BPS Pro Read Me First – General Troubleshooting

[AITpro AdminKeymaster]

This Forum is for Posting BulletProof Security Pro Questions & Comments.  If your Question or Comment is regarding BulletProof Security Free then please post in the BulletProof Security Free Forum.

BulletProof Security Pro General Troubleshooting Steps

BPS Pro B-Core .htaccess Root and wp-admin BulletProof Mode setup steps:

1. Click the AutoMagic buttons
2. Activate Root and wp-admin BulletProof Modes.
3. htaccess Core Setup complete.

For complete setup steps to install and setup all BPS Pro features see the BPS Pro installation and setup Video Tutorial: http://www.ait-pro.com/aitpro-blog/2841/bulletproof-security-pro/bulletproof-security-pro-overview-video-tutorial/

Note:  In order for BPS Pro to work correctly you MUST be using a Custom Permalink Structure:  http://codex.wordpress.org/Using_Permalinks#Choosing_your_permalink_structure

Note:  The deny all and Uploads Anti-Exploit Guard BulletProof Modes are automatic.  The Plugin Firewall BulletProof Mode requires using the Plugin Firewall Test Mode feature to find plugin scripts that need to be Whitelisted in the Plugin Firewall before activating Plugin Firewall BulletProof Mode.  See the Plugin Firewall Read Me First Troubleshooting link below.

Unable to login into your website:

1. Use FTP or your Web Host Control Panel File Manager and delete the .htaccess file in your website root folder.
2. Log into your website, click the BPS Pro AutoMagic Buttons and Activate all BulletProof Modes.

Upload Zip Installation of BPS Pro (General Installation Procedures & Installation Issues / Problems)

http://www.ait-pro.com/aitpro-blog/3139/bulletproof-security-pro/bulletproof-security-pro-zip-installation-zip-backup-and-download/

BulletProof Security Pro 10 Minute Installation & Setup Video Tutorial

http://www.ait-pro.com/aitpro-blog/2841/bulletproof-security-pro/bulletproof-security-pro-overview-video-tutorial/

AutoRestore/Quarantine Guide & Troubleshooting

http://forum.ait-pro.com/forums/topic/autorestore-quarantine-guide-read-me-first/

Plugin Firewall Read Me First Troubleshooting

http://forum.ait-pro.com/forums/topic/plugin-firewall-read-me-first-troubleshooting/

Security Log / HTTP Error Log Read Me First Troubleshooting

http://forum.ait-pro.com/forums/topic/security-log-http-error-log-read-me-first/

WordPress Network / Multisite Specific Help Information

http://forum.ait-pro.com/forums/topic/read-me-first-pro/#network-multisite

 

Custom php.ini Setup, PHP Errors & PHP Error Log Help Posts 

Troubleshooting PHP Errors
http://forum.ait-pro.com/forums/topic/how-to-troubleshoot-php-errors-php-errors-in-your-php-error-log/

General custom php.ini help information
http://www.ait-pro.com/aitpro-blog/3576/bulletproof-security-pro/custom-php-ini-faq/

Custom php.ini Setup by Host
http://www.ait-pro.com/aitpro-blog/2853/bulletproof-security-pro/php-ini-general-and-host-specific-php-ini-information-for-bps-pro/

NEW BulletProof Security Pro Menu Links as of BPS Pro 5.7 – Simpler & Quicker Navigation to The Most Commonly Used Core Components

BPS and BPS Pro are compatible with 1,000′s of Web Hosts, but are not compatible with these 3 Web Hosting Companies (Landis Holdings, NTT Communications & Yahoo Hosting – Due to Custom Server Configurations or Restrictions) 

Symptoms of the problem:  The B-Core page will not fully load and is “chopped off”.  The F-Lock page will not fully load. See screenshot.

