False positive for Revolution Slider

  • Resolved Taylor S

    (@wtswp)


    11 years, 2 months ago

    A false positive is being thrown on rule 1383 when trying to update a slider in Revolution Slider.

    Request …

    action%3Drevslider_ajax_action%26client_action%3Dupdate_slide%26nonce%3D661e609be0%26data%5Bslideid%5D%3D1%26data%5Blayers%5D%3D%7B%220%22%3A%7B%22text%22%3A%22Caption+Text1%22%2C%22type%22%3A%22text%22%2C%22left%22%3A100%2C%22top%22%3A100%2C%22animation%22%3A%22tp-fade%22%2C%22easing%22%3A%22Power3.easeInOut%22%2C%22speed%22%3A300%2C%22align_hor%22%3A%22left%22%2C%22align_vert%22%3A%22top%22%2C%22hiddenunder%22%3Afalse%2C%22resizeme%22%3Atrue%2C%22link%22%3A%22%22%2C%22link_open_in%22%3A%22same%22%2C%22link_slide%22%3A%22nothing%22%2C%22scrollunder_offset%22%3A%22%22%2C%22style%22%3A%22big_black%22%2C%22time%22%3A500%2C%22endtime%22%3A%22%22%2C%22endspeed%22%3A300%2C%22endanimation%22%3A%22auto%22%2C%22endeasing%22%3A%22nothing%22%2C%22corner_left%22%3A%22nothing%22%2C%22corner_right%22%3A%22nothing%22%2C%22width%22%3A-1%2C%22height%22%3A-1%2C%22serial%22%3A%220%22%2C%22endTimeFinal%22%3A8700%2C%22endSpeedFinal%22%3A300%2C%22realEndTime%22%3A9000%2C%22timeLast%22%3A8500%2C%22alt%22%3A%22%22%2C%22scaleX%22%3A%22%22%2C%22scaleY%22%3A%22%22%2C%22scaleProportional%22%3Afalse%2C%22attrID%22%3A%22%22%2C%22attrClasses%22%3A%22%22%2C%22attrTitle%22%3A%22%22%2C%22attrRel%22%3A%22%22%2C%22link_id%22%3A%22%22%2C%22link_class%22%3A%22%22%2C%22link_title%22%3A%22%22%2C%22link_rel%22%3A%22%22%2C%22order%22%3A0%2C%22loop_animation%22%3A%22none%22%2C%22loop_easing%22%3A%22Power3.easeInOut%22%2C%22loop_speed%22%3A%222%22%2C%22loop_startdeg%22%3A%22-20%22%2C%22loop_enddeg%22%3A%2220%22%2C%22loop_xorigin%22%3A%2250%22%2C%22loop_yorigin%22%3A%2250%22%2C%22loop_xstart%22%3A%220%22%2C%22loop_xend%22%3A%220%22%2C%22loop_ystart%22%3A%220%22%2C%22loop_yend%22%3A%220%22%2C%22loop_zoomstart%22%3A%221%22%2C%22loop_zoomend%22%3A%221%22%2C%22loop_angle%22%3A%220%22%2C%22loop_radius%22%3A%2210%22%2C%22split%22%3A%22none%22%2C%22endsplit%22%3A%22none%22%2C%22splitdelay%22%3A%2210%22%2C%22endsplitdelay%22%3A%2210%22%2C%22max_height%22%3A%22auto%22%2C%22max_width%22%3A%22auto%22%2C%222d_rotation%22%3A%220%22%2C%222d_origin_x%22%3A%2250%22%2C%222d_origin_y%22%3A%2250%22%2C%22parallax_level%22%3A%22-%22%2C%22whitespace%22%3A%22nowrap%22%2C%22static_start%22%3A%221%22%2C%22static_end%22%3A%221%22%2C%22endWithSlide%22%3Atrue%7D%2C%221%22%3A%7B%22text%22%3A%22Vestibulum+semper+neque+ac+turpis+imperdiet%2C%3Cbr+%2F%3Ein+suscipit+quam+sagittis.+Maecenas+esollicitudin%2C%3Cbr+%2F%3E+ut+mattis+dui+congue.+%22%2C%22type%22%3A%22text%22%2C%22left%22%3A100%2C%22top%22%3A150%2C%22animation%22%3A%22tp-fade%22%2C%22easing%22%3A%22Power3.easeInOut%22%2C%22speed%22%3A300%2C%22align_hor%22%3A%22left%22%2C%22align_vert%22%3A%22top%22%2C%22hiddenunder%22%3Afalse%2C%22resizeme%22%3Atrue%2C%22link%22%3A%22%22%2C%22link_open_in%22%3A%22same%22%2C%22link_slide%22%3A%22nothing%22%2C%22scrollunder_offset%22%3A%22%22%2C%22style%22%3A%22big_white%22%2C%22time%22%3A800%2C%22endtime%22%3A%22%22%2C%22endspeed%22%3A300%2C%22endanimation%22%3A%22auto%22%2C%22endeasing%22%3A%22nothing%22%2C%22corner_left%22%3A%22nothing%22%2C%22corner_right%22%3A%22nothing%22