Support » Plugin: Wordfence Security - Firewall, Malware Scan, and Login Security » How to remove auto_prepend_file

  • How to remove auto_prepend_file from php.ini when one has no access to that file on the host?

    After removing wordfence i want to cleanup and can not remove file:
    /mnt/web208/b3/15/51893315/htdocs/opajaap/beta/wordfence-waf.php
    due to the php.ini modified by wordfence.

    At de-activation this plugin should undo this kind of drastic changes itsself.

Viewing 4 replies - 1 through 4 (of 4 total)
  • Hi @opajaap,

    I’m sorry you’re having this issue.

    Could you please:

    • Go to the Wordfence Tools page
    • Click the Diagnostics tab
    • In the Other Tests section, click the link that reads “Click to view your system’s configuration in a new window”

    The “Loaded Configuration File” parameter will show the path to the php.ini file

    In case you don’t have (sufficient) access to this file (for example, via FTP) in order to remove the Wordfence firewall optimization information, I suggest you contact your hosting provider and ask them if they can perform the modification.

    Thread Starter Jacob N. Breetvelt

    (@opajaap)

    Thank you for this info. I can access the php.ini file now, but it reads:

    .
    .
    .
    .
    ; Automatically add files before PHP document.
    ; http://php.net/auto-prepend-file
    auto_prepend_file =
    .
    .
    .

    The phpinfo() function shows your file only as local value:

    Core
    PHP Version 	7.0.21
    Directive	Local Value	Master Value
    allow_url_fopen	On	On
    allow_url_include	Off	Off
    arg_separator.input	&	&
    arg_separator.output	&	&
    auto_append_file	no value	no value
    auto_globals_jit	On	On
    auto_prepend_file	/mnt/web208/b3/15/51893315/htdocs/opajaap/beta/wordfence-waf.php	no value
    

    So, there must be somewhere else a call to ini_set() that adds the auto_prepend_file, even when wordfence has been de-activated.
    Please tell me where or how to revert this.

    Thread Starter Jacob N. Breetvelt

    (@opajaap)

    I found this file:

    /mnt/web208/b3/15/51893315/htdocs/opajaap/beta/.user.ini with content:

    ; Wordfence WAF
    auto_prepend_file = '/mnt/web208/b3/15/51893315/htdocs/opajaap/beta/wordfence-waf.php'
    ; END Wordfence WAF
    

    Removing the file solved the problem.
    Would be nice if you included this in the documentation.

    Hi @opajaap,

    Thanks for letting us know. I’m glad you managed to solve the problem.

    Indeed depending on your environment, the Wordfence firewall information can be included in the .htaccess, .user.ini, or php.ini files.

    In order to disable the auto_prepend_file directive, the code would have to be manually removed from the appropriate file.

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘How to remove auto_prepend_file’ is closed to new replies.