Bart van Maanen

@mfeilen Thanks! You found the culprit. Glad it was a simple bug.

Update broke two sites. How can I restore this or upgrade tot the new API fast?

Sorry, Steve, but suggestion number 1 did the trick. I changed the settings. Thanks!

Hi Shea,

1. https://imgur.com/FhKR2p3
2. https://imgur.com/tpHVFQU
3. https://imgur.com/4h9pPfV
and the last notification / scan results: https://imgur.com/ZUEJDmW

Hope you can work it out.

I reinstalled the plugin after a second notification. Now three files were ‘changed’. If this keeps happening I have to remove the plugin.

Hi Shea, I’ve got 3 screenshots for you:
1. after notification
2. the file now on server
3. the folder on the server

Where can I send them to?

Great, thanks for your swift response!

I’ve got a site that broke. I got the WordPress 5.2-notification and the culprit was Shield Security (versie 16.1.2).

Deactivating brought the site back up. Not in recovery mode anyore this warning turned up:

Fatal error: Uncaught Error: Call to a member function containsRange() on null in /home/xxxx/public_html/site/wp-content/plugins/wp-simple-firewall/src/lib/vendor/fernleafsystems/wordpress-services/src/Utilities/IpUtils.php:43

Other sites that use Shield seem unaffected.

I do still have the issue with V3.2.6. Also, I discovered an issue with the security plugin Shield installed.

I’ve let this problem simmer.
Is it possible that the fact that the WordPress installation is done (in 2008) in a subfolder is the culprit?

When I add the subfolder to the URI I do get the xml file for the comments feed.

• This reply was modified 3 years, 4 months ago by Bart van Maanen.
• This reply was modified 3 years, 4 months ago by Bart van Maanen.

Already tried this a few times, to no avail. F*cking Feedburner.

Okay, I’ve found two htaccess files on the site without the redirection plugin. One (1) is inside the WordPress installation folder, one outside (2).

1:

# BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /wp/
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /FOLDERNAME/index.php [L]
</IfModule>

<IfModule deflate_module>
	<IfModule filter_module>
		AddOutputFilterByType DEFLATE text/plain text/html
		AddOutputFilterByType DEFLATE text/xml application/xml application/xhtml+xml application/xml-dtd
		AddOutputFilterByType DEFLATE application/rdf+xml application/rss+xml application/atom+xml image/svg+xml
		AddOutputFilterByType DEFLATE text/css text/javascript application/javascript application/x-javascript
		AddOutputFilterByType DEFLATE font/otf font/opentype application/font-otf application/x-font-otf
		AddOutputFilterByType DEFLATE font/ttf font/truetype application/font-ttf application/x-font-ttf
	</IfModule>
</IfModule>

# END WordPress

2:

# BEGIN Comet Cache WmVuQ2FjaGU (the WmVuQ2FjaGU marker is required for Comet Cache; do not remove)

# Enable GZIP compression.
<IfModule deflate_module>
  <IfModule filter_module>
    AddOutputFilterByType DEFLATE text/plain text/html
    AddOutputFilterByType DEFLATE text/xml application/xml application/xhtml+xml application/xml-dtd
    AddOutputFilterByType DEFLATE application/rdf+xml application/rss+xml application/atom+xml image/svg+xml
    AddOutputFilterByType DEFLATE text/css text/javascript application/javascript application/x-javascript
    AddOutputFilterByType DEFLATE font/opentype application/font-otf application/x-font-otf
    AddOutputFilterByType DEFLATE font/truetype application/font-ttf application/x-font-ttf
  </IfModule>
</IfModule>

# END Comet Cache WmVuQ2FjaGU

# BEGIN Really_Simple_SSL_SECURITY_HEADERS
<IfModule mod_headers.c>
Header always set Strict-Transport-Security "max-age=31536000"  env=HTTPS
Header always set Content-Security-Policy "upgrade-insecure-requests" 
Header always set X-XSS-Protection "1; mode=block" 
Header always set X-Content-Type-Options "nosniff" 
Header always set Referrer-Policy "no-referrer-when-downgrade" 
Header always set Expect-CT "max-age=7776000, enforce" 
</IfModule>
# END Really_Simple_SSL_SECURITY_HEADERS

# BEGIN rlrssslReallySimpleSSL rsssl_version[5.0.6]
<IfModule mod_rewrite.c>
RewriteEngine on
RewriteCond %{HTTPS} !=on [NC]
RewriteRule ^(.*)$ https://%{HTTP_HOST}/$1 [R=301,L]
</IfModule>
# END rlrssslReallySimpleSSL
# BEGIN WordPress
# De richtlijnen (regels) tussen "BEGIN WordPress" en "END WordPress" worden
# dynamisch gegenereerd en zouden alleen aangepast mogen worden via WordPress filters.
# Alle wijzigingen aan de richtlijnen tussen deze markeringen worden overschreven.
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
RewriteBase /
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>
# END WordPress
# Header unset ETag
FileETag None
## EXPIRES CACHING ##
<IfModule mod_expires.c>
ExpiresActive On
ExpiresByType image/jpg "access 1 year"
ExpiresByType image/jpeg "access 1 year"
ExpiresByType image/gif "access 1 year"
ExpiresByType image/png "access 1 year"
ExpiresByType text/css "access 1 month"
ExpiresByType text/html "access 1 month"
ExpiresByType application/pdf "access 1 month"
ExpiresByType text/x-javascript "access 1 month"
ExpiresByType application/x-shockwave-flash "access 1 month"
ExpiresByType image/x-icon "access 1 year"
ExpiresDefault "access 1 month"
</IfModule>

@d4d5bh6 I’m afraid it did not, Nick.

I’ve got 7 redirects (301), 4 from renamed or deleted pages, from renamed blogs. But both sites have this problem, one has no redirects at all.

Hi James,
I’ve checked your suggestions. There is a lot of code in my htaccess file. On this particular site Autoptimize, Comet Cache, Really Simple SSL Pro and Shield Security are active. They leave some code in htaccess by design.

The problem started when I removed the Feedburner feed from the Google site, and those plugins were active already.

Perhaps I could deactivate them, remove their htaccess code and replace the standard WordPress code? Then rebuild the code by activating the plugins again. What your view on that?

I’ve got the same problem on another site which is using Safe Redirect Manager, WP Rocket, Really Simple SSL Pro and Shield Pro. All Genesis/StudioPress based theming.

Thanks, Bart