%2C%22width%22%3A767%2C%22height%22%3A108%2C%22serial%22%3A%221%22%2C%22endTimeFinal%22%3A8700%2C%22endSpeedFinal%22%3A300%2C%22realEndTime%22%3A9000%2C%22timeLast%22%3A8200%2C%22alt%22%3A%22%22%2C%22scaleX%22%3A%22%22%2C%22scaleY%22%3A%22%22%2C%22scaleProportional%22%3Afalse%2C%22attrID%22%3A%22%22%2C%22attrClasses%22%3A%22%22%2C%22attrTitle%22%3A%22%22%2C%22attrRel%22%3A%22%22%2C%22link_id%22%3A%22%22%2C%22link_class%22%3A%22%22%2C%22link_title%22%3A%22%22%2C%22link_rel%22%3A%22%22%2C%22order%22%3A1%2C%22loop_animation%22%3A%22none%22%2C%22loop_easing%22%3A%22Power3.easeInOut%22%2C%22loop_speed%22%3A%222%22%2C%22loop_startdeg%22%3A%22-20%22%2C%22loop_enddeg%22%3A%2220%22%2C%22loop_xorigin%22%3A%2250%22%2C%22loop_yorigin%22%3A%2250%22%2C%22loop_xstart%22%3A%220%22%2C%22loop_xend%22%3A%220%22%2C%22loop_ystart%22%3A%220%22%2C%22loop_yend%22%3A%220%22%2C%22loop_zoomstart%22%3A%221%22%2C%22loop_zoomend%22%3A%221%22%2C%22loop_angle%22%3A%220%22%2C%22loop_radius%22%3A%2210%22%2C%22split%22%3A%22none%22%2C%22endsplit%22%3A%22none%22%2C%22splitdelay%22%3A%2210%22%2C%22endsplitdelay%22%3A%2210%22%2C%22max_height%22%3A%22auto%22%2C%22max_width%22%3A%22auto%22%2C%222d_rotation%22%3A%220%22%2C%222d_origin_x%22%3A%2250%22%2C%222d_origin_y%22%3A%2250%22%2C%22parallax_level%22%3A%22-%22%2C%22whitespace%22%3A%22nowrap%22%2C%22static_start%22%3A%221%22%2C%22static_end%22%3A%221%22%2C%22endWithSlide%22%3Atrue%7D%7D%26data%5Bparams%5D%5Btitle%5D%3DSlide%26data%5Bparams%5D%5Bstate%5D%3Dpublished%26data%5Bparams%5D%5Bdate_from%5D%3D%26data%5Bparams%5D%5Bdate_to%5D%3D%26data%5Bparams%5D%5Bslide_transition%5D%3Drandom%26data%5Bparams%5D%5B%5D%3DRemove%26data%5Bparams%5D%5Bslot_amount%5D%3D7%26data%5Bparams%5D%5Btransition_rotation%5D%3D0%26data%5Bparams%5D%5Btransition_duration%5D%3D300%26data%5Bparams%5D%5Bdelay%5D%3D%26data%5Bparams%5D%5Bsave_performance%5D%3Doff%26data%5Bparams%5D%5Benable_link%5D%3Dfalse%26data%5Bparams%5D%5Blink_type%5D%3Dregular%26data%5Bparams%5D%5Blink%5D%3D%26data%5Bparams%5D%5Blink_open_in%5D%3Dsame%26data%5Bparams%5D%5Bslide_link%5D%3Dnothing%26data%5Bparams%5D%5Blink_pos%5D%3Dfront%26data%5Bparams%5D%5Bslide_thumb%5D%3D%26data%5Bparams%5D%5Bbackground_type%5D%3Dimage%26data%5Bparams%5D%5Bclass_attr%5D%3D%26data%5Bparams%5D%5Bid_attr%5D%3D%26data%5Bparams%5D%5Battr_attr%5D%3D%26data%5Bparams%5D%5Bdata_attr%5D%3D%26data%5Bparams%5D%5Bimage_url%5D%3Dhttp%3A%2F%2Fredacted.com%2Ffiles%2Frevslider%2Fmainslider%2Flargeslide2.jpg%26data%5Bparams%5D%5Bimage_id%5D%3D583%26data%5Bparams%5D%5Bslide_bg_color%5D%3D%23E7E7E7%26data%5Bparams%5D%5Bslide_bg_external%5D%3D%26data%5Bparams%5D%5Bbg_fit%5D%3Dcover%26data%5Bparams%5D%5Bbg_fit_x%5D%3D100%26data%5Bparams%5D%5Bbg_fit_y%5D%3D100%26data%5Bparams%5D%5Bbg_repeat%5D%3Dno-repeat%26data%5Bparams%5D%5Bbg_position%5D%3Dcenter+top%26data%5Bparams%5D%5Bbg_position_x%5D%3D0%26data%5Bparams%5D%5Bbg_position_y%5D%3D0%26data%5Bparams%5D%5Bbg_end_position_x%5D%3D0%26data%5Bparams%5D%5Bbg_end_position_y%5D%3D0%26data%5Bparams%5D%5Bbg_end_position%5D%3Dcenter+top%26data%5Bparams%5D%5Bkenburn_effect%5D%3Doff%26data%5Bparams%5D%5Bkb_start_fit%5D%3D100%26data%5Bparams%5D%5Bkb_end_fit%5D%3D100%26data%5Bparams%5D%5Bkb_duration%5D%3D9000%26data%5Bparams%5D%5Bkb_easing%5D%3DLinear.easeNone