Hostingzoom (Landis Holdings)
Resellerzoom (Landis Holdings)
Modvps (Landis Holdings)
WowVPS.com (Landis Holdings)
JaguarPC (Landis Holdings)
Verio (NTT Communications)
NTT America (NTT Communications)
NTT Europe (NTT Communications)
Yahoo Hosting

Screenshot of the problem with these Hosts

 

BulletProof Security Plugin Conflict or Some Functionality On Your Website Is Not Working Correctly

If you think that BulletProof Security Pro is causing a plugin conflict or any other issue on your website that is causing something not to work, then please use these steps below to take BulletProof Security Pro out of the equation completely for testing.  There is no need to deactivate the BulletProof Security Pro plugin because it has a built-in Default Mode that allows you to put WordPress in a default state without deactivating BulletProof Security Pro. If you find that BulletProof Security Pro does have a conflict with another plugin then please check the BulletProof Security Plugin Compatibility Issues – Testing and Fixes Page to see if a fix (bypass/skip rule) is already listed. If your plugin is not listed and you have confirmed that BulletProof Security Pro is definitely causing a conflict then please post a comment in this Forum.

NOTE: Both the Root BulletProof Mode and the wp-admin BulletProof Mode MUST be activated – Activate Root BulletProof Mode and then activate wp-admin BulletProof Mode.  If you only activate Root BulletProof Mode and you do not activate the wp-admin BulletProof Mode then some wp-admin Dashboard functions may not work correctly on some web hosts, such as configuring Widgets.

BPS Pro General Troubleshooting Steps

BPS Pro has built-in Troubleshooting capability/tools.  You do not need to deactivate or delete BPS Pro for troubleshooting and instead use the troubleshooting steps below to troubleshoot conflicts, issues, problems or to eliminate that BPS Pro is causing the issue/problem.

Examples:  If you believe the issue/problem is being caused by the Plugin Firewall then just do Step 4.  If you believe the issue/problem is being caused by the Uploads Anti-Exploit Guard then just do Step 5.  If you believe the issue/problem could be caused by either the root .htaccess file or wp-admin .htaccess file or the Plugin Firewall .htaccess file then do steps 1, 2, 3 and 4.  If you believe the issue/problem could be caused by Login Security then just do Step 8.  To eliminate BPS Pro entirely you would do all of these troubleshooting steps below.

1. Make a backup of your .htaccess files using BulletProof Security Pro built-in Backup.
2. Activate Default Mode for the Root Folder BulletProof Mode on the Security Modes page.
3. Select the Delete wp-admin .htaccess File Radio button and click the Activate button on the Security Modes page to deactivate/delete the wp-admin .htaccess file.
4. Select the Delete plugins .htaccess File Radio button and click the Activate button on the Security Modes page to deactivate/delete the Plugin Firewall .htaccess file.
5. Select the Delete uploads .htaccess File Radio button and click the Activate button on the Security Modes page to deactivate/delete the Uploads Anti-Exploit Guard .htaccess file.
6. Turn Off AutoRestore.
7. If the issue/problem is related to files being locked with F-Lock then unlock your wp-config.php and root .htaccess files.
8. If the issue/problem is related to Login Security turn Off Login Security on the Login Security & Monitoring page.
9. If you created a custom php.ini file for your website rename it to php.ini.BAK
10. Test your plugin, theme, app or script.
11. After testing is completed – Restore your root and wp-admin .htaccess files using BulletProof Security Pro built-in Restore.  NOTE:  The Plugin Firewall and the Uploads Anti-Exploit Guard .htaccess files need to be reactivated/enabled independently on the B-Core Security Modes page and are not backed up and restored using BPS Pro Backup and Restore.
12. Rename your php.ini.BAK file name back to php.ini.
13. Turn AutoRestore back On.  NOTE:  If you modified any files while AutoRestore was turned Off then click the Backup Files buttons before turning AutoRestore back On.

Uninstall/Removal:  To completely uninstall BulletProof Security Pro you would do steps 2, 3 and 7 above (if you have setup P-Security ini_set Options then go to the P-Security ini_set Options page and click the Reset/Remove Options button) and then deactivate and delete the BulletProof Security Pro plugin on the WP Plugins page.

BulletProof Security AutoMagic Not Working, Unable to Edit .htaccess Files, 404 Errors, 403 Errors, 500 Errors, Quarantine Not Working, WordPress is broken

If you are unable to create .htaccess files with AutoMagic or edit .htaccess files with the built-in editor or you are seeing 404 errors or 403 errors when trying to edit .htaccess files or use AutoMagic and Quarantine does not work period then your site is using the broken cPanel HotLink Protection Tool. It has been broken since at least 2002 and not only breaks BulletProof Security, but it also breaks many other WordPress features such as the WordPress Plugin Editor and too many other things in WordPress to list here.

