taniav

Try install security plugin Wordfence and do the Malware scan. Read their FAQ What if my site has already been hacked?.

@willsonwanda I just tried it. It only changed the Date info in Media Library. It didn’t change the URLs and the images are still in the uploaded month folder.

I can access the site fine without any redirections to your other site.

You have fixed it then? If not, maybe you ever accidentally redirected the site in the past and the browser cached the redirection. Try to clear your browser’s cache.

The problem is from your theme’s CSS.

I tried to investigate the issue on your website using browser’s dev tool.

Apparently, your theme’s numbered list / ordered list (the <ol> tag) do not use the default numbering as you set:

.list--custom-ordered, ol {
	list-style-type: none;
}

The numbering is instead added through content: counter(custom-counter) "." on ol li:before. It makes any list items (<li> tags) inside <ol> will have number, including the sub-list that is supposed to be bullet list (<ul> tag).

The solution would be changing ol li:before in you CSS to ol > li:before.

@pmbaldha No more errors since I implemented the new code. I think I can say that the issue has gone. Thank you.

I have implemented the code. I checked today there were no AIOS firewall error: unable to locate workspace. errors occurred during the usual time period. I’m not sure if it would be too early to say that the issue has been fixed or not, but I think I will keep my eyes on the error log for the next one or two days to be sure.

I have tried to change the code to $GLOBALS['aiowps_firewall_rules_path'] = __DIR__.'/wp-content/uploads/aios/firewall-rules/'; and saved it. But, when I opened the file again, the code automatically changed back to the previous code $aiowps_firewall_rules_path = __DIR__.'/wp-content/uploads/aios/firewall-rules/';

Today I checked the cron jobs running on my site using WP Crontrol plugin.

I kept watching the jobs near usual time periods and noted the sequence as below:

9:26:27	aios_15_minutes_cron_event [every 15 minutes]
9:31:26	wordfence_hourly_cron [once hourly]
9:32:26	aiowps_hourly_cron_event [once hourly]
9:34:26	fluentform_do_scheduled_tasks [every 5 minutes]
9:35:32	w3_pgcache_cleanup [every 3600 seconds]
9:35:32	w3_pgcache_prime [every 900 seconds]
9:39:26	fluentform_do_scheduled_tasks [every 5 minutes]
9:41:27	aios_15_minutes_cron_event [every 15 minutes]
9:44:26	fluentform_do_scheduled_tasks [every 5 minutes]
9:45:18 AIOS firewall error: unable to locate workspace
9:45:23 AIOS firewall error: unable to locate workspace
9:45:27 AIOS firewall error: unable to locate workspace
9:45:32 AIOS firewall error: unable to locate workspace
9:45:36 AIOS firewall error: unable to locate workspace
9:45:39 AIOS firewall error: unable to locate workspace
9:45:43 AIOS firewall error: unable to locate workspace
9:45:48 AIOS firewall error: unable to locate workspace
9:45:53 AIOS firewall error: unable to locate workspace
9:45:56 AIOS firewall error: unable to locate workspace
9:45:59 AIOS firewall error: unable to locate workspace
9:46:01 AIOS firewall error: unable to locate workspace
9:46:04 AIOS firewall error: unable to locate workspace
9:46:07 AIOS firewall error: unable to locate workspace
9:46:10 AIOS firewall error: unable to locate workspace
9:46:13 AIOS firewall error: unable to locate workspace

Thanks for the response, @mbrsolution.

I set my login page with custom url (set it using this plugin). And I have excluded that custom url from cache long before I get this login issue.

When I log in via the login page, sometimes I get that ‘answer incorrectly’ issue, but on second trial (new question) it usually works fine. I don’t really mind that.

Today when I was prompted to login again (because I set that I have to login every few hours), the login page is showing up as ‘popup’ lightbox. And when I tried to login through that popup, the answers are always incorrectly – resulting me to get blocked.

I will try to login through ‘normal’ login page – instead through the popup one – when next time I am prompted to login again. To see if there is any differences.

Hi @bappidgreat,

Thank you for some enlightenment on the issue. I checked I am using PHP 5.4 (native).

Can you please let me know what things should I aware of before upgrading my PHP version? Will there be any problems with my WordPress sites?

On further investigation, I found out that this is the setting that causing the W3TC’s minify does not work:

Firewall > Additional Firewall Protection > Advanced Character String Filter

I just found out that there are some problems when these two plugins are activated.

I can’t get the minify css and js working. If I use clean / fancy url, the minified css and js return 404. If I don’t use fancy url, the file is empty.

I tried to deactivate plugin one by one to trace the issue. And the minify become fine after I deactivate All In One WP Security. Not sure which setting is the culprit.

Update:
Today I check my Google Search Console, all the AMP errors has gone now! ??

It confirms that the solution above fix the issue and by this I mark this topic as resolved.

You’re welcome, MTO. Glad it can help ??

Update on the errors report:
So far the errors have gone 50% fewer.
Once all the errors gone, I will mark this post as resolved, for at that time I will be positively sure the errors are really really fixed.

Thank you for the link. Maybe there should be some notes on the plugin settings to make it clearer how to add tracking code.

I have added new analytic code. Let’s see if it will remove the errors on Google search console report or not.

For those that wonder, here is the code that I put in the ‘Analytics code’ field:

<amp-analytics type="googleanalytics" id="analytics1">
<script type="application/json">
{
  "vars": {
    "account": "UA-XXXXXXXX-X"
  },
  "triggers": {
    "trackPageview": {
      "on": "visible",
      "request": "pageview"
    }
  }
}
</script>
</amp-analytics>

*Replace UA-XXXXXXXX-X with your Google analytics property ID.