Support » Plugin: Wordfence Security - Firewall & Malware Scan » Forum in Subfolder blocks admin

  • Resolved pothound

    (@pothound)


    Hi Support
    I have a forum in a subfolder. Admin of that forum are blocked now by Wordfence.
    I tried to add this code to my htaccess file but no success.

    <IfModule mod_php7.c>
    php_value auto_prepend_file none
    </IfModule>

    What can I do?

    The page I need help with: [log in to see the link]

Viewing 7 replies - 1 through 7 (of 7 total)
  • Plugin Support wfpeter

    (@wfpeter)

    Hi @pothound, thanks for getting in touch.

    Are you adding the above code to a separate .htaccess in the directory you’d like skipped by Wordfence rather than your main site’s .htaccess (which would appear in the root directory)?

    I would also consider Learning Mode as the operations on the forum might be triggering false-positives that see admins experiencing blocks.

    From the Wordfence Dashboard click on Manage WAF. Then you will see Basic Firewall Options > Web Application Firewall Status. Change the option to Learning Mode. Now perform the actions that were causing issues, such as visiting the forums, logging in as an admin and attempting to post/edit. This will help Wordfence learn that these actions are normal and it will allow them in the future. After you have finished performing the actions, switch the WAF from Learning Mode back to Enabled and Protecting. Now test to see if these actions work correctly.

    Thanks,

    Peter.

    Thread Starter pothound

    (@pothound)

    Hi @wfpeter Thank you so much for your quick reply, that worked!
    Have a great weekend!

    That was too fast. I logged out of WordPress and the problem is back again…..

    • This reply was modified 1 year ago by pothound.
    Plugin Support wfpeter

    (@wfpeter)

    Hi @pothound, so close!

    I wonder if you also need to browse the forum as a non-signed in (or non-administrative) user during the period of Learning Mode as there might be different actions at work that weren’t unblocked whilst you were logged in.

    Let me know how you get on with that. If it doesn’t work, could you let me know which forum you’re using and the subdirectory you use to access it so I can run a few tests? The relative path is OK as I already have your site URL.

    Peter

    Thread Starter pothound

    (@pothound)

    Hi @wfpeter done that, but still no success.

    Interesting is that as ‘admin’ I can access the
    – Moderator Control Panel
    but not the
    – Administration Control Panel

    I installed the phpBB forum, it is located in the subfolder
    /mentorship

    Thanks!

    Plugin Support wfpeter

    (@wfpeter)

    Hi @pothound,

    When you receive the blocks in phpBB, do you also see the attempts logged with the same timestamp in Wordfence > Tools > Live Traffic? This should give us a reason behind the blocks. If you’d find it easier to show me, feel free to support any information by providing URLs to screenshots on an image sharing site such as Snipboard – you should also be able to obscure sensitive information.

    Thanks,

    Peter.

    Thread Starter pothound

    (@pothound)

    Hi @wfpeter yes it does! And that is weird, see the print screen:
    http://jjrtrust.com/login-issues.jpg

    The username is the one I use for the WordPress site. The username I use on the phpBB Forum is different!
    Why does it feel I tried to log in with the wordpress username?

    Plugin Support wfpeter

    (@wfpeter)

    Hi @pothound,

    Those appear to be showing successful logins from the “Firewall” dashboard page, which I’d associate with signing in as admin at the regular WordPress login page before attempting to access the forums. The only issue is, this doesn’t log other kinds of logins where the wp-admin/wp-login page isn’t involved (such as the forums themselves).

    In Wordfence > Tools > Live Traffic make sure the toggle is set to “ALL TRAFFIC” and attempt to access the forums in a way that would present the Wordfence block page. You should then be able to see entries here and expand the entry using the “eye” icon. This should explain why the block page was triggered, if you show me, I can help interpret what is happening for you.

    Thanks,

    Peter.

Viewing 7 replies - 1 through 7 (of 7 total)
  • The topic ‘Forum in Subfolder blocks admin’ is closed to new replies.