WordPress.org

Support

Support » Plugins and Hacks » [Resolved] question about security log

[Resolved] question about security log

  • Hello – I have been getting some errors on my log too and I just don’t understand them. It looks like it has to do with my images but when I check the file path,the file is there and I have also checked my sites with sucuri.

    Do you have a resource or recommendation of something I can read that can help me understand why I am getting errors and correct any error?

    They are all 403 errors.

    Thanks

    http://wordpress.org/extend/plugins/bulletproof-security/

Viewing 10 replies - 1 through 10 (of 10 total)
  • Plugin Author AITpro

    @aitpro

    The BulletProof Security Forum explains generally what security log / http error log errors mean. Use the Search feature really works on the Forum site – it is a beefed up search feature that actually returns relevant search results. Imagine that. 😉

    Post one of the errors that is occuring regarding images files and I will tell you what it means. Please do not post your entire error log in the BulletProof Security Forum. 😉

    BulletProof Security Forum: http://forum.ait-pro.com/

    Also BPS .47.9 will be released in a few minutes and it has a new feature – Turn Error Logging Off. LOL

    Thanks. I did not really know you had such a comprehensive forum. I’ll be a regular. Once my sites take off (and they will), you have me as a paying customer!

    I’ve read all the notes on this site and had set up BPS pretty good but I am still learning about all the codes. All I get is that my host understood the request but did not fulfill it.

    I figured I shouldn’t post the log so here’s a snippet – they are all similar. If you can explain it easy terms, I’d appreciate it 🙂 Yx

    403 Error Logged – February 3, 2013 – 10:01 pm <<<<<<<<<<<
    REMOTE_ADDR: 70.248.122.182
    Host Name: ppp-70-248-122-182.dsl.rcsntx.swbell.net
    HTTP_CLIENT_IP:
    HTTP_FORWARDED:
    HTTP_X_FORWARDED_FOR: 70.248.122.182
    HTTP_X_CLUSTER_CLIENT_IP:
    REQUEST_METHOD: GET
    HTTP_REFERER: http://search.yahoo.com/search;_ylt=AlGOmDF5UmJnDRKaqrAeKMObvZx4?p=Rhoda+Aikman&toggle=1&cop=mss&ei=UTF-8&fr=yfp-t-701
    REQUEST_URI: /wp-content/uploads/2012/06/myphotoname
    QUERY_STRING:
    HTTP_USER_AGENT: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; FunWebProducts)

    The images are all from searches done on bing or google. I copies one of the requests, found my image and when I try to click on the link which should take you to my site, there is a 404 error

    I was on the forum (nice forum!) and saw the 403 errors are because of the permissions in htaccess file. Is that what is happening in my case?

    I also saw this

    Plugin or Theme script stored in your uploads folder being blocked by Uploads Anti-Exploit Guard

    It looks like the errors are all from the uploads so I am on your forum reading for solutions but they seem to be for the pro version so if you point me in the right direction, I will work on resolving.

    Plugin Author AITpro

    @aitpro

    Well I had to do something about being able to find answers to problems I have already solved. It was taking me forever to find the answers to things I had already posted here or on my Blog site. Most of the time i just gave up looking and answered the questions all over again from scratch. ugh 🙁

    I am tickled pink with this BuddyPress Search plugin – BuddyPress Global Unified Search Plugin. IT ROCKS!!! Everything is available all of the time with a click of the mouse! SWEET!

    In your logged error you see this:

    REQUEST_URI: /wp-content/uploads/2012/06/myphotoname

    This is not a valid file path because the image file name myphotoname does not have a valid file extension. It should be myphotoname.jpg or have some other valid file extension.

    I was reading about buddy Press – looks cool.

    OK well I know it has to do with images.

    I clicked on a few and get a forbidden but i don’t know why it’s happening so off to more research 🙂

    Thanks

    Plugin Author AITpro

    @aitpro

    The Request URI means your URL. The URL is not valid that is why you are getting a 403 error. This would be a 404 error anywhere else on your site except for the uploads folder. The uploads folder is a special case. You CANNOT point to a folder it MUST be a valid URL to an image file or else you will get a 403 error.

    not valid: /wp-content/uploads/2012/06/myphotoname
    valid: /wp-content/uploads/2012/06/myphotoname.jpg

    Plugin Author AITpro

    @aitpro

    Hmm actually I believe that this issue is the same issue that is going on here in this Thread >>> http://wordpress.org/support/topic/request-exceeded-the-limit-of-10-internal-redirects?replies=21

    Personally I like the fact that yahoo images is not grabbing my site and is only grabbing image files, but other folks are probably ok with that. Try the solution in that Thread and let me know if the issue goes away.

    Thank you so very much! That is EXACTLY the issue I am having. It’s on both sites that I am on a VPS with. I just commented the line out.

    I will let you know if that does not correct it but, based on that thread, it should.

    Note – I am still receiving the same errors. I did not comments out the code but rather modified it as suggested. I will try to comment the line out.

    Plugin Author AITpro

    @aitpro

    Post the latest logged error. Maybe this is another problem with Yahoo images. 😉

Viewing 10 replies - 1 through 10 (of 10 total)
  • The topic ‘[Resolved] question about security log’ is closed to new replies.