Support » Plugin: BulletProof Security » BPS blocking auto updates of Backup Buddy

  • Resolved BrownMaggie


    I have both BPS and Backup Buddy installed on my wordpress/prophoto theme. I am wanting backup buddy to be able to do auto backups. BPS is blocking this. Currently, I am having to unplug the BPS plugin, do the backup, then turn BPS back on. I would like to set it and forget it for the auto updates. Any suggestions would be appreciated.

Viewing 6 replies - 1 through 6 (of 6 total)
  • Yes, we have the same problem and would like to know the answer as well.

    Plugin Author AITpro


    Do you see an error in your BPS Security Log? If so, please post the error relating to BackupBuddy here. Thanks.

    My guess is that the Cron job is being blocked. If this is the case then most likely you will need to remove wget from these security filters below.

    wget is explicitly blocked in these security filters below. You can either remove wget from being blocked or a safer method would be to use the lynx command line instead of wget, but if you cannot use lynx for your purposes then you will have to allow wget on your website. Alternative Cron command line command that is safer to use is lynx -source instead of wget -O. You would simply replace the wget command line with lynx -source.

    RewriteCond %{HTTP_USER_AGENT} (havij|libwww-perl|wget|python|nikto|curl|scan|java|winhttp|clshttp|loader) [NC,OR]
    RewriteCond %{HTTP_USER_AGENT} (;|<|>|'|"|\)|\(|%0A|%0D|%22|%27|%28|%3C|%3E|%00).*(libwww-perl|wget|python|nikto|curl|scan|java|winhttp|HTTrack|clshttp|archiver|loader|email|harvest|extract|grab|miner) [NC,OR]

    Thanks for the fast reply.

    Can you give more clear steps about the change you suggested?

    Are the Rewrite rules something we should add? …or replace? Do they go in .htaccess in the root?

    Plugin Author AITpro


    Go to the BPS Edit/Upload/Download page, click on the Your Current htaccess File tab, scroll down in your root .htaccess file until you see that code I posted above, delete wget| from the security filters. Be sure to delete the pipe operator | as well as wget from the filters.

    Plugin Author AITpro


    I have confirmed that BackupBuddy uses a wget Cron.


    Scheduled Events Fail to Trigger/Using Real Cron to Trigger

    The scheduled date is wrong and has not passed.
    Not enough visitors are visiting to trigger the schedule. Someone must visit any page on the WordPress site on or after the scheduled time for the event to occur. If no one visits during the time-frame then the event may be missed or occur at an unscheduled time.
    Can force a cron job to run in Cpanel by adding this line of code to a cron job if really need to:
    wget -q -O – http://DOMAIN/wp-cron.php 2&>1 /dev/null
    The backup is failing. Test manual backups.

    I believe that this alternative lynx -source Cron would work, but I have not tested it.

    lynx -source http://DOMAIN/wp-cron.php 2&>1 /dev/null

    You may need to also specify the path to /lynx

    45 * * * * /usr/bin/lynx -source

    Setting up a lynx Cron job with cPanel

    Great thanks.

    It worked when we removed the wget from .htaccess.

    Appreciate the fast reply!

Viewing 6 replies - 1 through 6 (of 6 total)
  • The topic ‘BPS blocking auto updates of Backup Buddy’ is closed to new replies.