.htaccess modified?

  • Resolved zzzaaabbb

    (@finlanderid)


    8 years, 10 months ago

    Question is about Firewall.

    I have standard Apache mod_php, so no user.ini. My custom php.ini is one directory above public, in a conf directory. It loads after the host’s php.ini. The custom php.ini is now correctly pre-pending the WAF bootstrap.

    My question is this: I enabled Extended Protection (aka Optimize) for Firewall. Based on the steps of that process, I was expecting to see a modification to .htaccess, but no modification occurred.

    Wordfence is reporting that Extended Protection is now enabled. Everything seems normal, but should there have been modifications to .htaccess, that did not occur?

    I’m just sorta wondering, as I can’t locate the exact code of those modifications anywhere online, to determine by examining them, if they are needed or not.

    Thanks.

Viewing 4 replies - 1 through 4 (of 4 total)
  • wfyann

    (@wfyann)

    8 years, 10 months ago

    Hi @finlanderid,

    Did you optimize the firewall by adding the auto_prepend_file = '/path/to/site/wordfence-waf.php' directly into the php.ini file?

    Or did you carry out the procedure via the admin interface?
    If so, can you confirm you’re looking at the .htaccess file located at the root of your site?

    Thread Starter zzzaaabbb

    (@finlanderid)

    8 years, 10 months ago

    Thanks for your reply.

    Correct, I manually added the prepend line to my php.ini. The automated process could not find the site-specific php.ini, because it is one directory up from ‘public’ and in a directory called conf.

    Correct, the admin interface did not do it for me, and, yes, I am looking at .htaccess in public root.

    Presumably, no alteration to .htaccess is needed (none was made), when prepend line is added manually to php.ini? That was my guess, and my original post was to confirm that suspicion, if true.

    But if public root .htaccess should have been modified under those conditions, please let me know if should do it manually. Again, though, things seem to be working fine.

    • This reply was modified 8 years, 10 months ago by zzzaaabbb.
    wfyann

    (@wfyann)

    8 years, 10 months ago

    Hi @finlanderid,

    Indeed, if younmanually added the auto_prepend_file directive to the php.ini file, the .htaccess won’t be updated with the WAF information.

    Thread Starter zzzaaabbb

    (@finlanderid)

    8 years, 10 months ago

    Thank you for clarification!

Viewing 4 replies - 1 through 4 (of 4 total)

The topic ‘.htaccess modified?’ is closed to new replies.