OneMist8k

I’m developing another site on Local, downloaded the recent plugin from worg (8.2.6), and am still getting the same error message as before, “Directory traversal attempt detected“.

As before, after downgrading to 8.2.2 the problem went away.

FYI

When this project is finished, I will upgrade again and try to replicate the error with with these settings.

Thanks for the reply.

As for downgrading to a previous version, I downloaded 8.2.3 by pointing my browser to https://downloads.www.ads-software.com/plugin/media-library-plus.8.2.3.zip

After downgrading to this version, I am no longer experiencing this error.

I encountered the same problem, same error message. Whatever name I select, I get the same error message.

The FAQ says  you can click the Check for new folders option in the Media Library Folders submenu in the WordPress Dashboard, but that option is not in the submenu.

Version: 8.2.4
Working on Windows 11 Pro on laptop
Setup is Local by Flywheel

Other environment info:
Web Server nginx/1.16.0
PHP version 8.1.29
Server API cgi-fcgi
Server platform WINNT
Memory limit 256M
Default PHP timezone UTC
Disabled PHP functions
WordPress version 6.6.2
WordPress locale en_US
WordPress options DB table wp_options
MySQLi YES
MySQL Native Driver (mysqlnd) YES
PHP allow_url_fopen Enabled
PHP allow_url_include Disabled
Persistent object cache Not detected

EDIT: I downgraded to version 8.2.2 after posting this and the problem went away.

• This reply was modified 2 months, 1 week ago by OneMist8k.

I found the same issue with background images in GenerateBlocks. I’m using the free version. The earlier reply mentioned Beaver Builder, but does the pro version work for GenerateBlocks as well?

The pricing information on the website says the free version has a 12 hour update time. That excludes twitter?

Sorry, when I said “Customizer” I was referring to Appearance > Menus. My bad.

As I was compiling the screen shot you requested, I realized that the “Enable” box was not checked. D’oh! I’m posting the screenshot anyway in case anyone else makes the same mistake I did.

Thank you for your reply. I’m marking this issue resolved because there isn’t a box that says “User is an idiot”

Screenshots:

View post on imgur.com

Yes. Instead of deleting the plug-in, I rename the plug-in folder, log in via /WP-ADMIN, then name the Cerber folder back to the original. That way settings and log files were retained.

I still don’t know what is causing this. Near as I can figure, it is when the session times out and something in my session keeps trying to log me back in repeatedly. It doesn’t happen as long as my session doesn’t time out.

• This reply was modified 4 years, 6 months ago by OneMist8k.

I’m getting locked out too. “Too many log in attempts” when I’m in WordPress. Now I can’t get in for something like 1200 minutes (20 hours). This is happening to two sites with WP-Cerber.

I don’t want to disable the plug-in which would require me to re-install it again, thereby totally nuking the log files. I have access to the CP Panel and all the files with my host provider. Is there a way I can either disable WP-Cerber and log-in without losing the log files, or can I view the log files without logging into WordPress (and if so, how do I find them?)

Posting a “fix” to this error I found on another thread in this forum. It worked for me.

With these lines in the WP_CONFIG file, the warnings no longer appear. For me, WP_DEBUG was already set to false, but the other three lines had to be added.

ini_set(‘display_errors’,’Off’);
ini_set(‘error_reporting’, E_ALL );
define(‘WP_DEBUG’, false);
define(‘WP_DEBUG_DISPLAY’, false);

Oops! I had replied to the www.ads-software.com forum notification e-mail, not you.

E-mail was re-sent to correct address just now. Sorry about that.

I have replied just now via e-mail, complete with screen shots.

Hi Gioni,

I had all kinds of problems. I removed the Cerber plug-in altogether, deciding to re-install it when the time comes deploy to production.

It wasn’t too long before I started having problems elsewhere. There are a lot of configuration settings to tweak when working from a local copy. Just when I thought I found all the settings something else would not work. Apache, PHP, Mysql, WordPress, etc all were installed individually, not from any package. It was impacting my development schedule so I just gave up trying to do this locally choosing instead to develop off a hosted service. I took careful notes when trying the local route, so I may go back to try it again in the future when things aren’t time critical.

Hi –

Thanks for the reply. I can’t visit any page of the web site once I install the wp-cerber.php file from the wp-cerber-reset.zip file (by the way, only that file was in the zip file, there was no folder as the instructions at https://www.ads-software.com/support/topic/i-cant-login-im-locked-out-of-my-site/ would indicate.

Since I am locked out of the administration panel, I cannot disable any caching plugins.

Here is what I did, step by step, with pass/fail results at each step. The apache access.log and error.log files aren’t providing any help.

