Jelena

Sorry for confusion. It’s the same thing.

These tables are leftovers and since you don’t use Shield any longer, it’s safe to remove them.

• This reply was modified 1 year, 3 months ago by Jelena.

Hi,

Can you try these steps on any of your sites with this issue, please?

1. Clear and then disable browser cache.
2. Disable any browser extensions/add-ons, as they may be causing the issue.
3. Test to see if the problem is solved.

If not, then proceed with the below steps.

1. Use the forceoff method as detailed here. This will help you regain access while keeping the plugin active, allowing you to change settings and prevent further blocking.
2. Go to to the Login Zone and change “Cooldown Period” setting to e.g. 2 seconds.
3. Remove a “forceoff” file.

Once resolved, you can do this for your other sites as well.

Hope this helps.

Thanks so much for the update.

Could you try disabling all the headers options by configuring them as shown below?

1. Block iFrames: Off: iFrames not blocked
2. XSS Protection: Disable
3. Prevent Mime-Sniff: Disable
4. Referrer Policy: Disabled – Don’t Send This Header

Then, test if that resolves the issue.

Thanks.

Jelena

Hi Amanda,

Can you reactivate Shield and then deactivate caching plugin and force refresh your browser and retry, please?

If that doesn’t help, you can load customizer and then open up and review the web Console and/or Network tab (for AJAX/XHR requests). You may see errors there. This suggests something is going wrong with the request and there are errors being generated for some reason.

Let us know how it went.

Thanks.

Hi,

Sorry to hear you’re facing issues with that. Dealing with comment spam can definitely be a hassle.

We recommend checking out Shield’s “SPAM Protection” docs and setting up the options:
https://help.getshieldsecurity.com/article/257-introduction-to-the-comments-spam-protection-feature

Also, it would be good to go though this guide on stopping comment spam:
https://getshieldsecurity.com/blog/effective-tips-on-stopping-comment-spam-on-your-wordpress-website/

Hope you find this helpful in some way.

Hi Joseph,

Sorry to hear that.

Since their IP is whitelisted, they shouldn’t be blocked by Shield at all. For whitelisted IP addresses, it’s as if the entire plugin is turned off, meaning there are no restrictions for users associated with that IP whatsoever.

Make sure their IP address is accurate and not changing—confirm they are not attempting to log in from a different IP address.

The only Shield feature that displays a “404 Not Found” message is the “Hide WP Login & Admin Page” feature:
https://help.getshieldsecurity.com/category/284-hide-wp-login-page

For example, if your client’s IP is whitelisted and they try to load the renamed login URL, they’ll get a 404 error. However, this feature will not trigger Shield’s blocking offenses—they won’t be blocked. You can disable this feature if needed.

However, to find out why exactly the blocking is happening, best thing to do is checking the WP Activity Log and use the IP Address filter box at the top of the table to filter by the blocked IP address. You can log into the site and ask your client to reproduce the block so you can immediately check the Activity Log. If in any way their IP address is changing, ask them to visit this page and provide to you IP address printed there:
https://getshieldsecurity.com/my-ip/

The log will show all activities for that IP and the reason it was blocked. Based on this information, you can adjust Shield settings to prevent future blocks. If you’re unsure how to interpret any log entries, you may use this Glossary here.

You may also want to temporarily disable page caching (either plugin or system) and suggest your client clear their browser cache and cookies before retrying.

Hope this helps.

Hi,

You won’t be locked out. These features will be disabled once the plugin is deactivated, and there’s no need to restore settings before deactivating.

Regarding the error, it may be caused by missing or corrupted Shield files. You can try reinstalling it from a fresh .zip file. Download it here:
https://wordpress.org/plugins/wp-simple-firewall/

To reinstall, first deactivate and delete Shield from your WP site’s admin area (Plugins page). Then, install it again using the downloaded .zip file and activate it.
(when you delete Shield, all your previously saved settings will remain intact-stored in the database.)

Hope this helps.