• Resolved kelley_rao

    (@kelley_rao)


    Hello,

    First, let me say this is a very nice plugin. Pretty easy to implement “out of the box.” Kudos.

    Just a couple of observations, questions:

    1. Using the plugin, when I run a back up of my .htaccess file, it is 1KB and not a duplicate of the actual .htaccess file.

    2. When I run the DB backup, it opens a new window and nothing seems to happen? (FireFox browser).

    3. I have the CSS Brute Force block in place (very cool). Just curious, if I try to access the admin/login URL (wp-admin or wp-login.php) I am locked out (because I’m not using the secret URL for testing purposes). That’s great… but the lock out only lasts 15-20 minutes. Which is also good since I don’t want to lock myself out during this testing phase. This is not about using the wrong user/login, just visiting the login page.

    4. I did try to use the masked login URL, but that caused my site to deliver a page not found (maybe I needed to reset Perma links)?

    5. I notice in the newly created .htaccess none of the standard WP entries exist. Do I need to reset Perma links for this purpose, too?

    Last, will your plugin assist with errant queries from bots that are just fishing for files that don’t exist? These database queries take up a lot of resources, especially when you have lots of sites.

    Thanks once again,
    Kelley

    https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/

Viewing 12 replies - 1 through 12 (of 12 total)
  • Thread Starter kelley_rao

    (@kelley_rao)

    One more question…

    I have some other custom entries I’d like to add to the .htaccess. Will these get overwritten with any updates to the plugin or settings?

    Thanks again,
    Kelley

    Plugin Contributor mbrsolution

    (@mbrsolution)

    Hi Kelley, thank you for your questions. In regards to your questions.

    1) Can you elaborate a bit more on this question.

    2) Can you check your log files and report back.

    3) I am not sure if you are asking a question or stating what happens when you carry out this task.

    4) If you are referring tot he Brute Force settings for Rename login page. If you for example use the following http://www.mysite.com/specialword. Then when ever you try to log into your admin you must type the exact path as previously typed i.e. http://www.mysite.com/specialword.

    If you typed http://www.mysite.com/wp-admin or http://www.mysite.com/wp-login then you will get a page not found error.

    5) If you set new Permalink settings in your website or click on save Permalink settings in your website it should add those settings in your .htaccess file. Is this what you are referring too?

    6) Any custom settings that you add to your .htaccess file that are outside the entries created by the plugin will not be removed when you update the plugin.

    Another words anything outside the following will not be touched when you update the plugin.

    # BEGIN All In One WP Security
    # END All In One WP Security

    Please let me know if you need more information and you understand my replies.

    Kind regards

    Thread Starter kelley_rao

    (@kelley_rao)

    Thank you so much for the quick and detailed reply; pretty impressive!

    For the benefit of others:

    1. WP Security > Settings > .htaccess File When I click the Backup .htaccess File button and then go to my server to see this file, it contains just this:

    order deny,allow
    deny from all

    Which is not what the .htaccess in the site directory contains (not root, but public).

    2. OK but what should I check for?

    3. I was stating what happened, but now that I now how the other part works, I like that better. And it works perfect!

    4. See above. Works great!

    5. Yep 😉

    Did not see a reply to this:

    Last, will your plugin assist with errant queries from bots that are just fishing for files that don’t exist? These database queries take up a lot of resources, especially when you have lots of sites.

    6. Great. And it works.

    Thank you!

    Plugin Contributor mbrsolution

    (@mbrsolution)

    Hi sorry about missing one question, I think it was too early in the morning for me 🙂

    In regards to the following.

    2) Can you check to see if you see the following folder in WordPress backend…AIOWPS should create the following folder when you create a backup aiowps_backups

    And the location is.

    /yourwebsite/wp-content/aiowps_backups/
    Make sure the folder has the correct permissions 0755.

    In regards to your comment….

    Did not see a reply to this:

    Last, will your plugin assist with errant queries from bots that are just fishing for files that don’t exist? These database queries take up a lot of resources, especially when you have lots of sites.

    Yes it will.

    If you have any more questions please let me know.

    Regards

    Thread Starter kelley_rao

    (@kelley_rao)

    Thanks again!

    Yes, the folder is being created and the permissions are 755.

    The .htaccess is there, but is not a replicate of what resides in the root (/home) directory.

    Not critical by any means, but wanted to figure this out.

    Kindest,
    Kelley

    Plugin Contributor mbrsolution

    (@mbrsolution)

    Hi, so what is happening is that you cannot create a backup is that correct? Can you enable debug mode in WordPress and see what errors show up.

    Regards

    Thread Starter kelley_rao

    (@kelley_rao)

    Two things:

    1. When I create the backup .htaccess, it IS working. I thought it would be the actual .htaccess file in that folder. Instead, it’s a random file name that is saved as a .txt file. My mistake. Works perfectly,

    2. For the actual backups, Database Security > DB Backup when I click the Create DB Backup button, I get 500 Internal Server Error. This time I used IE vs. FF. If you want access to the site, send me an email and I’d be happy to provide credentials.

    Thanks again,
    Kelley

    Plugin Contributor mbrsolution

    (@mbrsolution)

    Hi Kelley, can you let me know how much memory is allocated to your WordPress?

    Have a look at this thread, they also had issues creating a backup. The solution they implemented might also work for you.

    Regards

    Thread Starter kelley_rao

    (@kelley_rao)

    Am checking with hosting provider. I want to say it’s 80MB. I don’t plan to use the backup feature (I do offsite backups to DropBox), but I am still curious if we can get it to work. So, I’ll keep at it.

    Thanks for all of your help so far!

    Kelley

    Thread Starter kelley_rao

    (@kelley_rao)

    Add this to .htaccess made it work just fine:

    php_value memory_limit 256M

    Thanks for ALL of your help. Terrific support.

    Kelley

    Plugin Contributor mbrsolution

    (@mbrsolution)

    Hi Kelley, I am happy to hear that your issue is finally resolved 🙂 well done.

    If you don’t need any more help with this issue can you mark this support thread as resolved.

    Thank you and enjoy the plugin 🙂

    Thread Starter kelley_rao

    (@kelley_rao)

    It’s a terrific plugin! Thank you.

Viewing 12 replies - 1 through 12 (of 12 total)
  • The topic ‘Set-Up Questions’ is closed to new replies.