WordPress.org

Support

Support » Plugins and Hacks » BulletProof Security » [Resolved] [Plugin: BulletProof Security] BPS Security Conflicts With A Plugin

[Resolved] [Plugin: BulletProof Security] BPS Security Conflicts With A Plugin

Viewing 3 replies - 1 through 3 (of 3 total)
  • you can see it here: http://www.ml33913.com/realestate/

    Run any query and you see the 403 error. Now, when I deactivate it, it works just fine.

    Plugin Author AITpro

    @aitpro

    The Square Brackets / ASCII %5B and %5D characters are being blocked in your Query string for this plugin.

    ?pclass%5B%5D=1&sortby=Price&sorttype=DESC&action=searchresults&action=searchresults&page_id=1015

    You will need to modify these BPS security filters in your Root .htaccess file.

    Before modification
    RewriteCond %{QUERY_STRING} ^.*(\[|\]|\(|\)|<|>|%3c|%3e|%5b|%5d).* [NC,OR]
    RewriteCond %{QUERY_STRING} ^.*(\x00|\x04|\x08|\x0d|\x1b|\x20|\x3c|\x3e|\x5b|\x5d|\x7f).* [NC,OR]
    
    After modification
    RewriteCond %{QUERY_STRING} ^.*(\(|\)|<|>|%3c|%3e).* [NC,OR]
    RewriteCond %{QUERY_STRING} ^.*(\x00|\x04|\x08|\x0d|\x1b|\x20|\x3c|\x3e|\x7f).* [NC,OR]

    that did the trick. Thank you so much!

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘[Resolved] [Plugin: BulletProof Security] BPS Security Conflicts With A Plugin’ is closed to new replies.
Skip to toolbar