BulletProof Security Forum

Activity Stream Update copied into this topic

BuddyPress update posts do not send emails – please post replies in the Forum Topic

I received this response to my problem: Check all of your Custom Code text boxes and remove any custom code that is in the wrong places. I have compared all of the text on the left part of the screen with the right part of the screen in the ”Custom Text” area. It all matches. I don’t know how else to tell if the custom code is incorrect.

Hi,

I’m experiencing a similar problem. It was working fine, then I moved my website to an Amazon EC2 instance, then I deleted the .htaccess, clicked on “Create secure .htaccess File” and then Activated it. Now I get that Internal Server Error.

It does work with the a default .htaccess, but if I activate the secure one, I get the 500 error. Do you think that it may be due to something that I didn’t activate in Apache?

Here’s my server info:

Host by Address: ip-10-244-17-169.ec2.internal
DNS Name Server:
Server Type: Apache/2.4.6 (Ubuntu)
Operating System: Linux
Server API: apache2handler – Your Host Server is using DSO
WP Permalink Structure: /%postname%
Custom Permalinks: √ Custom Permalinks are in use

The only custom permalinks that I have is:

# REQUEST METHODS FILTERED
# If you want to allow HEAD Requests use BPS Custom Code and 
# remove/delete HEAD| from the Request Method filter.
# Example: RewriteCond %{REQUEST_METHOD} ^(TRACE|DELETE|TRACK|DEBUG) [NC]
# The TRACE, DELETE, TRACK and DEBUG Request methods should never be removed.
RewriteCond %{REQUEST_METHOD} ^(HEAD|TRACE|DELETE|TRACK|DEBUG) [NC]
RewriteRule ^(.*)$ - [F]

Let me know if you need any other information.
Thanks,
Vilmondes

Hi,

Thanks for the response. I’ve resolved that by editing apache2.conf

<Directory /var/www/>

The AllowOverride had only FileInfo. I’ve added Options Limit and Indexes.

It’s all good now =).
Thank you!

@ Darryl – your Post has been merged into this relevant Topic

Try Deactivating Root Folder BulletProof Mode first to see if your Server still allows .htaccess files.

Copy any Custom Code out of all of the Custom Code text boxes and save it in a Notepad text file on your computer.  Then delete all code in any Custom Code text boxes, click the Save Root Custom Code button and go to the BPS Security Modes page and click the Root Folder BulletProof Mode Activate button.

Check the permissions of the root .htaccess file – your particular Server may not allow locking of the root .htaccess file.
Try commenting out the Options directive in your root .htaccess file.

http://forum.ait-pro.com/forums/topic/500-internal-server-error-2/#post-11387

Other common causes for 500 errors
http://forum.ait-pro.com/forums/topic/read-me-first-free/#cpanel-hotlink-protection
http://forum.ait-pro.com/forums/topic/read-me-first-free/#flush-rewrite-rules

We need to add that as a standard check on the main BPS Read Me first Forum Topic and change or add a logical progression of things to check.  What most likely occurred is that your Host changed your Server type or upgraded your Server and the php_value and php_flag directives are not valid/allowed for the new Server type that you are currently using.

I am having the same problem, I receive a 500 error after activating root folder BPS.  It does not occur when admin folder is BPS enabled. I have checked  the troublehshooting page, checked hotlink protection (currently disabled / no code shown), commented out #Options -Indexes, as well as commented out #DirectoryIndex index.php index.html /index.php  The server does run CGI, not DSO.

This problem has only started occurring in the last couple of updates. I have scanned through the htaccess and do not see any typos. the site is at realtyevolved.net. I have also uninstalled, deleted all htaccess/subfolder htaccess files as well for a “clean” reinstall. I resaved permalink structure. No new plugins have been installed since the last several updates either and was working previously.  Any help you can provide would be great.

Thanks!

Have tried file permissions and does not work. Also went into BPS settings to unlock and check htaccess was writable. Also tried deleting by ftp before creating new secure htaccess.

Also note when the “failed” secure htaccess BPS mode is enable for the root folder, the WP dashboard reloads in all text (missing graphics, etc). Any further action results in a 500 error within admin panel, whereas the public site is 500 immediately.