• Resolved awyork

    (@awyork)


    Just passing this along as info. It is a bit different than the other forum posts I’ve seen.

    Using WordPress on Lightsail.

    I had to update /opt/bitnami/apache/conf/vhosts/htaccess/wordpress-htaccess.conf and add the section below to secure the users.ini file.

    Restart the server after the change to pick this up. Also, need to restart the machine after initially setting up the WAF.

    # END WordPress

    # Wordfence WAF
    <Files ".user.ini">
    <IfModule mod_authz_core.c>
    Require all denied
    </IfModule>
    <IfModule !mod_authz_core.c>
    Order deny,allow
    Deny from all
    </IfModule>
    </Files>

    # END Wordfence WAF

    More info:
    https://docs.bitnami.com/aws/apps/wordpress/administration/use-htaccess/

    • This topic was modified 7 months ago by awyork. Reason: Additional Info
Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Support wfpeter

    (@wfpeter)

    Thanks @awyork.

    Based on your post I checked our documentation at the following address that mentions /opt/bitnami/apache/conf/vhosts/wordpress-https-vhost.conf and /opt/bitnami/apache/conf/vhosts/wordpress-vhost.conf: https://www.wordfence.com/help/scan/scan-results/#public-logs

    Were these insufficient before using wordpress-htaccess.conf? We can certainly consider checking this and making sure our information is up-to-date if so.

    Thanks,
    Peter.

    Thread Starter awyork

    (@awyork)

    Didn’t try. Per the documentation on Bitnami, the file I edited did the job.

    Some plugins, during their installation, create a .htaccess file in either the /opt/bitnami/APPNAME/ or in the /opt/bitnami/apps/APPNAME/plugins/ directory that cannot be read by Apache. For that reason, we recommend moving the content of that file to the /opt/bitnami/apache/conf/vhosts/htaccess/APPNAME-htaccess.conf file.

    https://docs.bitnami.com/aws/apps/wordpress/administration/use-htaccess/
    Plugin Support wfpeter

    (@wfpeter)

    No worries @awyork, I’m pleased that’s working for you and I’ll forward the information on to be considered for our documentation on the scan results page. In the mean time, these forums are public and searchable so we appreciate you giving some detail that may help other customers.

    Peter.

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘AWS WordPress Lightsail Bitnami stack doesn’t update .httpaccess’ is closed to new replies.