phonyroyal
Forum Replies Created
-
Thanks Margaret. Could that be caused by a rewrite rule in .htaccess? Perhaps one of these?
# BEGIN Really Simple Security Redirect <IfModule mod_rewrite.c> RewriteEngine on RewriteCond %{HTTP_USER_AGENT} !lscache_runner [NC] RewriteCond %{HTTP:X-Forwarded-Proto} !https RewriteRule ^(.*)$ https://%{HTTP_HOST}/$1 [R=301,L] </IfModule> # END Really Simple Security Redirect # Really Simple SSL <IfModule mod_rewrite.c> RewriteEngine on RewriteCond %{HTTPS} !=on [NC] RewriteRule ^(.*)$ https://%{HTTP_HOST}/$1 [R=301,L] </IfModule> # End Really Simple SSL #BEGIN Really Simple SSL LETS ENCRYPT #RewriteRule ^.well-known/(.*)$ - [L] #END Really Simple SSL LETS ENCRYPT # BEGIN WordPress # The directives (lines) between "BEGIN WordPress" and "END WordPress" are # dynamically generated, and should only be modified via WordPress filters. # Any changes to the directives between these markers will be overwritten. <IfModule mod_rewrite.c> RewriteEngine On RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}] RewriteBase / RewriteRule ^index\.php$ - [L] RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteRule . /index.php [L] </IfModule> # END WordPress # Wordfence WAF <Files ".user.ini"> <IfModule mod_authz_core.c> Require all denied </IfModule> <IfModule !mod_authz_core.c> Order deny,allow Deny from all </IfModule> </Files> # END Wordfence WAF@wfpeter – Hi, do you have any feedback on the diagnostic report I sent about the “Log In with a Passkey” button not working?
ThanksHi Peter,
Thanak for following up. The diagnostic report has been sent.
Windows 11 Settings -> Accounts -> Passkeys lists the passkey created for the site using WordFence, so there is a local passkey (not saved in something like LastPass).
When visiting https://<sitename.com>/wp-login.php the WordPress login page displays fields for username, password, remember me, Log In button and then OR “Log In with a Passkey” button. When this is clicked the Windows Hello fingerprint prompt is not displayed. Password logon with 2FA is still used but a passkey would be more convenient.
Thanks
I am still receiving the very, very lengthy GDPR-cookie-compliance release update emails, despite having no/zero/nada subscriptions listed in my profile at: https://wordpress.org/support/users/phonyroyal/subscriptions/
Today “[WordPress Plugin][3548570] gdpr-cookie-compliance: Version 5.0.13 released” was received and I cannot figure out why.
How do I stop these? Where else can I check for subscriptions?
Thanks
Thanks!
Forum: Fixing WordPress
In reply to: Cannot remove languageThanks, but there’s no language line in wp-config.phpd despite the comment at the top that says:
This file contains the following configurations: Localized language
Shouldn’t the EN-ZA database entries rather be deleted than renamed? Aren’t these orphaned entries?
Is there any manual process to fully delete a language? I’m sure there used to be a Delete option in the General drop-down language list some years back.
@mohammedeisa Uninstalling (with delete all settings/data) and reinstalling didn’t help. There is still a single line of text below the “Save General Settings” button that says:
FILE TPL NOT FOUND: admin_pages/settings/partials/connector-formThis must be in the Duplicator code somewhere. Perhaps it’s been triggered when the Template tab was clicked, but since this is the Lite version templates are not available.
Thanks Peter. That is both bizarre and fascinating that a random string can make its way into a translation from English (US or International?) to English (South Africa). For what it’s worth, the English spoken and written in South Africa is identical to English (UK), with few deviations and variations therefrom. South African English has colourful colloquialisms and local slang, but spelling follows UK English for words like aluminium, colour, optimisation (anything ending in “…sation” not “…zation”). “Z” is pronounced “Zed” not “Zee”. The front of a car has a “bonnet” not a “hood” and the rear has a “boot” not a “trunk”, people travel vertically in a “lift” not an “elevator”. In the absence of any evidence to the contrary, all untranslated English terms can safely follow that of English that originated in and is spoken in England (get it Americans? English / England…)
- This reply was modified 1 year ago by phonyroyal.
Thanks Peter. I have emailed the requested diagnostics and screenshot.
I cannot understand how this button got into Wordfence, and I don’t know what it “really” does behind the scenes and why it’s buried in Wordfence!
ThanksThanks, but that doesn’t help as I was looking for a way to get the blocked usernames into a text list or spreadsheet. Copying and pasting lust create a very long string of the usernames concatenated with an “x” between them, which couldn’t reliably be used to separate them.
Thanks for the reply Peter. I’ll have to monitor this as further plugin updates are released over the coming days/weeks, as three days after first observing this issue the status is now correct (no updates showing this morning). The daily quick scan appears to run ok, and a full scan has run ok.
Thanks
PRThanks Peter. That was enough to point me in the right diagnostic direction, and I have identified the cause as the “Check & Log Email” Plugin.
Someone else reported it on the plugin support page and the forum thread was closed, but the issue remains: https://wordpress.org/support/topic/causes-html-emails-to-be-sent-as-plain-text/
It is easy to reproduce by installing the “Check & Log Email” Plugin, then on the plugin’s General tab select “Check this box if you would like override wordpress default from email and name” and send a Test Activity Report from WordFence.
It has been reported here: https://wordpress.org/support/topic/html-emails-sent-as-plain-text-2/
- This reply was modified 3 years, 1 month ago by phonyroyal.
Thanks Kim – I have resent the email to the address above.
Thanks
The solution was simply to change the layout of the maintenance template to “Elementor Canvas”. The background logos and text are no longer displayed.
@danstrongin a reply to your message yesterday at The site health tab says some things are not being sent. | WordPress.org was deleted overnight and the thread closed.
Almost the opposite of what you report:
A security scan of a site at https://scan.really-simple-ssl.com does not detect many headers, despite them being set in the .htaccess file.
Similarly, the WordPress Tools -> Site Health page reports:
Your website does not send all recommended security headers.
- Upgrade Insecure Requests
- X-XSS protection
- X-Content Type Options
- Referrer-Policy
- X-Frame-Options
- Permissions-Policy
- HTTP Strict Transport Security
However, a scan using securityheaders.com shows the headers do exist.