Title: djason's Replies | WordPress.org --- # djason [ ](https://wordpress.org/support/users/djason/) * [Profile](https://wordpress.org/support/users/djason/) * [Topics Started](https://wordpress.org/support/users/djason/topics/) * [Replies Created](https://wordpress.org/support/users/djason/replies/) * [Reviews Written](https://wordpress.org/support/users/djason/reviews/) * [Topics Replied To](https://wordpress.org/support/users/djason/replied-to/) * [Engagements](https://wordpress.org/support/users/djason/engagements/) * [Favorites](https://wordpress.org/support/users/djason/favorites/) Search replies: ## Forum Replies Created Viewing 12 replies - 1 through 12 (of 12 total) * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Before And After: Lead Capture Forms For Wordpress] PHP session warning](https://wordpress.org/support/topic/php-session-warning-2/) * Thread Starter [djason](https://wordpress.org/support/users/djason/) * (@djason) * [7 years, 7 months ago](https://wordpress.org/support/topic/php-session-warning-2/#post-11264859) * Thanks. I talked to our host and they made the following change (for anyone else with the same issue). The errors have gone away. * In the site’s php.ini file, add: * session.save_path = “/tmp” * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Wordfence Security - Firewall, Malware Scan, and Login Security] Disable dashboard notifications](https://wordpress.org/support/topic/disable-dashboard-notifications/) * [djason](https://wordpress.org/support/users/djason/) * (@djason) * [9 years, 8 months ago](https://wordpress.org/support/topic/disable-dashboard-notifications/#post-8800930) * Agree, I don’t need notifications that updates are available. WordPress already does that. * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Wordfence Security - Firewall, Malware Scan, and Login Security] Throttling besting blocking](https://wordpress.org/support/topic/throttling-besting-blocking-2/) * Thread Starter [djason](https://wordpress.org/support/users/djason/) * (@djason) * [9 years, 11 months ago](https://wordpress.org/support/topic/throttling-besting-blocking-2/#post-8381614) * Ok, I understand. Thanks for your patience. The confusion arrives from Wordfence’s two different uses of “block”. The rate limiting rule’s “block” is handled differently( not htaccess). * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Wordfence Security - Firewall, Malware Scan, and Login Security] Throttling besting blocking](https://wordpress.org/support/topic/throttling-besting-blocking-2/) * Thread Starter [djason](https://wordpress.org/support/users/djason/) * (@djason) * [9 years, 11 months ago](https://wordpress.org/support/topic/throttling-besting-blocking-2/#post-8364424) * So this is partially moot since Falcon is being discontinued, which I just found out about today. This is very disappointing. I spent countless hours researching caching and now I will need to do it over again. However, we won’t be upgrading anytime soon because of the effort so I still need to understand and what’s going on. And it might apply in the future. * That answers part of my question, but the other part still seems to conflict with the documentation: [https://docs.wordfence.com/en/Falcon_Cache#Falcon_Engine](https://docs.wordfence.com/en/Falcon_Cache#Falcon_Engine) * “With Falcon enabled we block IP’s in your .htaccess” * However, as I understand it, if something is blocked in the htaccess, then the request will never even make it Wordfence, so it wouldn’t be able to log the attack. Or do only *manual* blocks go in the htaccess? Thanks, we’re close! * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Wordfence Security - Firewall, Malware Scan, and Login Security] Throttling besting blocking](https://wordpress.org/support/topic/throttling-besting-blocking-2/) * Thread Starter [djason](https://wordpress.org/support/users/djason/) * (@djason) * [9 years, 11 months ago](https://wordpress.org/support/topic/throttling-besting-blocking-2/#post-8335493) * Let me clarify. I haven’t looked at this since the original post so I am going on memory here. We are using the Falcon engine so when an IP is blocked, the block is set in the htaccess. When the person breaks a firewall rule, WF states it’s blocking the IP. If the firewall rule is broken *after* they are being throttled, there is no block in the htaccess. If a firewall rule is broken *before* they are throttled, the block *does* show in the htaccess file. If you need logs or screenshots or something for me to show this, I can, but it may take awhile, esp. since I would need find an occurence of this. * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Wordfence Security - Firewall, Malware Scan, and Login Security] Throttling besting blocking](https://wordpress.org/support/topic/throttling-besting-blocking/) * Thread Starter [djason](https://wordpress.org/support/users/djason/) * (@djason) * [10 years ago](https://wordpress.org/support/topic/throttling-besting-blocking/#post-8249081) * Bump. Still seeing the same issue. * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Wordfence Security - Firewall, Malware Scan, and Login Security] Throttling besting blocking](https://wordpress.org/support/topic/throttling-besting-blocking/) * Thread Starter [djason](https://wordpress.org/support/users/djason/) * (@djason) * [10 years ago](https://wordpress.org/support/topic/throttling-besting-blocking/#post-8203341) * Any thoughts? * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Wordfence Security - Firewall, Malware Scan, and Login Security] Suspicious Process Alerts on VPS](https://wordpress.org/support/topic/suspicious-process-alerts-on-vps/) * [djason](https://wordpress.org/support/users/djason/) * (@djason) * [10 years, 1 month ago](https://wordpress.org/support/topic/suspicious-process-alerts-on-vps/#post-8178237) * I believe admin-ajax is called when someone is looking at the Wordfence admin pages. By default, it refreshes every 2 seconds. This is what i saw in my Apache log, too. If you change the refresh too something less frequent, the messages might stop. * [https://docs.wordfence.com/en/Wordfence_options#Update_interval_in_seconds](https://docs.wordfence.com/en/Wordfence_options#Update_interval_in_seconds) * (I was looking for a simliar topic because sometimes the scan is flagged as suscpicous) * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Wordfence Security - Firewall, Malware Scan, and Login Security] WordPress blocks DDos but still Crashes Server](https://wordpress.org/support/topic/wordpress-blocks-ddos-but-still-crashes-server/) * [djason](https://wordpress.org/support/users/djason/) * (@djason) * [10 years, 1 month ago](https://wordpress.org/support/topic/wordpress-blocks-ddos-but-still-crashes-server/#post-8165506) * If you are using the Wordfence Falcon caching engine, the block should be in your htaccess file so that requests from the IP never even make it wordpress. * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Wordfence Security - Firewall, Malware Scan, and Login Security] Firewall Sync Is Excesive](https://wordpress.org/support/topic/firewall-sync-is-excesive/) * [djason](https://wordpress.org/support/users/djason/) * (@djason) * [10 years, 1 month ago](https://wordpress.org/support/topic/firewall-sync-is-excesive/page/2/#post-8165440) * Anyone? I don’t know if it’s WordPress’ new forum sorting order, but after I posted the thread was not listed on the first page or two. * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Wordfence Security - Firewall, Malware Scan, and Login Security] Firewall Sync Is Excesive](https://wordpress.org/support/topic/firewall-sync-is-excesive/) * [djason](https://wordpress.org/support/users/djason/) * (@djason) * [10 years, 1 month ago](https://wordpress.org/support/topic/firewall-sync-is-excesive/page/2/#post-8155662) * I am seeing the same issue on our main site, with multiple hits per second sometimes. What exactly is the syncAttackData doing? Is it a core feature or something we can disable? I haven’t checked the logs for all our sites, but the one site that I know is having this issue is also the only one that sees a substantial (for us) amount of malicious activity. We are using 6.1.14 on WP 4.5.3. * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[BackWPup – WordPress Backup & Restore Plugin] Cron job starts only after login to admin panel](https://wordpress.org/support/topic/cron-job-starts-only-after-login-to-admin-panel/) * [djason](https://wordpress.org/support/users/djason/) * (@djason) * [13 years, 4 months ago](https://wordpress.org/support/topic/cron-job-starts-only-after-login-to-admin-panel/#post-3783375) * I am having the same problem. The issues seems to be wp_cron does not run in the background: * [http://wordpress.org/support/topic/set-cron-job-in-my-plugins?replies=4](http://wordpress.org/support/topic/set-cron-job-in-my-plugins?replies=4) * I did not see this on my production site because I use a monitoring service to check it every 5 minutes. However on my staging site, it was only running when someone accessed the site. * If you don’t have a site that is constantly being accessed, it looks like you’ll need to select one of the other job start options or set up a monitoring tool, which seems to work well, though it’s not exact. Plus or minus a few minutes. Viewing 12 replies - 1 through 12 (of 12 total)