Non Stop Quarantine notifications – Endurance Page Cache plugin

Home Forums BulletProof Security Pro Non Stop Quarantine notifications – Endurance Page Cache plugin

Viewing 9 posts - 1 through 9 (of 9 total)
  • Author
    Posts
  • #32634
    AbZu2
    Participant

    Have begun to get a non stop stream of quarantine notifications. I reset the DB in the quarantine and security logs and immediately have the same file quarantined again. The only option is see is to select Turn Off Logging in the Security Log options. Does turning off the notifications in the Security Log  ONLY turn off logging or does it jeopardize in any way the JTC function of BPS. TIA

    Getting the following alert information.

    Quarantine Log >> Quarantined Filename: _index.html
    
    Security Log >>
    [403 GET Request: 11/03/2017 - 13:01]
    BPS Pro: 12.7
    WP: 4.7.3
    Event Code: BFHS - Blocked/Forbidden Hacker or Spammer
    Solution: N/A - Hacker/Spammer Blocked/Forbidden
    REMOTE_ADDR: 207.241.229.237
    Host Name: crawl816.us.archive.org
    SERVER_PROTOCOL: HTTP/1.0
    #32636
    AITpro Admin
    Keymaster

    UPDATE: BPS Pro 13+ and BPS 2.0+ versions have a feature called: Setup Wizard AutoFix (AutoWhitelist|AutoSetup|AutoCleanup) that automatically creates plugin and theme whitelist rules and automatically sets up and cleans up caching plugins htaccess code.

    I need more information about the problem.  Most likely the problem has something to do with the Endurance Page Cache must-use plugin, which creates static HTML files with this naming convention:  _index.html. Go to your WordPress Plugins page > click the Must-Use link > do you see this must-use plugin > Endurance Page Cache?  If you do see that the Endurance Page Cache must-use plugin is installed then do the steps in this Endurance Page Cache must-use plugin forum link: https://forum.ait-pro.com/forums/topic/endurance-page-cache-infinite-redirect-loop-css-and-js-broken/.

    #32639
    AbZu2
    Participant

    Thanks for the kind reply. Will check into the issue with the mentioned forum. Currently I have turned off the Security logging and the email notifications of quarantined files.

    Fail to find any reference to EPC in my attached Current Root htaccess and therefore unsure as to how to proceed in solving my issue in accordance to the instructions on the EPC topic (step 1) link sent. TIA

    Root htaccess file code checked and deleted
    #32642
    AITpro Admin
    Keymaster

    Go to your Quarantine Log page and post 1 of the Quarantine log entries that has this file in it:  _index.html.  You can use X’s for anything you do not want to post publicly like your website/server path.

    Example:
    [Root File AutoRestore Logged: March 10, 2017 4:19 pm]
    Quarantined Filename: Root .htaccess file renamed to auto_.htaccess
    Quarantine Path: /xxxxx/demo5/wp-content/bps-backup/quarantine/root-files/auto_.htaccess
    Restore Path: /xxxxx/demo5/.htaccess

    #32643
    AbZu2
    Participant

    As requested:

    [wp-content File Quarantine Logged: 11/03/2017 20:02]
    Quarantined Filename: _index.html
    Quarantine Path: /xxx/abzutwoc/public_html/wp-content/bps-backup/quarantine/wp-content/endurance-page-cache/2013/06/19/the-solar-system-is-changing-a-review/_index.html
    Restore Path: /xxx/abzutwoc/public_html/wp-content/endurance-page-cache/2013/06/19/the-solar-system-is-changing-a-review/_index.html
    #32644
    AITpro Admin
    Keymaster

    UPDATE: BPS Pro 13+ and BPS 2.0+ versions have a feature called: Setup Wizard AutoFix (AutoWhitelist|AutoSetup|AutoCleanup) that automatically creates plugin and theme whitelist rules and automatically sets up and cleans up caching plugins htaccess code.

    Ok yep you have the Endurance Page Cache must-use plugin installed.  The Endurance Page Cache must-use plugin is automatically installed by your Web Host.  Since this plugin is a must-use plugin then it does not show on your WordPress Plugins page unless you click the “must-use” link at the top of your WordPress Plugins page.

    Since you are not seeing the Endurance Page Cache must-use plugin’s htaccess code in your root htaccess file then either you are not using Custom Permalinks or the EPC plugin was not able to add it’s code because your Root htaccess file is locked or the EPC plugin added its htaccess code to your Root htaccess file and BPS quarantined the root htaccess file.

    So you need to do these steps below:

    1. Turn Off AutoRestore.
    2. Go to Quarantine and restore all the EPC plugin’s _index.html files from Quarantine.
    3. Copy this EPC plugin htaccess code shown below into this BPS Custom Code text box: 1. CUSTOM CODE TOP PHP/PHP.INI HANDLER/CACHE CODE
    4. Click the Save Root Custom Code button.
    5. Go to the BPS Setup Wizard page and run the Setup Wizard again (For BPS Pro run both the Pre-Installation Wizard first and then the Setup Wizard next).

    Additional Note for BPS Pro ONLY:  Running the Setup Wizards will automatically create an AutoRestore folder exclude rule for the /wp-content/endurance-page-cache/ folder so that this folder will no longer be checked by ARQ.

    # BEGIN ENDURANCE PAGE CACHE
    <IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteBase /
    RewriteRule ^/wp-content/endurance-page-cache/ - [L]
    RewriteCond %{REQUEST_METHOD} !POST
    RewriteCond %{QUERY_STRING} !.*=.*
    RewriteCond %{HTTP_COOKIE} !(wordpress_test_cookie|comment_author|wp\-postpass|wordpress_logged_in|wptouch_switch_toggle|wp_woocommerce_session_) [NC]
    RewriteCond %{DOCUMENT_ROOT}/wp-content/endurance-page-cache/$1/_index.html -f
    RewriteRule ^(.*)$ /wp-content/endurance-page-cache/$1/_index.html [L]
    </IfModule>
    # END ENDURANCE PAGE CACHE
    #32647
    AbZu2
    Participant

    Thanks again for your kind assistance. Have completed all the recommended steps. Hopefully the issue has been resolved. Problem was probably caused when i had my Blue Host hosting plan changed to Basic instead of Pro.

    #32648
    AITpro Admin
    Keymaster

    https://forum.ait-pro.com/forums/topic/endurance-page-cache-infinite-redirect-loop-css-and-js-broken/

    The Endurance Page Cache must-use plugin is installed automatically by BlueHost and I assume all other web hosts that are owned by the Parent company Endurance International Group (EIG), which is currently around 80 different web hosts:  https://en.wikipedia.org/wiki/Endurance_International_Group

    #32650
    AbZu2
    Participant

    All the recommended steps worked like a charm. Resolved. Thank you.

Viewing 9 posts - 1 through 9 (of 9 total)
  • You must be logged in to reply to this topic.