Pascal
Forum Replies Created
-
Forum: Plugins
In reply to: [iQ Block Country] Site crash after updateYes sorry about that, 1.2.23 should fix that issue of the missing files. It was released shortly after v1.2.22
Forum: Plugins
In reply to: [iQ Block Country] Can’t activate plugin without being blocked.Hi,
You can edit the blockcountry_blockbackend option in the wp_options (or a different name if you choose a different prefix) option to off
Forum: Plugins
In reply to: [iQ Block Country] Outdated geoip libraryHi,
I will look into this soon if I can update the library. I would assume it’s not going to be a big issue
Forum: Plugins
In reply to: [iQ Block Country] ‘site updates crashingDespite it not saying so the version works just fine with the latest versions of WordPress
Yes if you deactivate the plugin (or remove the mmdb file) the plugin will not work anymore.
Forum: Plugins
In reply to: [iQ Block Country] Website Frontend Still AccessibleHi,
This is most likely because you use a form of caching.
Caching and blocking are pretty much mutually exclusive as when a page is served from cache WordPress (and therefore iQ Block Country) is not fired up and thus cannot block the request.
If you require both caching & geo blocking you need to be looking at a caching solution that can do the geo blocking at the cache level. For instance Cloudflare or Varnish can do this.
Yes you could block the world and just allow single ip addresses of an ip block
Forum: Reviews
In reply to: [iQ Block Country] Causes Errors with SitemapsYou could just add the services of Google and Bing (and other search engines if needed) for instance as you probably have blocked the USA.
Forum: Plugins
In reply to: [iQ Block Country] Country restriction is not workingWell I am afraid not. Best case scenario is that countries you block will be served from cache As WordPress is not run when a page is cached iQ Block Country is not fired up to check.
So that’s why Geo Blocking should be done at the cache level. I know some caching solution providers offer such a solutionForum: Plugins
In reply to: [iQ Block Country] Country restriction is not workingHi,
Perhaps you use some form of caching for instance via Amazon. Caching and Geo Blocking is a bit mutually exclusive unless it happens directly at the caching point.The iQ Block Country WordPress plugin before 1.2.20 does not properly checks HTTP headers in order to validate the origin IP address, allowing threat actors to bypass it’s block feature by spoofing the headers.
See https://wpscan.com/vulnerability/03254977-37cc-4365-979b-326f9637be85
So 1.2.20 is no longer vulnerable as it now defaults to an override to REMOTE_ADDR. Anyone can choose to override it to another setting depending on if they use caching or not.
Forum: Plugins
In reply to: [iQ Block Country] Whitelisted IP’s are not safedThen you might have an extra space for instance
Any new ip address should have the ; delimiter in between so for instance:
192.168.1.100;192.168.2.0/24;1.1.1.1
Forum: Plugins
In reply to: [iQ Block Country] Unknown IP not blockedHi,
If the IP address is not linked to a country in the Maxmind database the plugin has no way of knowing which country the IP belongs to I am afraid.
Forum: Plugins
In reply to: [iQ Block Country] Sites return 404 or display blank page if enabledHi,
The plugin does not return a 404 error at all. Do you perhaps use some form of caching?
Forum: Plugins
In reply to: [iQ Block Country] Error displayed when WooCommerce user logoutHi,
Users logging in is considered to be backend as for most people it’s only part of the backend. So if you use plugins that need login like woocommerce or for instance a member plugin you should not block the backend or only block the backend for countries you do not have users in.