Log into your cPanel and click on the HotLink Protection Tool.  If you see this code below then this confirms that the problem that is occurring on your website is the broken cPanel HotLink Protection Tool problem.

URLs to allow access:

(%0A|%0D|%27|%3C|%3E|%00)
\.opendirviewer\.
users\.skynet\.be.*

Screenshot of the cPanel HotLink Protection Tool

Solution: There is only one way to block the broken cPanel HotLink Protection tool, since enabling and disabling it is also broken – you cannot turn it off. You need to lock your Root .htaccess file with F-Lock (or manually lock it with 404 file permissions) and log into cPanel and delete all code that you see in the HotLink Protection windows. If you unlock your Root .htaccess file at a later time and WordPress and BulletProof Security and ARQ and Quarantine are not working correctly again then you will need to repeat these steps to fix the problem again as this broken tool will probably do the same thing again as soon as your Root .htaccess file is unlocked.

BulletProof Security Alert will not go away – “BPS Pro Alert! Your site does not appear to be protected by BulletProof Security”

This issue/problem can be caused by the Broken cPanel HotLink Protection Tool problem or if another plugin is using the WordPress function - flush_rewrite_rules() incorrectly or also if your Server API type is DSO (see DSO help information below).  You can check/find your Server API type on the BPS Pro System Info Tab page.

Try refreshing your Browser first to see if the BPS Pro alerts go away. These alerts could be left over from the previous check / last function check.

Important Note:  The Lock Root .htaccess file button and F-Lock lock root .htaccess file not only lock the root .htaccess file for protection, but this also protects BPS Pro / your website from plugins that are using the WordPress function – flush_rewrite_rules() incorrectly.  This particular WordPress function is very misunderstood and is used incorrectly in a lot of plugins and of course causes a lot of problems for other plugins that create or write .htaccess code such as BPS, BPS Pro, W3 Total Cache, WP Super Cache, etc etc etc.  The WordPress flush_rewrite_rules() function should ONLY be used in plugin deactivation and plugin activation functions, but since this WordPress function is very misunderstood it is used outside of the intended purpose for that function, which of course breaks other plugins that write or create .htaccess files or code.

Eliminating the possibility of a plugin conflict (flush_rewrite_rules() function used incorrectly):

1. Deactivate all of your plugins except for BPS Pro.
2. Click the AutoMagic buttons and activate BulletProof Modes again.
3. Refresh your Browser.

If the problem is still occurring at this point then it is not being caused by another plugin using the WordPress flush_rewrite_rules() function incorrectly.

If the problem is not occurring then be sure to lock your root .htaccess file before activating your plugins again or the same problem will occur again and your root .htaccess file code will be wiped out again by the WordPress flush_rewrite_rules() function in whatever plugin that is not using this function correctly.

NOTE:  If your Root .htaccess file is unlocked and you go to the WordPress Permalinks page your Root .htaccess file code will be deleted.  You will need to activate Root folder BulletProof Mode again.

500 Internal Server Error After Activating BulletProof Mode for your Root Folder

Some Web Hosts do not allow you to use the “Options” Directive in .htaccess files. If you see a 500 Internal Server Error then comment out the “Options” Directive by adding a pound sign (#) in front of Options -Indexes in your Root .htaccess file as shown below.

# DO NOT SHOW DIRECTORY LISTING
# If you are getting 500 Errors when activating BPS then comment out Options -Indexes
# by adding a # sign in front of it. If there is a typo anywhere in this file you will also see 500 errors.
#Options -Indexes

Some Web Hosts do not allow you to use the “DirectoryIndex” Directive in .htaccess files. If you see a 500 Internal Server Error then comment out the “DirectoryIndex” Directive by adding a pound sign (#) in front of DirectoryIndex in your Root .htaccess file as shown below.  Known Hosts with this issue:  NordNet

# DIRECTORY INDEX FORCE INDEX.PHP
# Use index.php as default directory index file
# index.html will be ignored will not load.
#DirectoryIndex index.php index.html /index.php

BulletProof Security AutoMagic Not Working/built in .htaccess File Editor Not Working, Unable to Backup or Restore Files and the Broken cPanel HotLink Protection Tool is Not The Cause

If your Server API type is DSO then you will need to do some manual file and folder permission changes.  You can check your Server API on the System Info tab in BPS and BPS Pro.  If you see that your Server API is DSO then you will need to perform these installation steps for DSO.  We are currently working on adding additional coding in BPS and BPS Pro for DSO configured Servers and will eventually release a BulletProof Security version that has full automation for DSO configured Servers.

