Alwin
Forum Replies Created
-
When I try running on PHP 7.3 an PHP 7.2 to send you the Wordfence diagnostics, should I do that with or without the Extended Firewall protection enabled?
Thanks for your help!
– I switch back from Basic protection to extended protection
– The load time changend (again) from around 1,5 seconds to 6 seconds
– Then I changend the php version from 7.4 back to 7.3Changing the php version did not make any difference.
The only thing that solves the problem is disabling the Extended protection….
Hello, I have sent the report (forum username=wp-opti)
Update: I have tried a lot of settings but nothing helps. The only thing that does help is disabling the extended firewall protection.
I looked at other free security plugins like the free Sucuri plugin. This plugin however does not provide a firewall at all (free version) so now I am thinkig to just keep the Wordfence firewall at the basic protection level.
Question: is keeping the firewall on Basic protection level a big security risc?
Seems to me that it’s always better then a security plugin without a firewall at all?
Hello Peter,
Thanks for your help!
I did what you described but unfortunately it did not help…
The page loads are allowed by Wordfence, that is not the problem. Problem seems to be that WF is scanning these Timthumb request or something like that.
Alwin
- This reply was modified 5 years, 10 months ago by Alwin.
Forum: Fixing WordPress
In reply to: No automatic plugin update option in wp 5.5Steven, you pointed me in the right direction! This is what I found in my wp-config:
* Turn off automatic updates since these are managed externally by Installatron.
* If you remove this define() to re-enable WordPress’s automatic background updating
* then it’s advised to disable auto-updating in Installatron.
*/
define(‘AUTOMATIC_UPDATER_DISABLED’, true);Since I indeed installed WP with Installatron this makes sense. However, in Installatron I have disabled all auto-update options..
So it seems Installatron is the reasson why I don’t see the new auto-update-plugins options. It also seems like a bug in Installatron since I have disabled auto-updates there.
- This reply was modified 6 years ago by Alwin.
Does enabling this new (AI?) spam protection option ad the risc of losing a email, that’s marked as spam and therefore not send to me?
Hello Matthew,
Thanks for your fast reply!
So when I want to add an image to just one single folder I do not have to use shortcuts, but when I want to add an image to multiple RML folders then I have to use shortcuts, correct?
One other question: is there any disadvantage of using shortcuts by default? For example will it affect my loading times/response time of the JIG gallery pages?
Thanks,
AlwinThank you for your fast reply!
To be sure: if I want to use SMTP I have to use an external plugin like Wp Mail SMTP, correct? There is no build in SMTP option?
And the honeypot field is enabled by default? Can I switch in On/Of or is it always enabled?
Thank you. The strange thing is however that when I had the code placed above that line, WP Mail SMTP was still sending emails.
How is that possible?
No problem, I have learned something new and important about the wp-config file now π
Thank you for all your support!
I think I solved the problem now!
The code in my wp-config was placed at the bottom of the file, so beneath the line
/* That’s all, stop editing! Happy publishing. */
Now I have added the code above this line and everything is working good now!
Does this sound logical to you?
Forum: Fixing WordPress
In reply to: secure wp-config and then edithaha, oke..
It’s adviced to do it like this almost everywhere you read about adding extra security to your wordpress sites.
I don’t have enough knowledge myself to know if it’s really usefull or not π
But I know now that when using this code in .htaccess i can still edit the wp-config!
Forum: Fixing WordPress
In reply to: secure wp-config and then editWell, there are a lot of posts online where this code for the .htaccess file is recommended for extra security, ebven here on the WordPress site:
https://wordpress.org/support/article/hardening-wordpress/#securing-wp-config-php
I do have this code in my .htaccess file:
# protect wpconfig.php
<files wp-config.php>
order allow,deny
deny from all
</files>Maybe that’s the problem??