dwinden
Forum Replies Created
-
I would be interested to hear which plugin is the culprit.
It’s probably a jQuery/javascript conflict.dwinden
I can reproduce this when I rename the better-wp-security/core/admin-pages/js/script.js file.
But this way none of the iTSec plugin Admin interface buttons will work since there are no click events. I think your issue is isolated with the Details link in the File Change History log.
dwinden
Try this:
- Make a copy of the better-wp-security/core/admin-pages/js/script.js file.
- Edit the script.js file.
- Scroll down all the way to the following line:
results.response = a;
- Add a new line right BEFORE the line above:
alert(JSON.stringify(a));
- Then try and reproduce the issue.
Update the topic with any info displayed.
dwinden
Just to determin whether any of the 2 settings mentioned earlier is causing the ERROR 500 msg you can manually remove the corresponding lines from the .htaccess file.
First manually remove the many many many “HackRepair.com Blacklist” lines.
If that does not make any difference remove the 2 “Disable PHP in Uploads” lines too.
Both of these settings add a RewriteCond/RewriteRule to the .htaccess file with a regular expression which could be causing your issue.
dwinden
To remove the IP from the database follow these instructions:
- Log into WordPress Dashboard as an administrator.
- Navigate to the Security->Settings menu option.
- Click on the Configure Settings button of the Banned Users module.
- Remove the offending IP from the Ban Hosts setting.
- And finally click on the Save Settings button.
Since the issue as reported in this topic seems to be solved please mark this topic as ‘resolved’.
Create a new topic for any other issue/question.
dwinden
Thank you for that explanation.
Try and manually remove the following 5 lines from the .htaccess file:
SetEnvIF REMOTE_ADDR “^2a00:1210:fffe:0?0?72:(0{0,4}:){0,2}(0{0,4})?:0?0?0?1$” DenyAccess
SetEnvIF X-FORWARDED-FOR “^2a00:1210:fffe:0?0?72:(0{0,4}:){0,2}(0{0,4})?:0?0?0?1$” DenyAccess
SetEnvIF X-CLUSTER-CLIENT-IP “^2a00:1210:fffe:0?0?72:(0{0,4}:){0,2}(0{0,4})?:0?0?0?1$” DenyAccessRequire not ip 2a00:1210:fffe:72::1
Deny from 2a00:1210:fffe:72::1
This is just to see whether this is the offending IP causing the 500 internal server error/The specified IP address is invalid log entry.
If this helps solve the 500 internal server error I’ll provide you with additional instructions to remove the IP from the database.
dwinden
Ask your hosting provider to increase the value of the php max_execution_time setting.
If that does not help try and disable File Change Detection.
dwinden
Please post the content of the /home/test123/public_html/.htaccess file.
What web server and what version of that web server is the website using ?
(eg. Apache 2.2.12)dwinden
As far as I’ve seen the wp-config.php file by default does not contain any php closing tag (?>).
Have a look at the wp-config-sample.php file …
Without a php closing tag in the wp-config.php file the chance of running into your issue is greatly reduced.
dwinden
@TZAL
Ok, so we did make some progress.
It turns out that the settings controlling the display of both the “what’s new” notice and the “Security Check” window are stored in the database (itsec-storage option) as part of the Global Settings module.
(The setting which controls the display of the “Get Free API Key” notice is not part of the Global Settings module).Display of the “what’s new” notice is controlled by the show_new_dashboard_notice setting.
Display of the “Security Check” window is controlled by the show_security_check setting.
In total there are 27 Global Settings stored in the database.
However only max 23 will show up under the Global Settings module.
2 settings will only display if you are using nginx web server and/or the infinitewp plugin. If you are using neither of these only 21 settings will show under the Global Settings module.So that leaves 27-23=4 extra settings.
2 of these are did_upgrade and log_info which are probably irrelevant for this issue. The other 2 I already mentioned: show_new_dashboard_notice and show security_check.I’m providing you with as much relevant info as possible as I’m convinced you will need to monitor these settings in your database in order to find out what is going wrong.
Earlier in this topic mcmito figured out that 1 of the 23 Global Settings
(Path to Log Files) was not getting validated when trying to save the Global Settings. This also prevented the show_new_dashboard_notice setting from being saved in the database as part of the Global Settings when closing the “What’s new” notice.I don’t think you are experiencing exactly the same issue, but something seems to be interfering with the Global Settings as saved in the database (itsec-storage option in wp_options table).
It could be a caching plugin or anything else.
Anyway I’m running out of options.
dwinden