BulletProof Security WP Error: “no input file specified”- Permalink Problems/404 Errors – using the .html permalink hack is causing 404 Errors

If you see a “no input file specified” error then there is something wrong with your WordPress custom permalink structure.  Another cause of 404 Errors is using the .html Permalink hack.  Using .html in your WordPress Permalink Structure is considered a hack and is not a standard WordPress Custom Permalink Structure.  Example Permalink .html Hack:  /%postname%.html.  Many years ago this supposedly increased page ranking and SEO.  If that was ever really true it is definitely not true now.  Using this permalink hack will only cause your website problems and BulletProof Security will not work with this permalink hack.  You will need to change your custom permalink to a standard WordPress custom permalink structure in order to be able to use BulletProof Security.

403 Forbidden Error after updating/upgrading BPS

Some web hosts (approximately 6 Hosts out of 1000′s of Hosts) have a strict policy that .htaccess files can ONLY have 644 permissions and do not allow you to change your .htaccess file permissions to 404.  During the BPS automatic update/upgrade process your Server API is detected and if it is a typical SAPI that should allow your .htaccess file to be locked with 404 permissions then BPS will automatically lock the file.  To see if this is the problem that is occuring FTP to your website and change the .htaccess file permissions in your website root folder to 644.  If the 403 error goes away then please let us know which Host you have by posting a comment here so that we can add them to the below of Hosts that do not allow 404 file permissions for .htaccess files.

List of Web Hosts that require 644 .htaccess file permissions – 404 permissions are not allowed on these Hosts and will cause a 403 Error 

If your Web Host does not allow locking of your Root .htaccess file/404 file permissions for your Root .htacces file, then go to the BPS Edit/Upload/Download tab page and click on the Turn Off AutoLock button.  This will prevent your Root .htaccess file from being automatically locked when you upgrade BPS, which will prevent a 403 Error from occurring on your website.

webmasters.com
LiquidWeb.com
iPower
iPage

WordPress Network / Multisite Specific Help Information

General Help Information About BPS and WordPress Network / Multisite Websites

Do not Network Activate BPS.
BPS Should only be activated on the Primary Site.
BPS AutoMagic buttons should ONLY be used on the Primary Site
Network/Multisite sub-sites are virtual sites – BulletProof Modes should NOT be activated on sub-sites
ONLY Super Admins can see the BPS menu in sub-sites for both BPS Free and BPS Pro
If a Site Admin tries to view BPS Settings or BPS pages a Super Admins Permissions Error message is displayed

Network / Multisite Images Not Displaying in Media Library or on Website

Network / Multisite Images Not Displaying

 

