Bit51 (part of the iThemes family)

Did it work for you Joy?

Can you please confirm which version of WordPress you’re running?

Also, which option in Better WP Security specifically lead to the issue?

Hi WPS.

Have the .htaccess rules been entered into the .htaccess file in the root of your website?

I’ve had numerous reports that the translation files from pre 3.0 did not work with versions 3.0 and later and so I removed them rather than have folks think they would be getting a complete translation when the download the latest version.

Is that not the case?

Ah ha.

Please make sure the rewrite rules listed in the permalink settings are making it to your .htaccess file.

Did you have existing links that had already been using the old permalinks? WordPress cannot update links that already exist in many places.

Kerfred,

I’ve updated the code in the development version

Lee,

I’m not familiar with Quick Cache however I use Total Cache myself and adding content/w3tc solves the issue (note I’ve renamed wp-content to content). This isn’t the full plugin but the cache directory it creates. If you would like you can contact me on bit51.com and we’ll see if we can’t figure out why that exclusion isn’t working for your site.

This should have been fixed in 3.2.5. Please let me know if you experience any further issues.

I’m sorry to har about this. The nature of the security is that this plugin, and in fact no plugin or other solution, can protect against every attack. If you do in fact determine how they got in please let me know so that I may in fact include a countermeasure in future versions so that others might not have the same issue.

Hi All,

The deny from is indeed a bug introduced due to a formatting change in the statement designed to make it easier for users to read their .htaccess files (a number of folks indicated putting all the ips on one line wasn’t ideal as they couldn’t easily read the statement). The bug should now be fixed in 3.2.6 however I say should as, in over 20 test sites I couldn’t reproduce the problem. That said, please let me know if you encounter the issue anymore with this new release.

Thanks Curtiss. The error has been fixed in 3.2.6

Try logging out and logging back in (assuming you’ve just either installed or updated the plugin). I often see WordPress lose plugin permissions until a fresh login.

It is only actually sending a single email out per notification however note that you can set a different email address for each type of notification (file changes, 404 detection and login limits). The email can be set in the settings of each.

You can restore the default settings by removing the “bit51_bwps_options” key from the options table in your database. All defaults can also be easily viewed in better-wp-security.php in the root of the plugin folder.