Server security problems caused by Give

  • artxlb

    (@artxlb)


    9 years, 10 months ago

    My web hosting service keeps blocking my connection. The reason they have provided is that the script for Give’s custom fonts is setting off security flags. I’m not sure what that means since my connection to my site is blocked whenever I navigate to my WordPress dashboard or update any plugin.

    I have deleted and reinstalled the give plugin but my connection continues to be blocked.

    I can maintain my connection to my site only by deactivating Give.

    https://ww.wp.xz.cn/plugins/give/

Viewing 4 replies - 1 through 4 (of 4 total)
  • anotherdave

    (@anotherdave)

    9 years, 10 months ago

    Hi artxlb,

    It’s not just your host or just you. One of my clients has the same issue so I did some searching, found your thread here and a couple others around the web, and reported detailed info from my troubleshooting efforts in this other thread – https://ww.wp.xz.cn/support/topic/give-plugin-with-icomoon-triggers-modsecurity?replies=1

    The actual ModSecurity rule ID being triggered at your host might be a different number but the issue itself is likely exactly what you’re running into.

    Just figured you might want to know so that you don’t drive yourself crazy or do something drastic like move your site.

    Plugin Contributor Matt Cromwell

    (@webdevmattcrom)

    9 years, 10 months ago

    HI @artxlb

    Can you confirm that you are also using ModSecurity? If not, then your issue might not be related.

    If you are, then please track progress of this issue on the ticket @anotherdave created here:
    https://ww.wp.xz.cn/support/topic/give-plugin-with-icomoon-triggers-modsecurity?replies=1

    Let me know either way. Thanks!

    Thread Starter artxlb

    (@artxlb)

    9 years, 10 months ago

    @ Matt Cromwell

    I am not using ModSecurity.

    But I did share your previous post with my hosting service. They are suggesting that I move to one of their other servers with the latest PHP version. As a temporary fix they have whitelisted the security rule that was dropping my connection.

    ###Triggered rule###
    220030 COMODO WAF: Vulnerability in PHP before 5.3.12 and 5.4.x before 5.4.2 (CVE-2012-1823)
    ###

    Thanks,

    anotherdave

    (@anotherdave)

    9 years, 10 months ago

    @artxlb

    “220030 COMODO WAF: Vulnerability in PHP before 5.3.12 and 5.4.x before 5.4.2 (CVE-2012-1823)”

    Is a ModSecurity rule.

Viewing 4 replies - 1 through 4 (of 4 total)

The topic ‘Server security problems caused by Give’ is closed to new replies.