Admin blocked by NF!?

Hi,

Try to reload the “Overview” page again and see if the message goes away. Often, it will appear from time to time only because another plugin or theme may have destroyed the PHP session.

You will not be blocked from accessing your dashboard but if you try for instance to inject Javascript code into your post or page, the firewall could block the request if you aren’t whitelisted.

It could be a plugin, a theme, or even PHP (sessions are managed by PHP). It’s very hard to say. If you don’t see anything wrong, or error, you can simply ignore this issue. The message may appear from time to time. As long as it is not permanently, that’s fine.

What do I do when my actions are blocked because NF “forgot” me?

You can click your browser “Back” button.

This is a known issue with Piwik, there are several discussions on this forum about it (here and there for instance).
The issue comes from the PHP framework used by Piwik: it tries to start a PHP session without checking if one was already started. Because NinjaFirewall already started a session, you’ll get all those error messages.
The best solution is to whitelist the Piwik folder with NinjaFirewall’s .htninja configuration script:

1. Create a file named “.htninja”
2. Add this code to it:

<?php
/*
 +===================================================================+
 | NinjaFirewall optional configuration file                         |
 |                                                                   |
 | See:https://nintechnet.com/ninjafirewall/wp-edition/help/?htninja |
 +===================================================================+
*/

if (strpos($_SERVER['SCRIPT_FILENAME'], '/piwik/') !== FALSE) {
   return 'ALLOW';
}

Note: Replace “/piwik/” with the folder where Piwik is installed (default is “/piwik/”).

3. With your FTP client, upload the “.htninja” file into your WordPress root folder.

4. Try to access Piwik: there should be no more error.
Also, log in to WP dashboard, click on NinjaFirewall “Overview” page and it should be printed that the “.htninja” was detected and successfully loaded.