scott8035

So based on further experimentation on our end, it seems like Turnstile is never displayed if you are logged in, yet it disables the button anyway. Would it make sense to skip disabling the button if Turnstile itself is being skipped?

We worked around the issues by using CSS to re-enable the button if a user is logged-in.

• This reply was modified 4 months ago by scott8035.

I’m receiving the same/similar error: “PHP Fatal error: Uncaught Error: Call to undefined function WordfenceLS\get_current_site()”. This site was exported from a multi-site install and was converted with plugin “Prime Mover Pro”.

That fixed it. But isn’t it supposed to create multiple sitemap files when it runs into the situation where there are more entries than the “links per page” setting?

I’m having the same problem. WP 6.4.2, plugin 4.1.18, PHP 8.0.

@dimalifragis, if you look a little closer you can see the payload that was delivered past Wordfence and into the FlyingPress plugin, namely “cat /etc/passwd”. Also, I’ve had cached sites using Wordfence for years with no issues, so I don’t know where all that’s coming from.

You must have forgotten about the original description…the reason the scan stops is because the scan limit was reached, so it self-terminates. The reason it reaches the scan limit is because it’s in an infinite loop going over the same range of files again and again. It never makes it completely through the plugin directory, it restarts while still in the range of plugins starting with an “A”.

Hi Peter. I sent the debugging log info to [email protected] on behalf of forum user “scott8035”. The last couple dozen lines are:

SITE: https://dev.acornfinance.dev
PLUGIN VERSION: 7.9.2
WORDPRESS VERSION: 6.2
LICENSE KEY: 8cce28ec0a5485825aef30968dd23cd63a3f1861f5ca7468b48900a7b6e9396d46032b9877294f3b4d4c5be4fe075e203140dc22379c92431c8abe900c094639
ADMIN EMAIL: [email protected]
LOG:

Fri, 05 May 23 09:54:15 +0000::1683305655.1022:4:info::Calling Wordfence API v2.26:https://noc1.wordfence.com/stats.json

Fri, 05 May 23 09:52:09 +0000::1683305529.4071:2:error::Scan terminated with error: The scan time limit of 1 hour has been exceeded and the scan will be terminated. This limit can be customized on the options page. <a href=”https://www.wordfence.com/help/?query=scan-time-limit“>Get More Information (opens in new tab)</a>
Fri, 05 May 23 09:52:09 +0000::1683305529.4058:2:info::Wordfence used 190.52 MB of memory for scan. Server peak memory usage was: 220.52 MB
Fri, 05 May 23 09:52:09 +0000::1683305529.0375:4:info::Calling Wordfence API v2.26:https://noc1.wordfence.com/v2.26/?k=8cce28ec0a5485825aef30968dd23cd63a3f1861f5ca7468b48900a7b6e9396d46032b9877294f3b4d4c5be4fe075e203140dc22379c92431c8abe900c094639&amp;s=eyJ3cCI6IjYuMiIsIndmIjoiNy45LjIiLCJtcyI6ZmFsc2UsImgiOiJodHRwczpcL1wvZGV2LmFjb3JuZmluYW5jZS5kZXYiLCJzc2x2IjoyNjk0ODgyMzksInB2IjoiOC4wLjIyIiwicHQiOiJmcG0tZmNnaSIsImN2IjoiNy42OC4wIiwiY3MiOiJPcGVuU1NMXC8xLjEuMWYiLCJzdiI6Im5naW54XC8xLjIxLjUiLCJkdiI6IjEwLjUuMTctTWFyaWFEQi0xOjEwLjUuMTcrbWFyaWF-dWJ1MjAwNCIsImxhbmciOiIifQ&amp;action=record_scan_metrics
Fri, 05 May 23 09:52:09 +0000::1683305529.0075:10:info::SUM_FINAL:Scan interrupted. You have 1 new issue to fix. See below.
Fri, 05 May 23 09:52:09 +0000::1683305529.0068:1:info::Scan interrupted. Scanned 958553 files, 49 plugins, 3 themes, 0 posts, 0 comments and 0 URLs in 1 hour 6 seconds.
Fri, 05 May 23 09:52:09 +0000::1683305529.0060:1:info::——————-
Fri, 05 May 23 09:52:08 +0000::1683305528.9988:4:info::Scanning: /www/dev2acornfinancedev_548/public/wp-content/plugins/admin-columns-pro/addons/gravityforms/classes/Column/EntryConfigurator.php (Mem:46.0M)
Fri, 05 May 23 09:52:08 +0000::1683305528.9953:4:info::Scanning: /www/dev2acornfinancedev_548/public/wp-content/plugins/admin-columns-pro/addons/gravityforms/classes/Column/Entry.php (Mem:46.0M)
Fri, 05 May 23 09:52:08 +0000::1683305528.9916:4:info::Scanning: /www/dev2acornfinancedev_548/public/wp-content/plugins/admin-columns-pro/addons/gravityforms/classes/Column/Entry/ProductSelect.php (Mem:46.0M)
Fri, 05 May 23 09:52:08 +0000::1683305528.9881:4:info::Scanning: /www/dev2acornfinancedev_548/public/wp-content/plugins/admin-columns-pro/addons/gravityforms/classes/Column/Entry/Product.php (Mem:46.0M)
Fri, 05 May 23 09:52:08 +0000::1683305528.9845:4:info::Scanning: /www/dev2acornfinancedev_548/public/wp-content/plugins/admin-columns-pro/addons/gravityforms/classes/Column/Entry/Original/UserIp.php (Mem:46.0M)
Fri, 05 May 23 09:52:08 +0000::1683305528.9808:4:info::Scanning: /www/dev2acornfinancedev_548/public/wp-content/plugins/admin-columns-pro/addons/gravityforms/classes/Column/Entry/Original/User.php (Mem:46.0M)
Fri, 05 May 23 09:52:08 +0000::1683305528.9766:4:info::Scanning: /www/dev2acornfinancedev_548/public/wp-content/plugins/admin-columns-pro/addons/gravityforms/classes/Column/Entry/Original/TransactionId.php (Mem:46.0M)

Version 2.5.3 does not fix this problem.

FYI, reverting to 2.4.2 fixed the problem. I use “WP Rollback” to do so.

Does anyone look at these?

Block Lab has been resurrected as Genesis Custom Blocks, the original team was hired by WP Engine to develop it: https://www.ads-software.com/plugins/genesis-custom-blocks/. There is also a Pro version: https://www.studiopress.com/genesis-blocks/

• This reply was modified 2 years, 8 months ago by scott8035.

I’m not aware that WP ever gave the green light to PHP 8. My understanding is that, while they are working toward full compatibility with PHP 8, but they are not done yet.

For me, the cause of this problem was that the request was being blocked by a firewall rule at Cloudflare, specifically, a rule in the “Cloudflare Specials” ruleset of their WAF (web application firewall). I temporarily turned that ruleset off while editing, then turned it back on when I was finished.

Yes, everything works fine when I’m logged in as an administrator. And if I clear that field, everything works fine too. But I did notice something weird. When I clear that field, they should have had access to /var/www/birddoglaw.com/htdocs/, but it “remembered” the previous setting and restricted the author-level user to /var/www/birddoglaw.com/htdocs/wp-content/uploads/content/. The navigate-up icon was disabled, so I couldn’t go above that directory. So I got the effect I wanted, but I’m worried things are really broken…

Thanks for getting back to me. Here are two screenshots:

https://snipboard.io/yQGU7d.jpg
https://snipboard.io/vnCYEB.jpg