Title: staze's Replies | WordPress.org --- # staze [ ](https://wordpress.org/support/users/staze/) * [Profile](https://wordpress.org/support/users/staze/) * [Topics Started](https://wordpress.org/support/users/staze/topics/) * [Replies Created](https://wordpress.org/support/users/staze/replies/) * [Reviews Written](https://wordpress.org/support/users/staze/reviews/) * [Topics Replied To](https://wordpress.org/support/users/staze/replied-to/) * [Engagements](https://wordpress.org/support/users/staze/engagements/) * [Favorites](https://wordpress.org/support/users/staze/favorites/) Search replies: ## Forum Replies Created Viewing 15 replies - 1 through 15 (of 152 total) 1 [2](https://wordpress.org/support/users/staze/replies/page/2/?output_format=md) [3](https://wordpress.org/support/users/staze/replies/page/3/?output_format=md) … [9](https://wordpress.org/support/users/staze/replies/page/9/?output_format=md) [10](https://wordpress.org/support/users/staze/replies/page/10/?output_format=md) [11](https://wordpress.org/support/users/staze/replies/page/11/?output_format=md) [→](https://wordpress.org/support/users/staze/replies/page/2/?output_format=md) * Forum: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/) In reply to: [Autoload wp_installer_settings](https://wordpress.org/support/topic/autoload-wp_installer_settings/) * Thread Starter [staze](https://wordpress.org/support/users/staze/) * (@staze) * [9 months, 2 weeks ago](https://wordpress.org/support/topic/autoload-wp_installer_settings/#post-18626924) * So found a plugin from Joost that shows all options. Turns out the culprit was bbb_badbots that must live in another table. Nuked that (uninstalled plugin and then nuked it) and now I’m much better. “When you started on 2025-09-03 you had 559 autoloaded options, for 2,392.7KB of memory. Now you have 559 options, for 241.3KB of memory.”=) - This reply was modified 9 months, 2 weeks ago by [staze](https://wordpress.org/support/users/staze/). Reason: marking resolved * Forum: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/) In reply to: [Autoload wp_installer_settings](https://wordpress.org/support/topic/autoload-wp_installer_settings/) * Thread Starter [staze](https://wordpress.org/support/users/staze/) * (@staze) * [9 months, 2 weeks ago](https://wordpress.org/support/topic/autoload-wp_installer_settings/#post-18624864) * Sorry, I meant more is it still safe to delete _transient db entries. I guess I’m confused how things are set to yes/no. I honestly don’t even remember that column being there previously (this was years ago). Did a DB update add that column and set everything existing to Yes, then anything new gets set to the appropriate value? * Forum: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/) In reply to: [Autoload wp_installer_settings](https://wordpress.org/support/topic/autoload-wp_installer_settings/) * Thread Starter [staze](https://wordpress.org/support/users/staze/) * (@staze) * [9 months, 2 weeks ago](https://wordpress.org/support/topic/autoload-wp_installer_settings/#post-18624851) * Related, is something like this still “safe”? * ```wp-block-code DELETE FROM wp_options WHERE option_name LIKE ('%\_transient\_%'); ``` * Forum: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/) In reply to: [Autoload wp_installer_settings](https://wordpress.org/support/topic/autoload-wp_installer_settings/) * Thread Starter [staze](https://wordpress.org/support/users/staze/) * (@staze) * [9 months, 2 weeks ago](https://wordpress.org/support/topic/autoload-wp_installer_settings/#post-18624845) * Can you change that in the GUI, or do you have to do via SQL? I’ll check the other tables… To go from 234KB to 2MB 1-3KB at a time would be a LOT of options… * Forum: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/) In reply to: [Autoload wp_installer_settings](https://wordpress.org/support/topic/autoload-wp_installer_settings/) * Thread Starter [staze](https://wordpress.org/support/users/staze/) * (@staze) * [9 months, 2 weeks ago](https://wordpress.org/support/topic/autoload-wp_installer_settings/#post-18624836) * Gotcha. I use Genesis Framework, so maybe that’s it. * Good catch on it only being 100kb. I for some reason read as 1mb. So the health check must be seeing either all wp_options autoload or not, or it’s seeing them from all the sites in my multisite setup… * Forum: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/) In reply to: [Autoload wp_installer_settings](https://wordpress.org/support/topic/autoload-wp_installer_settings/) * Thread Starter [staze](https://wordpress.org/support/users/staze/) * (@staze) * [9 months, 2 weeks