    https://wordpress.org/plugins/ninjafirewall/

Viewing 5 replies - 1 through 5 (of 5 total)
  • Plugin Author nintechnet

    (@nintechnet)

    11 years, 2 months ago

    Hi

    Were you the admin when you were blocked ?

    Thread Starter Taylor S

    (@wtswp)

    11 years, 2 months ago

    Yes, I was logged in as the admin.

    Plugin Author nintechnet

    (@nintechnet)

    11 years, 2 months ago

    Normally, this should never happen to you, the admin, because you are whitelisted.
    You can check in the firewall “Overview” page if you have any warning about PHP sessions, cookies and whitelist:
    -If you see a warning, it means you may have issue with your config (e.g., runnning PHP 5.3 with register_globals defined), or another plugin is messing with sessions.
    -If there is no warning, this could be due to the PHP Garbage Collection mechanism or a few other reasons depending on your configuration. This should be very seldom only, because if it happens once (or more) a day, there is obviously a problem.

    Thread Starter Taylor S

    (@wtswp)

    11 years, 2 months ago

    PHP version is 5.4.38 so no register_globals. Not only is it happening every day, it happens every time.

    There are no warnings in the Overview page.

    More info …

    Fairly large multisite install, over 700 sites. Running XCache for opcode cache and memcached for object caching.

    I’m going copy the site to a test area and I’ll update you if I find anything.

    Plugin Author nintechnet

    (@nintechnet)

    11 years, 2 months ago

    It could be a Memcached issue. You can check this discussion about it.

Viewing 5 replies - 1 through 5 (of 5 total)

The topic ‘False positive for Revolution Slider’ is closed to new replies.