BulletProof Security
[resolved] BPS blocking auto updates of Backup Buddy (7 posts)

  1. BrownMaggie
    Posted 3 years ago #

    I have both BPS and Backup Buddy installed on my wordpress/prophoto theme. I am wanting backup buddy to be able to do auto backups. BPS is blocking this. Currently, I am having to unplug the BPS plugin, do the backup, then turn BPS back on. I would like to set it and forget it for the auto updates. Any suggestions would be appreciated.


  2. karyyyn
    Posted 3 years ago #

    Yes, we have the same problem and would like to know the answer as well.

  3. AITpro
    Plugin Author

    Posted 3 years ago #

    Do you see an error in your BPS Security Log? If so, please post the error relating to BackupBuddy here. Thanks.

    My guess is that the Cron job is being blocked. If this is the case then most likely you will need to remove wget from these security filters below.

    wget is explicitly blocked in these security filters below. You can either remove wget from being blocked or a safer method would be to use the lynx command line instead of wget, but if you cannot use lynx for your purposes then you will have to allow wget on your website. Alternative Cron command line command that is safer to use is lynx -source instead of wget -O. You would simply replace the wget command line with lynx -source.

    RewriteCond %{HTTP_USER_AGENT} (havij|libwww-perl|wget|python|nikto|curl|scan|java|winhttp|clshttp|loader) [NC,OR]
    RewriteCond %{HTTP_USER_AGENT} (;|<|>|'|"|\)|\(|%0A|%0D|%22|%27|%28|%3C|%3E|%00).*(libwww-perl|wget|python|nikto|curl|scan|java|winhttp|HTTrack|clshttp|archiver|loader|email|harvest|extract|grab|miner) [NC,OR]
  4. karyyyn
    Posted 3 years ago #

    Thanks for the fast reply.

    Can you give more clear steps about the change you suggested?

    Are the Rewrite rules something we should add? ...or replace? Do they go in .htaccess in the root?

  5. AITpro
    Plugin Author

    Posted 3 years ago #

    Go to the BPS Edit/Upload/Download page, click on the Your Current htaccess File tab, scroll down in your root .htaccess file until you see that code I posted above, delete wget| from the security filters. Be sure to delete the pipe operator | as well as wget from the filters.

  6. AITpro
    Plugin Author

    Posted 3 years ago #

    I have confirmed that BackupBuddy uses a wget Cron.

    Source: http://ithemes.com/codex/page/BackupBuddy:_Frequent_Support_Issues#Scheduled_Events_Fail_to_Trigger.2FUsing_Real_Cron_to_Trigger

    Scheduled Events Fail to Trigger/Using Real Cron to Trigger

    The scheduled date is wrong and has not passed.
    Not enough visitors are visiting to trigger the schedule. Someone must visit any page on the WordPress site on or after the scheduled time for the event to occur. If no one visits during the time-frame then the event may be missed or occur at an unscheduled time.
    Can force a cron job to run in Cpanel by adding this line of code to a cron job if really need to:
    wget -q -O - http://DOMAIN/wp-cron.php 2&>1 /dev/null
    Source: http://www.siteground.com/tutorials/cpanel/cron_jobs.htm
    The backup is failing. Test manual backups.

    I believe that this alternative lynx -source Cron would work, but I have not tested it.

    lynx -source http://DOMAIN/wp-cron.php 2&>1 /dev/null

    You may need to also specify the path to /lynx

    45 * * * * /usr/bin/lynx -source http://example.com/cron.php

    Setting up a lynx Cron job with cPanel

  7. karyyyn
    Posted 3 years ago #

    Great thanks.

    It worked when we removed the wget from .htaccess.

    Appreciate the fast reply!

Topic Closed

This topic has been closed to new replies.

About this Plugin

About this Topic