Support » Plugin: BulletProof Security » Running BPS and eCommerce via Media Library (How-to)

  • Resolved BusyWorksBeats

    (@busyworksbeats)


    Hi,

    Thanks for the great product. I just got Pro for the UAEG function to protect my site from people stealing our products.

    I have seem to run into an illogical situation. I was wondering if it is possible to run an e-Commerce plugin alongside BPS. I ask because I upload files to WordPress and FTP (using transfer to WP) and my file URLs are all based on my domain name. When I go to test download, BPS does its job and protects the file.

    Is there a work around or setting I can enable/change to set up e-Commerce on my site using the WordPress directory for easy file exchanges/downloads, in a way that won’t conflict with BPS security?

    Is BPS not meant for ecommerce? The main reason this is so critical, is because file hosting is free through WordPress so uploading to 3rd party sites seems like a drag.

    Thanks,

    Busy Works Beats

    https://wordpress.org/plugins/bulletproof-security/

Viewing 6 replies - 1 through 6 (of 6 total)
  • Plugin Author AITpro

    (@aitpro)

    For BPS Pro questions please post them in the BulletProof Security Pro Forum: http://forum.ait-pro.com/forums/forum/bulletproof-security-pro/ in the future. The BulletProof Security Pro forum has an enhanced search feature and is very well organized and maintained for optimum searchability to make finding things simple and quick. 😉

    BPS Pro works with all other plugins, but in some cases will block something legitimate and a whitelist rule will need to be created to allow whatever legitimate thing that is being blocked.

    The BPS Pro Security Log is a primary troubleshooting tool and logs anything legtimate that is being blocked as well as logging blocked hackers, spammers, etc. Post the Security Log entry that is related to the file download that is being blocked. The Security Log entry will contain the file name of the file that is being blocked from being downloaded.

    Most likely what is occurring is the file extension type is a file extension that is blocked by default in UAEG and there are a couple of possible methods to whitelist/allow this.

    http://forum.ait-pro.com/forums/topic/uploads-anti-exploit-guard-uaeg-read-me-first/

    Thread Starter BusyWorksBeats

    (@busyworksbeats)

    [Large code excerpt removed by moderator per forum rules. Please use the pastebin for all large code excerpts. It works better anyway.]

    Thread Starter BusyWorksBeats

    (@busyworksbeats)

    I am fairly new to this process, but I just need people to be able to download certain .rar files for free downloads as well as be able to send digital product links through my ecommerce without the links being protected.

    Plugin Author AITpro

    (@aitpro)

    Oh ok then no need to post any Security Log entries. rar files are blocked by default in the UAEG .htaccess file. To allow rar files to be downloaded do these steps:

    1. Edit the UAEG .htaccess file: To edit your Uploads Anti-Exploit Guard (UAEG) .htaccess file go to the B-Core >>> htaccess File Editor tab page and click on the “Your Current Uploads htaccess File” tab.

    2. Delete the file extension that you want to allow and click the Update File button to save your changes. In this case delete rar as shown below. Note: The file extensions are in alphabetical order.

    # FORBID THESE FILE EXTENSIONS FROM BEING ACCESSED OR EXECUTED REMOTELY
    <FilesMatch "\.(7z|as|bat|bin|cgi|chm|chml|class|cmd|com|command|dat|db|db2|db3|dba|dll|DS_Store|exe|gz|hta|htaccess|htc|htm|html|html5|htx|idc|ini|ins|isp|jar|jav|java|js|jse|jsfl|json|jsp|jsx|lib|lnk|out|php|phps|php5|php4|php3|phtml|phpt|pl|py|pyd|pyc|pyo|shtm|shtml|sql|swf|sys|tar|taz|tgz|tpl|vb|vbe|vbs|war|ws|wsf|xhtml|xml|z)$">
    Order Deny,Allow
    Deny from all
    </FilesMatch>
    Thread Starter BusyWorksBeats

    (@busyworksbeats)

    Wow,

    Man you are on your job. Thank you for your guidance. I was just a lost newbie. Your product and supporting service just saved my business. Thanks a million and may the Creator bless you one hundred times over.

    Game

    Plugin Author AITpro

    (@aitpro)

    Very welcome! If you think our wordpress.org forum support is ok then you will be super impressed with our forum.ait-pro.com forum support. Typical response times are between 15 – 60 minutes on the forum.ait-pro.com forum site. 😉

Viewing 6 replies - 1 through 6 (of 6 total)
  • The topic ‘Running BPS and eCommerce via Media Library (How-to)’ is closed to new replies.