I got locked out of my site as well.. I had to go in and manually delete the firewall. But then when I tried to reinstall it locks me back out I want to use this product but I can’t figure out how to change the settings if everytime i activate I am booted out and locked out.
Plugin Author
Paul
(@paultgoodchild)
In the URL in your browser, remove the whole thing except for the actual address of your admin area: http://www.domain.extension/wp-admin/
Can you take a look at this article:
https://icontrolwp.freshdesk.com/support/solutions/articles/3000000959
In the URL in your browser, remove the whole thing except for the actual address of your admin area: http://www.domain.extension/wp-admin/
Can you take a look at this article:
https://icontrolwp.freshdesk.com/support/solutions/articles/3000000959
Yes that works, but it still doesnt log me in. When i login it redirects me to the wp-admin page
I tried some simple inspect element hacking hiding the field with the redirection. I set it to /home/. Still didnt work
I got this email after that
WordPress Simple Firewall has blocked a page visit to your site.
Log details for this visitor are below:
– IP Address: 31.41.59.26
– Page parameter failed firewall check. The offending parameter was “redirect_to” with a value of “http://www.domain.extension/home/”.
– Firewall Trigger: Leading Schema.
– Firewall Block Response: Visitor was sent HOME.
You can look up the offending IP Address here: http://ip-lookup.net/?ip=31.41.59.26
ok i found out how to get past this crap
just inspect element and take out the entire redirection thing
a note to the devs…
I found out why the bug is happening. It happens when the client redirects to a page (because of wordpress) while two factor authentication is still going on. This triggers the firewall doing a die, die with message, 404 or home page
Plugin Author
Paul
(@paultgoodchild)
The problem you have is that the Firewall is blocking “leading schema”. To remove this problem altogether, under the Firewall module, uncheck the option to block “leading schema”.
It isn’t a bug – your firewall is currently configured to block any parameters with http, https etc.
I get this error message. The firewall is blocking me. How do I get in to un-check that option you just posted about if I can’t even log in?. If that is my problem.
You were blocked by the WordPress Simple Firewall. Something in the URL, Form or Cookie data wasn’t appropriate.
Thanks
Plugin Author
Paul
(@paultgoodchild)
You can temporarily force off the plugins operations using this feature outlined here:
https://icontrolwp.freshdesk.com/support/solutions/articles/3000000959
Thanks for the quick reply. But anyway, that force off option didn’t work so I had to rename the WSF plugin. So now what, should I rename it back now that I’m in? What are further instructions?
Thanks for your help.
Plugin Author
Paul
(@paultgoodchild)
What was the exact, full name of the file you created and what folder did you create it in?
If you reenable the plugin it will block you again, for whatever reason it was blocking you before.
I just copied and pasted what it said to enter.
ftpes://mysite@ftp.mysite.com/public_html/mysite.com/wp-content/plugins/wp-simple-firewall1/forceOff
I renamed the firewall by placing a 1 after it.
Plugin Author
Paul
(@paultgoodchild)
And the file is definitely there?
Yes. I just copied it from the FTP. The only thing I changed on that previous post was where you see mysite.
Plugin Author
Paul
(@paultgoodchild)
I have no idea why the forceoff wouldn’t work for you… unless reading certain files from disk is restricted on your host. This has been known to happen…
I was waiting for further instructions on how to proceed.
Plugin Author
Paul
(@paultgoodchild)
You can try re-enabling the plugin, but if you get locked out, the only way forward is to manually delete the plugin options. If you want to try that after you get locked out, let me know.
