atdblog

Hey Paul. Thanks for the quick response.

You didn’t mention the Bad Behavior plugin. Does your plugin provide similar protection or totally different animal? If different, do they play nice together?

Thanks!

Can I assume that if I don’t use your caching functionality until the WP-Touch issue is resolved, I can run the rest of Wordfence and W3 Total Cache together?

No replies? Guess I’ll remove it.

I’ll take an answer from anyone. Is anyone else having this issue?

I meant to say that Wordfence with Falcon tests faster than W3TC and Bad Behavior. And that’s with keeping all of my WP hardening statements, bad bots blocking, and preventing hotlinking statements in .htaccess in addition to the statements added at the top of .htaccess by Wordfence.

Would I see any benefit blocking them by that url? Something like:

# REDIRECT SPAMMER ATTACKS TO BOGUS SITE
<IfModule mod_rewrite.c>
RewriteCond %{QUERY_STRING} node
RewriteRule ^/?$ https://www.nixbla.com/ [R=301,L]
RewriteCond %{QUERY_STRING} 1
RewriteRule ^/?$ https://www.nixbla.com/ [R=301,L]
RewriteCond %{QUERY_STRING} 17
RewriteRule ^/?$ https://www.nixbla.com/ [R=301,L]
</IfModule>

Not sure if that directory “1” statement would work.

Mine is set at the default WP permissions. I think every article I’ve seen on permissions says “start with the lowest then increase it”. Unfortunately, without examples of permission settings I can’t move forward on that.

I did not find a directory that displays the listing but the scan message still says “Directory indexing is turned on.” I used Agent Ransack to search my site source code for “+Indexes” but no results.

Same here. It appears to be hiding but every time I change it I get several failed login attempts at the new location.

Same here. Changed the login page via Lockdown WP Admin and got two failed login attempts yesterday from Ukraine ip addresses. I changed the login page again last night and had two more failed login attempts today from Ukraine ip addresses. Random usernames: gjdlxmwo, Jesweaste, and JuniorBons twice.

I’ll take an answer from anyone on this question. Before or after the WP rules in htaccess? I seems to work fine either way but I want to do what’s correct.

Hope you don’t mind this related question. I’m finding conflicting answers on this. Should the blocking code you reference at perishable, also found in many other sites, be added in htaccess before or after the wordpress rules? Some argue they should be after so they don’t break WP related rules. Some argue they should be before because you want to block bots before anything else occurs. Thoughts?

This seems to have stopped occurring. Not sure why but I’ll consider it resolved unless it starts up again.

This is still an issue for me. Does anyone have a possible solution?

Thanks for the reply. I tried it both ways and found interesting results at Pingdom.

With the statements from the thomasgriffin.io link Pingdom rated my home page Performance Grade 93/100, Load Time 1.14s, and faster than 87% of tested sites.

With your statements Pingdom’s results were lower, Performance Grade 88/100, Load Time 2.15s, and faster than 68% of tested sites.

Returned to the original statements and it returned to 93/100. I’m sure you can explain it better than me but I’m assuming it has to do with longer expiration times.

Thanks again for supporting Quick Cache!

Found the answer in https://www.ads-software.com/support/topic/disqus-disappeared?replies=19.

Enabled in Disqus settings and emptied the W3TC cache.