happyday25
Forum Replies Created
-
Ok gotcha, thank you! I will look forward to when you have a working version for it. WP Armour is a great plugin!
Ok thank you for clarifying, are there plans to support the block-based checkout with WP Armour in the futre? The block checkout is a much better layout to use than the classic one.
Thank you!
Hi, is there anyone who could help me with this?
Forum: Plugins
In reply to: [PW WooCommerce Gift Cards] No payment method provided when order total is $0Ok great! I updated the plugin and that fixed it. Thank you!
Forum: Plugins
In reply to: [BulletProof Security] Google Merchant Center bot being blockedOk gotcha, thank you so much!
Forum: Plugins
In reply to: [BulletProof Security] Google Merchant Center bot being blockedGot it, thank you! Updating this seems to have fixed the 403 for links with parentheses. I am also seeing this entry with Google in the Host Name and was wondering if there is a way to determine if this is a good bot or a spammer? I was reading the documentation for the security log event codes about the server protocol being HTTP/1.0 and the user agent being blank. Do both needed to be true for it to be a spammer or only one?
[405 HEAD Request: July 16, 2025 - 2:08 pm]
BPS: 6.9
WP: 6.8.1
Event Code: BFHS-HEAD - HEAD Request Blocked
Solution: https://forum.ait-pro.com/forums/topic/security-log-event-codes/
REMOTE_ADDR: GDPR Compliance On
Host Name: 155.17.44.34.bc.googleusercontent.com
SERVER_PROTOCOL: HTTP/1.0
HTTP_CLIENT_IP: GDPR Compliance On
HTTP_FORWARDED: GDPR Compliance On
HTTP_X_FORWARDED_FOR: GDPR Compliance On
HTTP_X_CLUSTER_CLIENT_IP: GDPR Compliance On
REQUEST_METHOD: HEAD
HTTP_REFERER:
REQUEST_URI: /products/pottery-jar-set
QUERY_STRING:
HTTP_USER_AGENT: curl/8.10.0Forum: Plugins
In reply to: [BulletProof Security] Google Merchant Center bot being blockedThanks for the quick reply! I deactivated the Root Folder BulletProof Mode and the 403 error went away.
It looks like maybe the parentheses in the query string format is the problem. Here is how they appear in the log:
REQUEST_URI: /products/?attribute_options=Small+(Blue)
QUERY_STRING: attribute_options=Small+(Blue)Here is how I have the URL written out in the Merchant Center links:
/products/?attribute_options=Small+%28Blue%29Is there a way to allow the parentheses?
Forum: Plugins
In reply to: [Fraud Prevention For WooCommerce and EDD] reCAPTCHA on Checkout PageThank you for the information Hitendra! I followed the steps to create the keys in the link above and entered them in the corresponding plugin fields including the integrating with a third party option using the legacy secret key. On the Google console side though it is saying that it still needs to be added to the site and the tokens verified with the following information:
“Incomplete: Finish setting up your key: Request tokens
To protect your site or app, finish setting up your key. Start by requesting tokens (executes).”“Before proceeding, you must authenticate with reCAPTCHA. API requests to reCAPTCHA will fail until authentication steps are complete.” https://cloud.google.com/recaptcha/docs/authentication?authuser=1
How do I incorporate these steps with the plugin to finish the setup?
Thank you again!
Forum: Plugins
In reply to: [BulletProof Security] Web application information disclosure vulnerabilityIt was the php.ini and .user.ini that were the issue. I set display_errors to off for both and the warnings are not visible now. Thank you so much for the help!
Forum: Plugins
In reply to: [BulletProof Security] Web application information disclosure vulnerabilityThanks for the heads up about SecurityMetrics, they have been a bit pushy on the sales side at times but the scans are part of a general compliance regulation that I have to meet so I would have to address this regardless of who did the scan.
I have the file permissions for the error log set so that they cannot be viewed publicly. When going to the URL path while logged out it shows a 403 forbidden page but the BPS errors are visible at the top. Below is all of the content on the 403 page.
Warning: session_start(): open(/var/cpanel/php/sessions/ea-php82 /sess_f02bf61f75639db56553090e9192ccb752, O_RDWR) failed: No such file or directory (2) in /home/username/public_html/example.com/wp-content/plugins/bulletproof-security/403.php on line 3
Warning: session_start(): Failed to read session data: files (path: /var/cpanel/php/sessions/ea-php82) in /home/username/public_html/example.com/wp-content/plugins/bulletproof-security/403.php on line 3
403 Forbidden Error
If you arrived here due to a search or clicking on a link click your
Browser’s back button to return to the previous page. Thank you.Website: example.com
Your IP Address: xx.xx.xxx.x
BPS Plugin 403 Error Page
Forum: Plugins
In reply to: [BulletProof Security] Web application information disclosure vulnerabilityI am using an external vulnerability scanner through SecurityMetrics, they work in cyber security and PCI compliance. It is the AVS scanner they provide.
It looks like the errors are showing in the PHP error log. /home/username/logs/example.com.php.error.log. There is a second error after the one I listed above as well. Here are both together:
Warning: session_start(): open(/var/cpanel/php/sessions/ea-php82 /sess_f02bf61f75639db56553090e9192ccb752, O_RDWR) failed: No such file or directory (2) in /home/username/public_html/example.com/wp-content/plugins/bulletproof-security/403.php on line 3
Warning: session_start(): Failed to read session data: files (path: /var/cpanel/php/sessions/ea-php82) in /home/username/public_html/example.com/wp-content/plugins/bulletproof-security/403.php on line 3
Hi @ibrahimsharif, sorry I posted this and then found the support page and thought it would be best to message there instead and forgot to remove this. Yes the issue is resolved now, thank you for the help!
I posted a new thread here https://ww.wp.xz.cn/support/topic/bounce-error-when-using-amazon-ses-custom-mail-from-domain/ with additional details I have learned so please feel free to remove this original thread. I planned to delete it after posting the other one and then realized I don’t have the ability to remove it.
- This reply was modified 2 years, 1 month ago by happyday25.
Wonderful! Thank you for adding this feature to the plugin!!
Ok great, thank you for the consideration!