Cerber Vs Pinclone theme

potoman
(@potoman)

5 years, 3 months ago

Hi,

Since I have been using the Cerber plugin, some links managed by my theme (Pinclone) don’t work anymore and open en error message page.

Here’s an example:

Page: http://www.potoclips.com/pin/57207/

Widget: Also from http://www.youtube.com
(in the widgets column at the right of the page)

Associated address: http://www.potoclips.com/fr/source/www.youtube.com/
Following error message
—>>>

We’re sorry, you are not allowed to proceed

Our server stopped processing your request. Your request looks suspicious or similar to automated requests from spam posting software.

If you believe you should be able to perform this request, please let us know.

This link intially works fine and it still should be able to be perform its request.

Can you explain me where and what am I supposed to do in order to prevent Cerber from blocking this kind of link ?

Thanks for your feedback,
Regards,
Potoman

The page I need help with: [log in to see the link]

Viewing 15 replies - 1 through 15 (of 16 total)

1 2 →

Plugin Author gioni
(@gioni)

5 years, 3 months ago

It looks like the link is malformed or it’s processed on your web server in a strange way. Was that link generated by the theme automatically?

Thread Starter potoman
(@potoman)

5 years, 3 months ago

Hello Gioni (@gioni),

Yes it was.

FYI, by deactivating Cerber, everything is working fine. Once reactivated, same issue.

So, how can I indicate to Cerber that the following link is authorized?
“http://www.potoclips.com/source/www.youtube.com/

Regards
Potoman

Plugin Author gioni
(@gioni)

5 years, 3 months ago

1. Activate Cerber and set Traffic Logging to Smart mode.
2. Click the problematic link.
3. Check the last blocked request on the Live Traffic page with your IP address.
4. Show me the URL of that requests.

Thread Starter potoman
(@potoman)

5 years, 3 months ago

Gioni (@gioni),

This is what I can see in the Live Taffic tab, just after clicking on the link:

January 18, 2019, 7:09 PM http://www.potoclips.com/fr/source/www.youtube.com/
GET HTTP 403 Forbidden 221 ms Details

Probing for vulnerable PHP code Denied

2a02:1206:45b6:bc10:107f:c25b:1447:b9f8
dynamic.wline.6rd.res.cust.swisscom.ch Firefox on Macintosh

Regards,
Potoman

Thread Starter potoman
(@potoman)

5 years, 3 months ago

FYI, Traffic Logging was already set to Smart mode.
Is it an issue?

Thanks,
Potoman

Thread Starter potoman
(@potoman)

5 years, 3 months ago

Gioni (@gioni),

There’s also an issue with Redirection

January 18, 2019, 7:18 PM http://www.potoclips.com/fr/wp-json/redirection/v1/redirect/?_wpnonce=f3cb4ed986
GET REST API HTTP 200 OK 646 ms
2a02:1206:45b6:bc10:107f:c25b:1447:b9f8
dynamic.wline.6rd.res.cust.swisscom.ch Opera on Macintosh Potoclips.com
Administrator, Keymaster

Thanks,
Potoman

Plugin Author gioni
(@gioni)

5 years, 3 months ago

Why do your links contains /fr/ prefix? Do you use some kind of multilanguage plugin?

Thread Starter potoman
(@potoman)

5 years, 3 months ago

Yes, I do. All pages are managed in three languages and work very fine.

And like explained, when Cerber is deactivated, the links work very well whatever the language selected.

Regards,
Potoman

Thread Starter potoman
(@potoman)

5 years, 2 months ago

Hello Gioni (@gioni),

No feedbacks for almost 3 weeks. I hope you are well.

Regards,
Potoman

Plugin Author gioni
(@gioni)

5 years, 2 months ago

Hi! Add the following line to the “Request whitelist” field on the Traffic Inspector Settings page.

{\/fr\/source\/www\.youtube\.com[\w\-]*}

See more: https://wpcerber.com/wordpress-probing-for-vulnerable-php-code/

Thread Starter potoman
(@potoman)

5 years, 2 months ago

Gioni (@gioni),

Perfect ! Issue 1 fixed.
Thanks.

Thread Starter potoman
(@potoman)

5 years, 2 months ago

And what about the redirection one ?

Trying to add one redirection at today February 7, 2019, 6.29PM
And here are the alert messages displayed in Live Traffic.
And of course, no redirection were added afterwards.

February 7, 2019, 6:30 PM http://www.potoclips.com/fr/wp-json/redirection/v1/redirect/?orderby=position&_wpnonce=e051533752
GET REST API HTTP 200 OK 662 ms Details

