Title: url parameters causing security problems
Last modified: February 14, 2021

---

# url parameters causing security problems

 *  Resolved [Tooni](https://wordpress.org/support/users/tooni/)
 * (@tooni)
 * [5 years, 3 months ago](https://wordpress.org/support/topic/url-parameters-causing-security-problems/)
 * I want to use a plugin, which requires to call some of my pages with url parameters
   like for example: my-site/page/?parameter=1|5
    With my currnet WP AIO Security
   settings this will be blocked as “forbidden”. When I disable all security settings,
   the error messages disappeares.
 * Can you give me some advise, which setting is responsible for this behaviour 
   so that I can try to disable it?
 * Thank you and best regards, Tooni

Viewing 4 replies - 1 through 4 (of 4 total)

 *  Plugin Contributor [mbrsolution](https://wordpress.org/support/users/mbrsolution/)
 * (@mbrsolution)
 * [5 years, 3 months ago](https://wordpress.org/support/topic/url-parameters-causing-security-problems/#post-14049752)
 * Hi, please start by disabling all Firewall rules. Then carry out a test. If your
   issue is resolved, then that means one of the Firewall rules is causing the conflict.
   If that is the case, start by enabling one by one the Firewall rules. Every time
   you enable one rule carry out a test. Do this until you find out which Firewall
   rule is causing this issue.
 * Let me know how you go.
 * Thank you
 *  Thread Starter [Tooni](https://wordpress.org/support/users/tooni/)
 * (@tooni)
 * [5 years, 3 months ago](https://wordpress.org/support/topic/url-parameters-causing-security-problems/#post-14051222)
 * Thank you for your answer – although it is somehow disappointing…
    The intention
   of asking the “experts” for the reason of my issue was to avoid testing one rule
   after the other. I thought, you should know, which rule is responsible for a 
   certain behaviour.
 * However – finally I was successful, when I disabled the 6G black list rules and
   selected the 5G rules instead.
 * Thank you for spending your time with my questionn, but let me add two suggestions
   for further improvement:
    * It could be a helpful option, what you said in your
   answer: To enable/disable all firewall rules (with one single checkbox). This
   is also true for the complete AIO WP Security settings: There is a checkbox to
   disable, but this will remove all settings and it’s not possible to enable again.
   🙁 * Searching the reason for an issue like what I described could be much easier,
   when the reason would be logged to the log-file. In my case the log-file was 
   empty.
 * However: I like the plugin and I’m happy that I can use it! Thank you.
 * Regards, Tooni
 *  Plugin Contributor [mbrsolution](https://wordpress.org/support/users/mbrsolution/)
 * (@mbrsolution)
 * [5 years, 3 months ago](https://wordpress.org/support/topic/url-parameters-causing-security-problems/#post-14051423)
 * Hi,
 * > Thank you for your answer – although it is somehow disappointing…
   >  The intention
   > of asking the “experts” for the reason of my issue was to avoid testing one
   > rule after the other. I thought, you should know, which rule is responsible
   > for a certain behaviour.
 * I understand your comment. However, it is almost impossible to be able to say
   that one feature causes a conflict when there are so many different configurations
   between servers and sites.
 * > However – finally I was successful, when I disabled the 6G black list rules
   > and selected the 5G rules instead.
 * I am glad you found the solution but 5G rules is old and obsolete. 6G rule is
   more up to date.
 * > Thank you for spending your time with my questionn, but let me add two suggestions
   > for further improvement:
   >  * It could be a helpful option, what you said in 
   > your answer: To enable/disable all firewall rules (with one single checkbox).
   > This is also true for the complete AIO WP Security settings: There is a checkbox
   > to disable, but this will remove all settings and it’s not possible to enable
   > again. 🙁
 * You can also export the settings. This would allow you to import the settings
   again if that is what you wanted to do.
 * >  * Searching the reason for an issue like what I described could be much easier,
   > when the reason would be logged to the log-file. In my case the log-file was
   > empty.
 * If you run into issues when checking the latest system logs, make sure you have
   enough memory allocated to your site. Also check to make sure you have not run
   out of disk space. Log files can become large in size.
 * Let me know if the above helps you further.
 * Kind regards
 *  Thread Starter [Tooni](https://wordpress.org/support/users/tooni/)
 * (@tooni)
 * [5 years, 3 months ago](https://wordpress.org/support/topic/url-parameters-causing-security-problems/#post-14053004)
 * > Let me know if the above helps you further.
 * Yes, thank you. Next time I know what to do (hopefully).
 * Regards, Tooni

Viewing 4 replies - 1 through 4 (of 4 total)

The topic ‘url parameters causing security problems’ is closed to new replies.

 * ![](https://ps.w.org/all-in-one-wp-security-and-firewall/assets/icon-256x256.
   png?rev=2798307)
 * [All-In-One Security (AIOS) – Security and Firewall](https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/all-in-one-wp-security-and-firewall/)
 * [Active Topics](https://wordpress.org/support/plugin/all-in-one-wp-security-and-firewall/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/all-in-one-wp-security-and-firewall/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/all-in-one-wp-security-and-firewall/reviews/)

 * 4 replies
 * 2 participants
 * Last reply from: [Tooni](https://wordpress.org/support/users/tooni/)
 * Last activity: [5 years, 3 months ago](https://wordpress.org/support/topic/url-parameters-causing-security-problems/#post-14053004)
 * Status: resolved