• Resolved TotallyMotorsport

    (@totallymotorsport)


    Using the lastest WordPress and most upto date Bullet, I’m trying to get a cron to work which actives a plugin to bring info in… but it’s coming up permission not allowed..

    Checking with Hostgator they said it’s due to the .htacess file being projected by security….

    Is there anyway around allowing this cron to access the file or should we just look for a different plugin to bring the info in?

    thanks

    https://ww.wp.xz.cn/plugins/bulletproof-security/

Viewing 15 replies - 1 through 15 (of 33 total)
  • Plugin Author AITpro

    (@aitpro)

    Most likely the cron is a wget cron and is being blocked by these nuisance filters.

    RewriteCond %{HTTP_USER_AGENT} (havij|libwww-perl|wget|python|nikto|curl|scan|java|winhttp|clshttp|loader) [NC,OR]
    
    RewriteCond %{HTTP_USER_AGENT} (;|<|>|'|"|\)|\(|%0A|%0D|%22|%27|%28|%3C|%3E|%00).*(libwww-perl|wget|python|nikto|curl|scan|java|winhttp|HTTrack|clshttp|archiver|loader|email|harvest|extract|grab|miner) [NC,OR]

    http://forum.ait-pro.com/forums/topic/wordpress-newsletter-plugin-wget-cron-blocked-by-bps/

    This Forum Topic shows the newer steps to add the modified BPS Query String Exploits code to BPS Custom Code so that this change is permanent.
    http://forum.ait-pro.com/forums/topic/rss-link-bomber-cron-job-blocked/#post-13671

    Thread Starter TotallyMotorsport

    (@totallymotorsport)

    my .access file

    bad bots user agent code list directly below.

    Thread Starter TotallyMotorsport

    (@totallymotorsport)

    so I’m not sure what I’m looking for…. sorry

    Thread Starter TotallyMotorsport

    (@totallymotorsport)

    ok I’ve found the line, so will edit and see what happens on the next cron update

    Plugin Author AITpro

    (@aitpro)

    Ok. Go ahead and delete the .htaccess code you posted above. The wp folks ask that you only post a snippet of code or use pastebin, but should always wrap any code that you post in code tags or highlight the code that you posted and click the “code” editor button.

    Thread Starter TotallyMotorsport

    (@totallymotorsport)

    just waiting for the cron to work

    Thread Starter TotallyMotorsport

    (@totallymotorsport)

    nope, the cron didn’t pick up the file… if I delete the .htaccess it works.. so it is something still blocking it…

    Plugin Author AITpro

    (@aitpro)

    Post the cron command / code that you are using.

    Plugin Author AITpro

    (@aitpro)

    I am logged into our HostGator testing host account and see Cron Jobs under the Advanced panel. Is that where you are adding the Cron job?

    Thread Starter TotallyMotorsport

    (@totallymotorsport)

    /usr/bin/curl http://www.total-f1.com/wp-content/plugins/wp-o-matic/cron.php?code=1630958f

    Plugin Author AITpro

    (@aitpro)

    Ok it is a curl cron job so you would need to remove “curl” and not “wget” (might as well remove both of them though – this filter is just a nuisance filter for scrapers, miners, etc and not a security filter) from the nuisance filter or use a lynx cron command instead.

    lynx -dump http://www.total-f1.com/wp-content/plugins/wp-o-matic/cron.php?code=1630958f
    
    or
    
    lynx -dump http://www.total-f1.com/wp-content/plugins/wp-o-matic/cron.php?code=1630958f > /dev/null 2&>1
    Thread Starter TotallyMotorsport

    (@totallymotorsport)

    so would it work if I didn’t take out the wget bit?
    thank you so much for your help on this

    Plugin Author AITpro

    (@aitpro)

    The nuisance filter filters out “curl” so you just need to remove “curl” as shown below. Leaving “wget” removed is up to you. These nuisance filters were a bad idea from the get go and actually cause problems more than they help. πŸ˜‰

    curl has been removed from the nuisance filter code below

    RewriteCond %{HTTP_USER_AGENT} (havij|libwww-perl|wget|python|nikto|scan|java|winhttp|clshttp|loader) [NC,OR]
    
    RewriteCond %{HTTP_USER_AGENT} (;|<|>|'|"|\)|\(|%0A|%0D|%22|%27|%28|%3C|%3E|%00).*(libwww-perl|wget|python|nikto|scan|java|winhttp|HTTrack|clshttp|archiver|loader|email|harvest|extract|grab|miner) [NC,OR]
    Thread Starter TotallyMotorsport

    (@totallymotorsport)

    cool, will give it a go, wait till the next cron and I will let you know πŸ™‚

    Thread Starter TotallyMotorsport

    (@totallymotorsport)

    Good News

    Running cron job

    Thank you so much for your top class help

Viewing 15 replies - 1 through 15 (of 33 total)

The topic ‘Cron problem’ is closed to new replies.