WordPress editor blocked

  • Resolved wsoftware

    (@wsoftware)


    9 years, 6 months ago

    When I did a update to your latest version 5.5.4 (from 5.4.3) I discovered that I can’t save the child theme css through the Editor. See the audit trail below.

    I tried to disable the firewall rule “Block SQL Querys” but that did not help. Beside that rule I only have the rules “Block catalogtraverse” and “Block field trancation attacks”. I saw a option on the Whitelist page that you can allow administrators, is that the correct way to go or is there some other solution?

    Audit trail error message: (in swedish)

    Sidans parametrar misslyckades brandvägg kontroll. Felande parametrar var newcontent med en värde av /* Theme Name: Parabola child Description: Author: Peter Wallman Template: parabola (optional values you can add: Theme URI, Author URI, Version) */ @import url(“../parabola/style.css”); /* Större text i topmenu */ .topmenu { font-size: 14px; } /* Engelsk ikon i toppmeny */ .topmenu ul li a:before { content: url(/wp-content/uploads/english-flag-20px.png); border: 0; } /* Ej “uppercase” i rubriken. */ #site-title a { text-transform: none; font-weight: normal; } /* Bredare menyboxar */ #access a span { padding: 7px 16px; } /* Döljer temats credit-line */ #footer2 nav+div { display: none; } /* Centrerar min credit-line */ #myCredit { text-align: center; float: none; clear: both; margin: 5px auto 0; } /* Fet stil på Captcha-text */ .cptch_block label { font-weight: bold; } /* Större knapp på kontaktformuläret */ .ufo-cell-center button { width: 100px; height: 30px; font-weight: bold; }. Brandvägg trigg: Directory Traversal Brandvägg block svarar: Besökare kopplingen dödades med wp_die() och ett meddelande.

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author Paul

    (@paultgoodchild)

    9 years, 6 months ago

    It’s triggering “Directory Traversal” judging from the audit trail, so you can either temporarily uncheck that option, or enable administrator white list. I’d go with the first.

    But honestly, best practices wouldn’t see you edit directly on the site like that, but instead make the edit and upload it.

    Hope that helps.

    Thread Starter wsoftware

    (@wsoftware)

    9 years, 6 months ago

    Ah, sorry. Now I see it, didn’t read the whole message appently =)

    I like to keep it simple with WordPress css editing and have not always a FTP client in reach. I guess a lot of people do the same through the editor. To disable and enable that rule every time sounds to much work so I will go with the administrator white list. Any obvious downside with that you know about?

    Plugin Author Paul

    (@paultgoodchild)

    9 years, 6 months ago

    It just means that something could get missed somehow. But if you’re careful, you should probably be fine.

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘WordPress editor blocked’ is closed to new replies.