BTW relevant software versions:
PHP 7.1
MYSQL 5.7
Wordpress 4.8.1
WP-CERBER 5.1

Step P/F Description
1 [Pass] Restore the web site without WP-Cerber plug-in active
2 [Pass] Check: Access the web site as a user
3 [Pass] Check: Log-in to WordPress back-end using wp-login.php
4 [Pass] Delete inactive wp-cerber plug-in
5 [Pass] Check: Access the web site as a user
6 [Pass] Check: Log-in to WordPress back-end using wp-login.php
7 [Pass] Using Windows Explorer (file manager), verify wp-cerber folder is not in /wp-plugins folder (it isn’t)
8 [Pass] Download (via “Add-new” plug-in and activate fresh WP-Cerber plug-in, version 5.1
9 [Pass] WP Cerber dashboard, change/verify 2 values:
Custom login UR: https://devsite.com/xyzabc-login
Disable wp-login.php (checked)
10 [Pass] Clear all browser history. Close & re-open browser.
11 [Pass] Check: Access the web site as a user
12 [Fail] Check: Log-in to WordPress back-end using wp-login.php
Log-in form appears under URL.
So, enter credentials anyway.
Error message: Not Found The requested URL /xyzabc-login/ was not found on this server (404)
From Apache access.log:
`127.0.0.1 – – [13/Sep/2017:16:29:54 -0400] “GET /wp-login.php HTTP/1.1” 200 3184
127.0.0.1 – – [13/Sep/2017:16:29:55 -0400] “GET /wp-includes/js/jquery/jquery.js?ver=1.12.4 HTTP/1.1” 304 –
127.0.0.1 – – [13/Sep/2017:16:29:55 -0400] “GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1” 304 –
127.0.0.1 – – [13/Sep/2017:16:29:55 -0400] “GET /wp-includes/css/dashicons.min.css?ver=4.8.1 HTTP/1.1” 304 –
127.0.0.1 – – [13/Sep/2017:16:29:55 -0400] “GET /wp-admin/css/forms.min.css?ver=4.8.1 HTTP/1.1” 304 –
127.0.0.1 – – [13/Sep/2017:16:29:55 -0400] “GET /wp-includes/css/buttons.min.css?ver=4.8.1 HTTP/1.1” 304 –
127.0.0.1 – – [13/Sep/2017:16:29:55 -0400] “GET /wp-admin/css/l10n.min.css?ver=4.8.1 HTTP/1.1” 304 –
127.0.0.1 – – [13/Sep/2017:16:29:55 -0400] “GET /wp-admin/css/login.min.css?ver=4.8.1 HTTP/1.1” 304 –
127.0.0.1 – – [13/Sep/2017:16:29:55 -0400] “GET /wp-admin/images/wordpress-logo.svg?ver=20131107 HTTP/1.1” 304 –
127.0.0.1 – – [13/Sep/2017:16:30:17 -0400] “POST /xyzabc-login/ HTTP/1.1” 404 211`
13 [Fail] Check: Log-in to WordPress back-end using xyzabc-login.php
Error message: Not Found The requested URL /xyzabc-login/ was not found on this server (404)
From Apache access.log:
127.0.0.1 - - [13/Sep/2017:16:28:09 -0400] "GET /xyzabc-login/ HTTP/1.1" 404 211
—-
At this point, I’m locked out of the maintenance on my site with no way to access.
So, following instructions found at https://www.ads-software.com/support/topic/i-cant-login-im-locked-out-of-my-site/
—-
14 [Pass] Download wp-cerber-reset.zip, copy wp-cerber.php to /wp-content/plugins/wp-cerber/
15 [Fail] Check: Access the web site as a user. Blank screen.
Apache access.log thinks it was successful:
127.0.0.1 - - [13/Sep/2017:17:07:38 -0400] "GET / HTTP/1.1" 200 -
16 [Fail] Check: Log-in to WordPress back-end using wp-login.php
Error message on the browser, nothing in the Apache logs:
`Error thrown
Call to undefined function deactivate_plugins()`

Any ideas? I’m locked out. The only way for the log in to work is a complete restore. After running the reset, even the front end doesn’t work.

Thanks

Well, this is strange.

I restored the site to my laptop for the 3rd time without WP CERBER enabled. I deleted the plug-in and re-installed it. When activating WP CERBER, I selected a completely different hidden URL value than my live site, let’s call it /custom-admin. I logged off the admin panel to be greeted by the same, “URL not found on this server” message.

I tried to sign on with /custom-admin, “URL not found on this server”.

I tried to sign on with /wp-admin, AND IT WORKED even though I had previously logged out. Moreover, I wasn’t challenged for my creds. It was as if I never signed off.

Does this make sense? So odd…