I did a update to your latest version 5.5.4 (from 5.4.3) I discovered that I can’t save the child theme css through the Editor. See the audit trail below.

    I tried to disable the firewall rule “Block SQL Querys” but that did not help. Beside that rule I only have the rules “Block catalogtraverse” and “Block field trancation attacks”. I saw a option on the Whitelist page that you can allow administrators, is that the correct way to go or is there some other solution?

    Audit trail error message: (in swedish)

    Sidans parametrar misslyckades brandv?gg kontroll. Felande parametrar var newcontent med en v?rde av /* Theme Name: Parabola child Description: Author: Peter Wallman Template: parabola (optional values you can add: Theme URI, Author URI, Version) */ @import url(“../parabola/style.css”); /* St?rre text i topmenu */ .topmenu { font-size: 14px; } /* Engelsk ikon i toppmeny */ .topmenu ul li a:before { content: url(/wp-content/uploads/english-flag-20px.png); border: 0; } /* Ej “uppercase” i rubriken. */ #site-title a { text-transform: none; font-weight: normal; } /* Bredare menyboxar */ #access a span { padding: 7px 16px; } /* D?ljer temats credit-line */ #footer2 nav+div { display: none; } /* Centrerar min credit-line */ #myCredit { text-align: center; float: none; clear: both; margin: 5px auto 0; } /* Fet stil p? Captcha-text */ .cptch_block label { font-weight: bold; } /* St?rre knapp p? kontaktformul?ret */ .ufo-cell-center button { width: 100px; height: 30px; font-weight: bold; }. Brandv?gg trigg: Directory Traversal Brandv?gg block svarar: Bes?kare kopplingen d?dades med wp_die() och ett meddelande.

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author Paul

    (@paultgoodchild)

    It’s triggering “Directory Traversal” judging from the audit trail, so you can either temporarily uncheck that option, or enable administrator white list. I’d go with the first.

    But honestly, best practices wouldn’t see you edit directly on the site like that, but instead make the edit and upload it.

    Hope that helps.

    Thread Starter wsoftware

    (@wsoftware)

    Ah, sorry. Now I see it, didn’t read the whole message appently =)

    I like to keep it simple with WordPress css editing and have not always a FTP client in reach. I guess a lot of people do the same through the editor. To disable and enable that rule every time sounds to much work so I will go with the administrator white list. Any obvious downside with that you know about?

    Plugin Author Paul

    (@paultgoodchild)

    It just means that something could get missed somehow. But if you’re careful, you should probably be fine.

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘WordPress editor blocked’ is closed to new replies.