• This topic was modified 6 months, 2 weeks ago by  AITpro Admin.
• This topic was modified 6 months, 2 weeks ago by  AITpro Admin.
• This topic was modified 6 months, 2 weeks ago by  AITpro Admin.
• This topic was modified 6 months, 2 weeks ago by  AITpro Admin.
• This topic was modified 6 months, 2 weeks ago by  AITpro Admin.
• This topic was modified 6 months, 2 weeks ago by  AITpro Admin.
• This topic was modified 6 months, 2 weeks ago by  AITpro Admin.
• This topic was modified 6 months, 2 weeks ago by  AITpro Admin.
• This topic was modified 6 months, 2 weeks ago by  AITpro Admin.
• This topic was modified 6 months, 2 weeks ago by  AITpro Admin.
• This topic was modified 6 months, 2 weeks ago by  AITpro Admin.
• This topic was modified 6 months, 2 weeks ago by  AITpro Admin.
• This topic was modified 6 months, 2 weeks ago by  AITpro Admin.
• This topic was modified 6 months ago by  AITpro Admin.
• This topic was modified 6 months ago by  AITpro Admin.
• This topic was modified 6 months ago by  AITpro Admin.
• This topic was modified 6 months ago by  AITpro Admin.
• This topic was modified 6 months ago by  AITpro Admin.
• This topic was modified 5 months, 3 weeks ago by  AITpro Admin.
• This topic was modified 5 months, 3 weeks ago by  AITpro Admin.
• This topic was modified 5 months, 3 weeks ago by  AITpro Admin.
• This topic was modified 5 months, 3 weeks ago by  AITpro Admin.
• This topic was modified 5 months, 3 weeks ago by  AITpro Admin.
• This topic was modified 5 months, 3 weeks ago by  AITpro Admin.
• This topic was modified 5 months, 2 weeks ago by  AITpro Admin.
• This topic was modified 5 months, 2 weeks ago by  AITpro Admin.
• This topic was modified 5 months, 2 weeks ago by  AITpro Admin.
• This topic was modified 5 months, 2 weeks ago by  AITpro Admin.
• This topic was modified 5 months, 2 weeks ago by  AITpro Admin.
• This topic was modified 5 months, 2 weeks ago by  AITpro Admin.
• This topic was modified 5 months ago by  AITpro Admin.
• This topic was modified 4 months, 1 week ago by  AITpro Admin.
• This topic was modified 4 months ago by  AITpro Admin.
• This topic was modified 4 months ago by  AITpro Admin.
• This topic was modified 4 months ago by  AITpro Admin.
• This topic was modified 4 months ago by  AITpro Admin.
• This topic was modified 4 months ago by  AITpro Admin.
• This topic was modified 4 months ago by  AITpro Admin.
• This topic was modified 4 months ago by  AITpro Admin.
• This topic was modified 4 months ago by  AITpro Admin.
• This topic was modified 4 months ago by  AITpro Admin.
• This topic was modified 4 months ago by  AITpro Admin.
• This topic was modified 3 months, 3 weeks ago by  AITpro Admin.
• This topic was modified 3 months, 2 weeks ago by  AITpro Admin.
• This topic was modified 3 months, 2 weeks ago by  AITpro Admin.
• This topic was modified 3 months, 2 weeks ago by  AITpro Admin.
• This topic was modified 3 months, 2 weeks ago by  AITpro Admin.
• This topic was modified 3 months ago by  AITpro Admin.
• This topic was modified 3 months ago by  AITpro Admin.
• This topic was modified 3 months ago by  AITpro Admin.
• This topic was modified 2 months, 1 week ago by  AITpro Admin.
• This topic was modified 2 months, 1 week ago by  AITpro Admin.
• This topic was modified 2 months, 1 week ago by  AITpro Admin.
• This topic was modified 2 months, 1 week ago by  AITpro Admin.
• This topic was modified 2 months, 1 week ago by  AITpro Admin.
• This topic was modified 2 months, 1 week ago by  AITpro Admin.
• This topic was modified 2 months, 1 week ago by  AITpro Admin.
• This topic was modified 2 months, 1 week ago by  AITpro Admin.
• This topic was modified 2 months, 1 week ago by  AITpro Admin.
• This topic was modified 2 months, 1 week ago by  AITpro Admin.
• This topic was modified 2 months, 1 week ago by  AITpro Admin.
• This topic was modified 2 months, 1 week ago by  AITpro Admin.
• This topic was modified 2 months, 1 week ago by  AITpro Admin.
• This topic was modified 2 months ago by  AITpro Admin.
• This topic was modified 2 months ago by  AITpro Admin.
• This topic was modified 1 month, 3 weeks ago by  AITpro Admin.
• This topic was modified 1 month, 3 weeks ago by  AITpro Admin.
• This topic was modified 1 month, 3 weeks ago by  AITpro Admin.
• This topic was modified 2 weeks, 6 days ago by  AITpro Admin.
• This topic was modified 1 week, 3 days ago by  AITpro Admin.
• This topic was modified 1 week, 3 days ago by  AITpro Admin.
• This topic was modified 1 week, 3 days ago by  AITpro Admin.
• This topic was modified 1 week, 3 days ago by  AITpro Admin.
• This topic was modified 1 week, 3 days ago by  AITpro Admin.
• This topic was modified 6 days, 13 hours ago by  AITpro Admin.

[Author]

Posts