yndmgo
Forum Replies Created
-
I’m sure the people at Wordfence will see your comment and update their documentation. And at least, as you can see, there’s always another user willing to help 😉
Hi @jonburr,
You most likely still have the “auto_prepend_file” PHP directive in your “.htaccess”; it is added there when you optimize your Firewall.
Try removing the whole section from “# Wordfence WAF” to “# END Wordfence WAF” in the site “.htaccess”.
In order to forcefully regain access to your site you renamed the Wordfence folder “wp-content/plugins/wordfence/” but the PHP script specified in the “auto_prepend_file” directive (wordfence-waf.php) contains reference to another PHP script located in that Wordfence folder.
Then again it could also be that the “wordfence-waf.php” file was removed altogether.
So now when your site is accessed the PHP script can’t be found; hence the error.
P.S: Once you’ve got Wordfence up and running again, don’t forget to re-optimize the Firewall.
- This reply was modified 7 years, 6 months ago by yndmgo. Reason: Additional info
Have you tried deleting the “wflogs” folder? It’ll be automatically recreated when a visit occurs.
Hi @succotash,
This could be caused by a conflict between Wordfence and your theme or another plugin on your site.
Try temporarily switching to a default theme and disabling all other plugins then reactivating them one by one to see if the issue persists; you can do so using the “Health Check” plugin which allows you to disable plugins and switch to a default theme, but only for your user.
Hi @websenior,
Do you have a cron job or something deleting the “wflogs” folder at regular intervals?
Could you be experiencing the same issue as that discussed in this topic?
You could add a “Custom Pattern” block as outlined in this post.
These entries are not logged in a file; only in the database.
If you want to see all traffic you’ll have to look into the “wfHits” table and craft an SQL query which includes “ctime” (column containing the timestamp in Epoch format); something like:
SELECT INET6_NTOA(IP) FROM wp_wfHits WHERE ctime <1524257654You can also choose to include other columns in the query (the “URL”, for example)
The Epoch timestamp I specified in the above example (1524257654) converts into “Friday 20 April 2018 20:54:14 (GMT)”
This topic discusses a similar issue regarding the
"GET /?wordfence_lh=1&hid=xxxxxx"requests you mentioned.This could be caused by a conflict between Wordfence and your theme or another plugin on your site.
Try temporarily switching to a default theme and disabling all other plugins then reactivating them one by one to see if the issue persists; you can do so using the “Health Check” plugin which allows you to disable plugins and switch to a default theme, but only for your user.
———————————————
What you’re describing regarding the 508 errors seems to be the same issue as that discussed in this post.
Maybe another plugin installed on your site (or the theme you’re using) is conflicting with Wordfence; can you see any errors in the browser console when you’re trying to make changes from the “All Options” page?
Try temporarily switching to a default theme –if you’re not already using one– and disabling all other plugins then reactivating them one by one to see if the issue persists; the easiest way to do that is to use the “Health Check” plugin which allows you to disable plugins and switch to a default theme, but only for your user.
Have you tried temporarily switching to Learning Mode?
Can you see any errors in the PHP logs or in the database logs (if you have access to these) or in the browser console when you visit the block page or try to block an IP from the Live Traffic feed?
Using an SQL client like phpMyAdmin, try and check your database for crashed tables; and repair them if necessary.
If you specified a group list address in the “Where to email alerts” field, everyone in that group list will receive all Wordfence alerts.
You can enter multiple email addresses there so maybe try to restrict the number of recipients by entering individual addresses.
It does; if the “Enable email summary” option is “on”.
Check the “Activity Report” section on the “All options” page;
you can also select the frequency (once a day, once a week or once a month)