ago](https://wordpress.org/support/topic/autoload-wp_installer_settings/#post-18624822) * Sorry, yes, this is phpmyadmin. I don’t have CLI SQL access. Doesn’t change the question… what is “wp_installer_settings” and does it need to autoload? * Forum: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/) In reply to: [Autoload wp_installer_settings](https://wordpress.org/support/topic/autoload-wp_installer_settings/) * Thread Starter [staze](https://wordpress.org/support/users/staze/) * (@staze) * [9 months, 2 weeks ago](https://wordpress.org/support/topic/autoload-wp_installer_settings/#post-18624780) * Yes. And that’s what brought up the top hit of of “wp_installer_settings”. SELECT option_name, length(option_value), autoload FROM staze_options WHERE autoload =’yes’ ORDER BY length(option_value) DESC LIMIT 20; * ```wp-block-code Edit Edit Copy Copy Delete Delete wp_installer_settings 104100 yes Edit Edit Copy Copy Delete Delete _site_transient_update_plugins 23121 yes Edit Edit Copy Copy Delete Delete yst_ga_top_pageviews 15643 yes Edit Edit Copy Copy Delete Delete rewrite_rules 14644 yes Edit Edit Copy Copy Delete Delete wp_user_roles 12812 yes Edit Edit Copy Copy Delete Delete simplyexclude_v2 10795 yes Edit Edit Copy Copy Delete Delete wpcf-fields 9673 yes Edit Edit Copy Copy Delete Delete blc_installation_log 9143 yes Edit Edit Copy Copy Delete Delete wsblc_options 8851 yes Edit Edit Copy Copy Delete Delete wpcf-custom-taxonomies 7660 yes Edit Edit Copy Copy Delete Delete social_aggregation_queue 7208 yes Edit Edit Copy Copy Delete Delete otgs_active_components 6437 yes Edit Edit Copy Copy Delete Delete wpseo_titles 6339 yes Edit Edit Copy Copy Delete Delete wp_5_user_roles 5753 yes Edit Edit Copy Copy Delete Delete LinkLibraryPP1 5498 yes Edit Edit Copy Copy Delete Delete wpseo 5178 yes Edit Edit Copy Copy Delete Delete yst_ga_top_countries 4897 yes Edit Edit Copy Copy Delete Delete wp_7_user_roles 3587 yes Edit Edit Copy Copy Delete Delete wps_plugin_feed_data 3464 yes Edit Edit Copy Copy Delete Delete simplehooks-settings 3317 yes ``` * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Wordfence Security - Firewall, Malware Scan, and Login Security] Wordfence seeing files in uploads that aren’t in uploads](https://wordpress.org/support/topic/wordfence-seeing-files-in-uploads-that-arent-in-uploads/) * Thread Starter [staze](https://wordpress.org/support/users/staze/) * (@staze) * [4 years ago](https://wordpress.org/support/topic/wordfence-seeing-files-in-uploads-that-arent-in-uploads/page/2/#post-15744808) * resolving * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Wordfence Security - Firewall, Malware Scan, and Login Security] Wordfence seeing files in uploads that aren’t in uploads](https://wordpress.org/support/topic/wordfence-seeing-files-in-uploads-that-arent-in-uploads/) * Thread Starter [staze](https://wordpress.org/support/users/staze/) * (@staze) * [4 years ago](https://wordpress.org/support/topic/wordfence-seeing-files-in-uploads-that-arent-in-uploads/page/2/#post-15744805) * confirmed fixed. Thanks! * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Wordfence Security - Firewall, Malware Scan, and Login Security] Wordfence seeing files in uploads that aren’t in uploads](https://wordpress.org/support/topic/wordfence-seeing-files-in-uploads-that-arent-in-uploads/) * Thread Starter [staze](https://wordpress.org/support/users/staze/) * (@staze) * [4 years ago](https://wordpress.org/support/topic/wordfence-seeing-files-in-uploads-that-arent-in-uploads/page/2/#post-15693094) * Can confirm this workaround fixes issue. for “safety” sake I added an “index. html” into blogs.dir/1/files. * Thanks for posting the workaround. Trying to think if this potentially has downsides… * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Wordfence Security - Firewall, Malware Scan, and Login Security] Wordfence seeing files in uploads that aren’t in uploads](https://wordpress.org/support/topic/wordfence-seeing-files-in-uploads-that-arent-in-uploads/) * Thread Starter [staze](https://wordpress.org/support/users/staze/) * (@staze) * [4 years ago](https://wordpress.org/support/topic/wordfence-seeing-files-in-uploads-that-arent-in-uploads/page/2/#post-15683674) * Hi [@wfmattr](https://wordpress.org/support/users/wfmattr/) Any update on this? * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Wordfence Security - Firewall, Malware Scan, and Login Security] Wordfence seeing files in uploads that aren’t in uploads](https://wordpress.org/support/topic/wordfence-seeing-files-in-uploads-that-arent-in-uploads/) * Thread Starter [staze](https://wordpress.org/support/users/staze/) * (@staze) * [4 