Instagram Authorization

Hi Ian,

Roughly speaking, each selection plays a following role.

• Block by country … malicious access from outside your country.
• Prevent Zero-day Exploit … malicious access from your country.
• Force to load WP core … malicious access not covered by the above two.
• Important files … malicious access not covered by the above three.

You can refer to this article.

—

I added 78.150.119.143 to ‘whitelist area’ but that didn’t do anything for this problem.

OK, that’s true. But I’m sorry I don’t see your situation.

The wp-admin part is the ‘Redirect URI’ of ‘Instagram Authorization’

Do you have any plugins to do this redirection? Who would access to /wp-admin/admin.php?page=...? Usually, this kind of access needs admin authentication and leads to a plugin page.

For example, attackers can potentially download your wp-config.php by simply hitting “/wp-admin/admin.php?page=xxx&file=../../../wp-config.php” in their browser via a vulnerable plugin. WP-ZEP can protect the site against such attacks. But if you are quite sure that it’s safe, you can bypass WP-ZEP.

Could you try to put the following snippet into your theme’s functions.php?

function my_bypass_admins( $queries ) {
    $whitelist = array(
        'handle_canon_options_advanced',
    );
    return $queries + $whitelist;
}
add_filter( 'ip-geo-block-bypass-admins', 'my_bypass_admins' );

This can prevent blocking. Please refer to http://www.ipgeoblock.com/codex/ip-geo-block-bypass-admins.html

I hope this will help you.

Hi Ian,

Now I have an interest in the interaction between the wordpress site and instagram 🙂

Speaking about your snippet, the timing ‘wp_enqueue_scripts‘ is not appropriate to apply filter hook ‘ip-geo-block-bypass-admins‘.

Please try as follows:
(Sorry but I made a mistake about handling arrays in the previous post.)

<?php

/**************************************
CHILD THEME ENQUEUE STYLES
***************************************/

add_action( 'wp_enqueue_scripts', 'child_theme_enqueue_styles' );

if (!function_exists("child_theme_enqueue_styles")) {
    function child_theme_enqueue_styles() {
        wp_enqueue_style( 'canon-parent-style', get_template_directory_uri() . '/style.css', array('canon-normalize') );
    }
}

/**************************************
IP Geo Block Snippet
***************************************/
if (class_exists('IP_Geo_Block')) {

    function my_bypass_admins( $queries ) {
        $whitelist = array(
            'handle_canon_options_advanced',
        );
        return array_merge( $queries, $whitelist );
    }
    add_filter( 'ip-geo-block-bypass-admins', 'my_bypass_admins' );
}

You’ll be success if both servers are in your country.

Good luck!

Hi Ian,

Exactly 26 lines and it works perfectly!

Brilliant!

I’m happy to hear that!

I activate Akismet and it’s OK. And I think you had better to set “XML-RPC” and “Login form” disable in IP Geo Block when you activate Loginizer and reCAPTCHA for the performace reason.