BulletProof Security Forum

Does Malcare pro have an option setting that allows you to choose where the randomly named file is saved to? If so, then choose your WordPress Uploads folder to save the Malcare pro file – /wp-content/uploads. Unfortunately, since the filename is random, you cannot create an exclude rule for the Malcare pro file.

“MalCare Pro scan results and…

[Read more]

Are you saying the llms.txt file was quarantined again or that the log entry is still in the Quarantine log file? The log file is a static text file. So the log entries are just static text entries that will remain in the log file.

After following your suggestion, the file updates in the root directory (desired whitelisting) and it is still logged to quarantine. If there is another setting I missed, please let me know?

Yes, thank you, almost there. After following your suggestion, the file updates in the root directory (desired whitelisting) and it is slso logged to quarantine. If there is another setting I missed, please let me know?

Do you have the LiteSpeed Cache plugin installed?  If so, see this forum topic > https://forum.ait-pro.com/forums/topic/unserialize-error-at-offset-0-of-15-bytes-in-bulletproof-security-php-on-line-237/

Response from another person experiencing this PHP error:

Hi,

Thank you for your prompt response.  Your comment about server-side caching helped.

While neither the memcache nor redis extensions were activated in cPanel I noticed for some unknown reason that the Object Cache setting in the LiteSpeed Cache plugin was ON (the extensions status…

[Read more]

That’s odd, but glad it worked.

HI, the only way this worked for me was to activate Root Folder BulletProof Mode first, then run the Setup Wizards again. If I ran Setup first the old php kept injecting, now I’ve got a fix, thanks for all your help!!

Maybe your web host requires php handler htaccess code to load php 8.3. Do the steps below.

Delete the root htaccess file.
Go to cPanel and reapply php version 8.3. Or switch to another version of PHP and then switch back to 8.3.
If your host uses php handler htaccess code for php 8.3, you will find that php handler htaccess code in the new…[Read more]

I did it a little different, I replaced all .htaccess with simple wordpress;

I deleted the php 7.4 handler from Custom Code, ran setup again and the site is back to 7.4 again,where do you think it could be coming from if not htaccess, in cpanel its 8.3

# BEGIN WordPress

RewriteEngine On
RewriteRule .* -…[Read more]

Delete y0ur root htaccess file using FTP or your web host control panel file manager tool.  Go to the BPS Pro Logs|Info menu > System Info page > check your php version. If you are still seeing php 7.4 then a non-BPS htaccess file in the hosting account root folder has the php handler htaccess code in it, which you need to delete.  If you are s…[Read more]

I took it out and ran setup and it popped back in, does this mean I have to login to to hosting cpanel and remove 7.4 handler code from all the htaccess in sites I run? I guess hosting overrides it when I change to 8+ in cpanel, but bulletproof picks it up and enforces it.

Most likely you have old php handler htaccess code saved in BPS Custom Code from php server version:  7.4. Newer versions of PHP no longer use php handler htaccess code.

Delete the old 7.4 php handler htaccess code in this BPS Root Custom Code text box: 1. CUSTOM CODE TOP PHP/PHP.INI HANDLER/CACHE CODE. Click the Save Root Custom Code button.…[Read more]

Got it working. Nothing to do with bulletproof. Got some styling work to do now!
Thank you for the response

You don’t need to do any of that stuff since you have BPS Pro. If you didn’t have BPS Pro then yeah you could manually add your own additional security protection.

Thank you for your help, I don’t want to go into all my shared hosting accounts and move the folders to home/username, fix domain path and then have to do the fix User ID as well, so I asked AI how I can avoid all that, it told me first to ask hosting for

1. host can enable CloudLinux CageFS for you -I do not think my hosting has that, so the next…

[Read more]

Or it looks like you can do it with the Gutenberg Embed Block > https://wordpress.com/support/wordpress-editor/blocks/embed-block/