years ago](https://wordpress.org/support/topic/wordfence-seeing-files-in-uploads-that-arent-in-uploads/page/2/#post-15670882) * Ahh… okay. will be curious to know how it is fixed. Not sure if just adding an“ is_dir”, or even if($dir) to see if the string is null makes sense in this case. * Thanks much! * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Wordfence Security - Firewall, Malware Scan, and Login Security] Wordfence seeing files in uploads that aren’t in uploads](https://wordpress.org/support/topic/wordfence-seeing-files-in-uploads-that-arent-in-uploads/) * Thread Starter [staze](https://wordpress.org/support/users/staze/) * (@staze) * [4 years ago](https://wordpress.org/support/topic/wordfence-seeing-files-in-uploads-that-arent-in-uploads/page/2/#post-15670811) * Understood, thanks [@wfmattr](https://wordpress.org/support/users/wfmattr/). * And yes, certainly not wanting to give access, but I work in tech, and sometimes you need to get get eyes on the actual problem when you can’t reproduce internally. =) * So I assume the reality here is I converted a standalone install to multisite, so my “blog.1” just stayed using uploads, and the others converted over to using blog.X as I imported them into the multisite. tbh, I’m now curious how modern multisite handles this as if they all use uploads, that could lead to naming collisions (two sites uploading the same file in the same month). * I’m honestly not sure where WF is getting blog.1 as it doesn’t seem to be defined anywhere. I’m also not sure how it’s looping back out to think stuff in wp-admin is in wp-contents/uploads unless it’s part of wordpress handling non-existent URLs and WF isn’t checking for a redirect. * Glad to hear a fix is on the way. No rush on this. I can ignore the warnings for now. I’d rather not exclude directories from scanning since that would potentially hide actual threats. * Thanks again! * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Wordfence Security - Firewall, Malware Scan, and Login Security] Wordfence seeing files in uploads that aren’t in uploads](https://wordpress.org/support/topic/wordfence-seeing-files-in-uploads-that-arent-in-uploads/) * Thread Starter [staze](https://wordpress.org/support/users/staze/) * (@staze) * [4 years ago](https://wordpress.org/support/topic/wordfence-seeing-files-in-uploads-that-arent-in-uploads/#post-15662351) * Okay, emailed that info. * I don’t believe I started with multisite way back in 3.5 days, but I definitely had this wordpress install back then and converted to multisite from that same install. I am on PHP 7.2. * If you all are able/willing, I can give you access to my install. Not sure how much it would help, but I’m willing if you are. * One thing of note, possibly, is I’m set up for mutiisite, and subdomain installs, but I don’t have the domain specified because all of the sites have full domains, rather than being subdomains. Also of interest is there are some WAF statements in my .htaccess, not sure if that’s for everyone, or might be from some older install. Looks like statement for litespeed (which my hosting provider uses). * Thanks! * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Wordfence Security - Firewall, Malware Scan, and Login Security] Wordfence seeing files in uploads that aren’t in uploads](https://wordpress.org/support/topic/wordfence-seeing-files-in-uploads-that-arent-in-uploads/) * Thread Starter [staze](https://wordpress.org/support/users/staze/) * (@staze) * [4 years ago](https://wordpress.org/support/topic/wordfence-seeing-files-in-uploads-that-arent-in-uploads/#post-15661500) * [@wfmattr](https://wordpress.org/support/users/wfmattr/), * 1. UPLOAD isn’t defined in WP-Config.php. 2. blogs.dir does exist in wp-content, but /1/ doesn’t exist within that. Looking in All Sites, Edit (for “Upload Path” and “Upload Url Path”), my first site is site 2, and my primary site is set to use wp-content/uploads. 3. There’s no rewrite for blogs in my .htaccess. * Because it’s multisite, WF runs from Network dashboard, which might be issue? * Not sure what else to look at. Happy to look in DB if needed. Viewing 15 replies - 1 through 15 (of 152 total) 1 [2](https://wordpress.org/support/users/staze/replies/page/2/?output_format=md) [3](https://wordpress.org/support/users/staze/replies/page/3/?output_format=md) … [9](https://wordpress.org/support/users/staze/replies/page/9/?output_format=md) [10](https://wordpress.org/support/users/staze/replies/page/10/?output_format=md) [11](https://wordpress.org/support/users/staze/replies/page/11/?output_format=md) [→](https://wordpress.org/support/users/staze/replies/page/2/?output_format=md)