mrppp

custom code-root htaccess-CUSTOM CODE TOP PHP/PHP.INI HANDLER/CACHE CODE Speed Boost Cache Code here

works now doh!!!!!!!!!!!

But i,m not using it, i have removed it, and i only had the server based one not the ip based one

The server based one works on another site with same set up

# BRUTE FORCE LOGIN PAGE PROTECTION
# Protects the Login page from SpamBots, HackerBots & Proxies
# that use Server Protocol HTTP/1.0 or a blank User Agent
RewriteCond %{REQUEST_URI} ^(/wp-login\.php|.*wp-login\.php.*)$
RewriteCond %{HTTP_USER_AGENT} ^$ [OR]
RewriteCond %{THE_REQUEST} HTTP/1\.0$ [OR]
RewriteCond %{SERVER_PROTOCOL} HTTP/1\.0$
RewriteRule ^(.*)$ - [F,L]

Should that one work with that protocol? even though i have removed it

Found this will do a search
Solution: There are 2 relevant fields to check for Event Code: WPADMIN-SBR.. The HTTP_REFERER and REQUEST_URI logging fields. If the Referer or Request URI has /wp-admin/ in the path then these are things that are being blocked by BPS in the wp-admin .htaccess file and a Skip/Bypass rule needs to be created for the wp-admin .htaccess file by adding it to BPS Custom Code. Typically either a wp-admin file needs to be whitelisted in the Skip/Bypass rule or a Query String needs to be whitelisted. Searching the Forum will produce any documented solutions for wp-admin Skip/Bypass rules by searching using the plugin’s name as the search word/term.

Can’t see anything, as mine is not a plugin it is HTTP_REFERER: http://www.xxxxxxx.co.uk/wp-admin/admin.php

Ok i,m being told “Server version: Apache/2.2.25 (Unix) which is newer as compared to the HTTP/1.1.
“
Means nothing to me but does that sound right?
they also said use

Order Deny,Allow
Deny from all
Allow from 127.0.0.1 # Exact IP
Allow from 127. # Allows any IP where the first octet starts with 127

in htaccess

Thanks, i have raised a ticket see what they say, normally pretty good

Bum! i,m one who gets the 403 so guess i can’t use it