jamminjames

But it’s not coming from a stylesheet, as I said. The inspector shows it’s part of the figure element on the page. So, on the page, the figure is included as:

<figure style="width: 390px;">

This is true in every post.

• This reply was modified 2 weeks, 1 day ago by jamminjames.
• This reply was modified 2 weeks, 1 day ago by jamminjames.

Found a solution to this. Added to CSS:

figure {
width: auto !important;
}

However, it seems odd that it is set to 390px in the first place. Is that in the theme somewhere? It seems to be hard-coded on the page.

• This reply was modified 2 weeks, 1 day ago by jamminjames.

Okay, thanks.

@wfpeter,?is there anyone else I can ask for support on this? It seems Wordfence’s user-set allowlisted IP is not working properly, and that someone should look into that. My ipv4?doesn’t change, yet the allowed list is not working for me, unless I re-save it, then it will work for a day or whatever.

I do notice from the log I posted above that that injection test uses ipv6, not ipv4. When I save the ipv4?in the allowlisted IP, does that somehow also translate to my current ipv6? Is that why it works for a bit, since the ipv6 changes, but the ipv4 does not?

So, could I, with a function hook perhaps, make it test with ipv4 instead?

Thanks, that worked. Odd that it didn’t record it as verified on its own. Is that due to a cache issue, or what, do you think?

@wfpeter,?any suggestions? Is there a hook I could use in our child theme functions.php file, for example?

Okay, thanks. It would be nice to add that option. We save certain images with the same name, though they are new images, and upload them via FTP now and then. The image won’t update on the site unless we delete the old webp images.

Apparently fixed with last update, thanks!

@wfpeter, what do you recommend? Thanks.

Following up, I went ahead and did Learning Mode again, and this time did a bunch of operations in phpMyAdmin, instead of just one or two. Then I put it back in live mode. But when I logged out, it again started blocking actions in phpMyAdmin.

I also checked for blocked visits on the “Tools” > “Live Traffic” page feed, and found the related blocks, which were like the following (changed the IP and our website domain). I did notice the IP they used was the ipv6, not the ipv4 I had used. I think the ipv6 we’re assigned is not static though. If I just hit the “Add Param” button for this, it seems like it would be too broad, since it’s for SQL Injection. How should I approach this?

MyCity, California, United States was blocked by firewall for SQL Injection in POST body: sql_query=SELECT%20*%20FROM%20%60wp_blc_links%60%20WHERE%201 at https://www.mydomain.com/goodone/index.php?route=%2Flint
8/30/2024 11:48:32 AM (12 minutes ago)
IP: 9999:88888:a77d:1a66:e47c:2b71:f64b:6f64
Human/Bot: Human

Thanks for the prompt reply. The IP is not being replaced. I have tried Learning Mode, did that first, and although it also works for a time, it goes back to not working again.

It’s true, this is outside of the WordPress root. That is, it is set up in its own folder on the root of the site, but just not in the WordPress folder structure. Can I use that folder name somehow in the Firewall rules? I don’t want to block it out entirely, of course, because, as you say, we want the Firewall to protect it. I figured just allowing my static IP was the safest for that reason.

Looking into the manual method you linked to, it doesn’t look like it relates to my situation, as it’s all on the same subdomain.

Got it, thanks!

Okay, done, thanks.

Actually that’s not the top image, that’s the one that is not showing. The top one is (or was at the time of the screenshot):

< img src="https://www.humortimes.com/wp-content/uploads/2017/09/RozWarren-48x48.jpg" width="48" height="48" alt=""... >

My original images are never .webp, those get created by the EWWW Image Optimizer plugin after the fact.

I’ve also noticed the .webp image it’s trying to use each time, in this case “121562-first_image-48×48.webp”, doesn’t exist. The closest one in the /wordpress-popular-posts/ folder to that is “121562-first_image-48×48.jpg.webp”.

Debug info:

Plugin Configuration

Performance Nag: Inactive

Log Limit: Yes, keep data for 365 days

Log Views From: Everyone

Data Caching: Yes, 30 minute

Data Sampling: No

External object cache: Yes

WPP_CACHE_VIEWS: Yes
System Info

PHP version: 8.2.18

PHP extensions: Core, date, libxml, openssl, pcre, zlib, filter, hash, json, random, Reflection, SPL, session, standard, cgi-fcgi, bcmath, bz2, calendar, ctype, curl, dom, mbstring, fileinfo, ftp, gd, gettext, iconv, intl, exif, mysqlnd, PDO, Phar, posix, shmop, SimpleXML, sockets, sqlite3, sysvmsg, sysvsem, sysvshm, tokenizer, xml, xmlwriter, xsl, mysqli, pdo_mysql, pdo_sqlite, xmlreader, zip, apcu, igbinary, imagick, mailparse, msgpack, redis, Zend OPcache

AVIF support: Yes

WebP support: Yes

Database version: 10.5.22-MariaDB

InnoDB availability: DEFAULT

WordPress version: 6.6.1

Multisite: No

Active plugins: AddToAny Share Buttons 1.8.11, AdRotate Banner Manager 5.13.2, Akismet Anti-spam: Spam Protection 5.3.3, Better Notifications for WP 1.9.6, Broken Link Checker 2.3.0, Classic Editor 1.6.4, Classic Widgets 0.3, Cloudflare 4.12.8, Creators RSS Reader-HT 1.0.0, Disqus for WordPress 3.1.1, Easy Accept Payments via PayPal 5.0.9, EWWW Image Optimizer 7.8.0, Featured Articles Lite 3 3.1.10, Feedburner Alternative and RSS Redirect Plugin 4.3, Newsletter 8.4.7, Newsletter - Addons Manager and Support 1.3.0, Newsletter - API v1 and v2 2.4.8, Newsletter - Archive 4.1.5, Newsletter - SMTP Addon 1.1.3, NextGEN Gallery 3.59.4, Nginx Helper 2.2.5, Ninja Forms 3.8.11, OneSignal Push Notifications 2.4.4, ProfilePress 4.15.12, Recent Posts Widget With Thumbnails - mine 7.1.1, Redis Object Cache 2.5.3, Responsive Lightbox & Gallery 2.4.7, Revive Social 9.1.1, StarBox 3.5.2, UpdraftPlus - Backup/Restore 1.24.4, User Submitted Posts 20240703, Widget Context 1.3.2, Widget Importer & Exporter 1.6.1, Wordfence Security 7.11.7, WordPress File Upload Pro 4.24.8, WordPress Popular Posts 7.0.1, WPMU DEV Dashboard 4.11.26, WPS Hide Login 1.9.16.7, WP SMTP 1.2.7, WP Statistics 14.9.3, Yoast SEO 23.2, YouTube WordPress Plugin by Embed Plus 14.2.1.2

Theme: Generate Press Child (1.0.2) by Humor Times

Yes, please do. There should be an obvious note about it in the main Settings section for Forminator,?as I mentioned, because this is not something I would even have thought to read about in the documentation. When you finish setting that in the main settings, it feels like you’re done, like there’s no reason to look it up.