Title: simoncav's Replies | WordPress.org --- # simoncav [ ](https://wordpress.org/support/users/simoncav/) * [Profile](https://wordpress.org/support/users/simoncav/) * [Topics Started](https://wordpress.org/support/users/simoncav/topics/) * [Replies Created](https://wordpress.org/support/users/simoncav/replies/) * [Reviews Written](https://wordpress.org/support/users/simoncav/reviews/) * [Topics Replied To](https://wordpress.org/support/users/simoncav/replied-to/) * [Engagements](https://wordpress.org/support/users/simoncav/engagements/) * [Favorites](https://wordpress.org/support/users/simoncav/favorites/) Search replies: ## Forum Replies Created Viewing 3 replies - 1 through 3 (of 3 total) * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[WP Store Locator] Cant change any settings](https://wordpress.org/support/topic/cant-change-any-settings/) * Thread Starter [simoncav](https://wordpress.org/support/users/simoncav/) * (@simoncav) * [12 years, 5 months ago](https://wordpress.org/support/topic/cant-change-any-settings/#post-4838128) * Tue Apr 22 22:49:32 2014] [warn] [client 86.173.244.157] mod_fcgid: stderr: PHP Warning: Creating default object from empty value in /var/www/vhosts/beegood. co.uk/showme/wp-content/plugins/Anticipate/anticipate-maintenance-plugin.php on line 119, referer: [http://www.showmethehoney.org/wp-admin/plugins.php?action=delete-selected&checked%5B0%5D=cookie-notice%2Fcookie-notice.php&plugin_status=all&paged=1&s&_wpnonce=71445d73c9](http://www.showmethehoney.org/wp-admin/plugins.php?action=delete-selected&checked%5B0%5D=cookie-notice%2Fcookie-notice.php&plugin_status=all&paged=1&s&_wpnonce=71445d73c9) [ Tue Apr 22 23:11:10 2014] [error] [client 86.173.244.157] ModSecurity: [file “/ etc/httpd/modsecurity.d/11_asl_adv_rules.conf”] [line “79”] [id “341245”] [rev“ 19”] [msg “Atomicorp.com WAF Rules: Possible SQL injection attack (detectSQLi)”][ data “1,(1),ARGS:wpsl_search[radius]”] [severity “CRITICAL”] Access denied with code 403 (phase 2). detected SQLi using libinjection with fingerprint ‘1,(1)’[ hostname “www.showmethehoney.org”] [uri “/wp-admin/options.php”] [unique_id “ 5LAJvG1LoQUAAFCF6NsAAAAg”] [Tue Apr 22 23:12:43 2014] [error] [client 86.173.244.157] ModSecurity: [file “/etc/httpd/modsecurity.d/11_asl_adv_rules.conf”] [line “79”][ id “341245”] [rev “19”] [msg “Atomicorp.com WAF Rules: Possible SQL injection attack (detectSQLi)”] [data “1,(1),ARGS:wpsl_search[radius]”] [severity “CRITICAL”] Access denied with code 403 (phase 2). detected SQLi using libinjection with fingerprint ‘1,(1)’ [hostname “www.showmethehoney.org”] [uri “/wp-admin/options. php”] [unique_id “6j9Ox21LoQUAAFdNe4UAAAAR”] [Tue Apr 22 23:27:29 2014] [error][ client 86.173.244.157] ModSecurity: [file “/etc/httpd/modsecurity.d/11_asl_adv_rules. conf”] [line “79”] [id “341245”] [rev “19”] [msg “Atomicorp.com WAF Rules: Possible SQL injection attack (detectSQLi)”] [data “1,(1),ARGS:wpsl_search[radius]”] [ severity “CRITICAL”] Access denied with code 403 (phase 2). detected SQLi using libinjection with fingerprint ‘1,(1)’ [hostname “www.showmethehoney.org”] [uri“/ wp-admin/options.php”] [unique_id “Hwq@121LoQUAAHhp3R8AAABD”] [Wed Apr 23 00: 27:50 2014] [error] [client 86.173.244.157] ModSecurity: [file “/etc/httpd/modsecurity. d/11_asl_adv_rules.conf”] [line “79”] [id “341245”] [rev “19”] [msg “Atomicorp. com WAF Rules: Possible SQL injection attack (detectSQLi)”] [data “1,(1),ARGS: wpsl_search[radius]”] [severity “CRITICAL”] Access denied with code 403 (phase 2). detected SQLi using libinjection with fingerprint ‘1,(1)’ [hostname “www. showmethehoney.org”] [uri “/wp-admin/options.php”] [unique_id “9uJY721LoQUAAHe- 8I4AAAAE”] * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[WP Store Locator] Cant change any settings](https://wordpress.org/support/topic/cant-change-any-settings/) * Thread Starter [simoncav](https://wordpress.org/support/users/simoncav/) * (@simoncav) * [12 years, 5 months ago](https://wordpress.org/support/topic/cant-change-any-settings/#post-4838113) * Hi Tijmen, * Is this what you want? * [Wed Apr 23 08:06:50 2014] [error] [client 200.46.73.42] Invalid URI in request GET HTTP/1.1 HTTP/1.1 [Wed Apr 23 08:06:50 2014] [error] [client 200.46.73.42] ModSecurity: [file “/etc/httpd/modsecurity.d/50_asl_rootkits.conf”] [line “58”][ id “390145”] [rev “11”] [msg “Atomicorp.com WAF Rules: Rootkit attack: Generic Attempt to install shell”] [severity “CRITICAL”] Access denied with code 403 ( phase 2). Match of “rx (?:/event\\\\.ng/|horde/services/go\\\\.php|tiki-view_cache\\\\. php|^/\\\\?out=http://|homecounter\\\\.php\\\\?offerid=.*ureferrer=http|__utm\\\\. gif\\\\?|/plugins/wpeditimage/editimage\\\\.html|/spc\\\\.php)” against “REQUEST_URI” required. [hostname “showmethehoney.org”] [uri “/”] [unique_id “YGoYYG1LoQUAAHvv96IAAAAS”][ Wed Apr 23 08:07:55 2014] [error] [client 157.55.36.35] File does not exist: / var/www/vhosts/beegood.co.uk/showme/robots.txt [Wed Apr 23 08:15:13 2014] [error][ client 157.56.93.72] File does not exist: /var/www/vhosts/beegood.co.uk/showme/ robots.txt * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[WP Store Locator] Cant change any settings](https://wordpress.org/support/topic/cant-change-any-settings/) * Thread Starter [simoncav](https://wordpress.org/support/users/simoncav/) * (@simoncav) * [12 years, 5 months ago](https://wordpress.org/support/topic/cant-change-any-settings/#post-4838084) * Hi Tijmen, Thanks for the prompt response on this. Yes it does appear that my host uses mod-security as I can see its presence on the log files, although I’m awaiting formal confirmation from their support team. * Thanks and best regards, * Simon Viewing 3 replies - 1 through 3 (of 3 total)