2a02:1206:45b6:bc10:cd8f:717e:2bb2:d2d7
dynamic.wline.6rd.res.cust.swisscom.ch Opera on Macintosh Potoclips.com
Administrator, Keymaster
February 7, 2019, 6:30 PM http://www.potoclips.com/wp-json/redirection/v1/redirect/?orderby=position&_wpnonce=e051533752
GET HTTP 302 Found 312 ms
2a02:1206:45b6:bc10:cd8f:717e:2bb2:d2d7
dynamic.wline.6rd.res.cust.swisscom.ch Opera on Macintosh Potoclips.com
Administrator, Keymaster
February 7, 2019, 6:30 PM http://www.potoclips.com/fr/wp-json/redirection/v1/redirect/?orderby=id&_wpnonce=e051533752
GET REST API HTTP 200 OK 1221 ms
2a02:1206:45b6:bc10:cd8f:717e:2bb2:d2d7
dynamic.wline.6rd.res.cust.swisscom.ch Opera on Macintosh Potoclips.com
Administrator, Keymaster
February 7, 2019, 6:30 PM http://www.potoclips.com/fr/wp-json/redirection/v1/group/?_wpnonce=e051533752
GET REST API HTTP 200 OK 668 ms
2a02:1206:45b6:bc10:cd8f:717e:2bb2:d2d7
dynamic.wline.6rd.res.cust.swisscom.ch Opera on Macintosh Potoclips.com
Administrator, Keymaster
February 7, 2019, 6:30 PM http://www.potoclips.com/wp-json/redirection/v1/redirect/?orderby=id&_wpnonce=e051533752
GET HTTP 302 Found 358 ms
2a02:1206:45b6:bc10:cd8f:717e:2bb2:d2d7
dynamic.wline.6rd.res.cust.swisscom.ch Opera on Macintosh Potoclips.com
Administrator, Keymaster
February 7, 2019, 6:30 PM http://www.potoclips.com/wp-json/redirection/v1/group/?_wpnonce=e051533752
GET HTTP 302 Found 254 ms
2a02:1206:45b6:bc10:cd8f:717e:2bb2:d2d7
dynamic.wline.6rd.res.cust.swisscom.ch Opera on Macintosh Potoclips.com
Administrator, Keymaster
February 7, 2019, 6:30 PM http://www.potoclips.com/fr/wp-json/redirection/v1/redirect/?_wpnonce=e051533752
GET REST API HTTP 200 OK 592 ms
2a02:1206:45b6:bc10:cd8f:717e:2bb2:d2d7
dynamic.wline.6rd.res.cust.swisscom.ch Opera on Macintosh Potoclips.com
Administrator, Keymaster
February 7, 2019, 6:30 PM http://www.potoclips.com/wp-json/redirection/v1/redirect/?_wpnonce=e051533752
POST HTTP 302 Found 235 ms
2a02:1206:45b6:bc10:cd8f:717e:2bb2:d2d7
dynamic.wline.6rd.res.cust.swisscom.ch Opera on Macintosh Potoclips.com
Administrator, Keymaster
February 7, 2019, 6:29 PM http://www.potoclips.com/fr/wp-json/redirection/v1/redirect/?orderby=id&_wpnonce=e051533752
GET REST API HTTP 200 OK 2659 ms
2a02:1206:45b6:bc10:cd8f:717e:2bb2:d2d7
dynamic.wline.6rd.res.cust.swisscom.ch Opera on Macintosh Potoclips.com
Administrator, Keymaster
February 7, 2019, 6:29 PM http://www.potoclips.com/fr/wp-json/redirection/v1/group/?_wpnonce=e051533752
GET REST API HTTP 200 OK 1257 ms
2a02:1206:45b6:bc10:cd8f:717e:2bb2:d2d7
dynamic.wline.6rd.res.cust.swisscom.ch Opera on Macintosh Potoclips.com
Administrator, Keymaster
February 7, 2019, 6:29 PM http://www.potoclips.com/wp-json/redirection/v1/group/?_wpnonce=e051533752
GET HTTP 302 Found 424 ms
2a02:1206:45b6:bc10:cd8f:717e:2bb2:d2d7
dynamic.wline.6rd.res.cust.swisscom.ch Opera on Macintosh Potoclips.com
Administrator, Keymaster
February 7, 2019, 6:29 PM http://www.potoclips.com/wp-json/redirection/v1/redirect/?orderby=id&_wpnonce=e051533752
GET HTTP 302 Found 256 ms
2a02:1206:45b6:bc10:cd8f:717e:2bb2:d2d7
dynamic.wline.6rd.res.cust.swisscom.ch Opera on Macintosh Potoclips.com
Administrator, Keymaster

Thanks for your feedback !
Regards,
Potoman

Plugin Author gioni
(@gioni)

5 years, 2 months ago

Those are malformed REST API URLs. Anyway, add redirection to the “Allow these namespaces” setting field. See more: https://wpcerber.com/restrict-access-to-wordpress-rest-api/

Thread Starter potoman
(@potoman)

5 years, 2 months ago

Hello Gioni (@gioni),

Thanks for your reply. I will test it.

Generally speaking, what should I add to allow any request that comes from my website: wwww.potoclips.com ?

Thanks,
Potoman

Thread Starter potoman
(@potoman)

5 years, 2 months ago

For instance, the following request are generated by me with a plugin but there are denied.

2a02:1206:45b6:bc10:18d4:f66b:cd57:9ef
dynamic.wline.6rd.res.cust.swisscom.ch February 9, 2019, 12:59 PM
Probing for vulnerable PHP code Denied
URL: http://www.potoclips.com/fr/index.php

2a02:1206:45b6:bc10:18d4:f66b:cd57:9ef
dynamic.wline.6rd.res.cust.swisscom.ch February 9, 2019, 12:59 PM
Probing for vulnerable PHP code Denied
URL: http://www.potoclips.com/fr/index.php

Viewing 15 replies - 1 through 15 (of 16 total)

1 2 →

The topic ‘Cerber Vs Pinclone theme’ is closed to new replies.

Tags