Plugin Firewall – BPS menu tabs not displaying correctly, visual format is broken, CSS format is broken

[AITpro Admin]

@ Pako – Send a WP Administrator login to the site to: info at ait-pro dot com. Thanks

[Pako]

done 🙂

be careful with wp rocket…

thanks

[AITpro Admin]

See the newest/most current list of possible causes and solutions for Plugin Firewall issues/problems here: http://forum.ait-pro.com/forums/topic/plugin-firewall-read-me-first-troubleshooting/#common-pfw-problems

@ Pako – I am having problems logging into your site.  The password reset link went to a 404 error page.  When I try to view your login page I see redirect errors.  Please send me a new password directly and also let me know where/how to login to your site.

I see what is breaking the BPS Pro Plugin Firewall on this site.  You are minifying plugin js scripts, which is known to break the Plugin Firewall:  http://forum.ait-pro.com/forums/topic/plugin-firewall-read-me-first-troubleshooting/  So if you want to use the Plugin Firewall then you cannot minify plugin js scripts.

[Pako]

Sorry I forgot to tell you that my website is .htaccess protected and forgot to give you the credentials, anyway and about tje js minification,  I can tell you that it is not the problem because I have 10 others website with WP Rocket AND BPS Pro and do not have any issue like this. FYI WP Rocket DO NOT minify any file when you are looged into the WordPress Back office.

I can give you the htaccess credentials if you want?

Thanks

[AITpro Admin]

@ Pako – This plugin js script is minified script src="http://www.domodeco.fr/wp-content/cache/min/1/3b944ae381aa04e16cf0c2869e41f046.js" data-minify="1"></script when I right mouse click on your site’s homepage. I also see many other minified plugin js scripts. So they would definitely cause a problem on the backend of your site due to the way the Plugin Firewall works.

[Pako]

Ok, maybe but why the 10 others website with same configuration (wp rocket + BPS pro) works fine? See this one: http://www.pascal-bourhis.net it’s the same same configuration (wp rocket + BPS pro) and no issue with BPS Pro in the backend…and please remember that I’m not talking about any issue in frontend, the website is ok. It’s just your UI dialog that are broken in the backend.

Don’t forget what I said : when you are logged into the website, there is not any minification.
All the others rules in the white list of the firewall are ok and well added/discovered automaticily.

[AITpro Admin]

See the newest/most current list of possible causes and solutions for Plugin Firewall issues/problems here: http://forum.ait-pro.com/forums/topic/plugin-firewall-read-me-first-troubleshooting/#common-pfw-problems

@ Pako – Not really sure why the other sites are working correctly.  Technically the same Plugin Firewall problem should be occurring on each site with minified js plugin scripts.  Yep, I got it that you are referring to just the backend of your site.  The Plugin Firewall affects both the frontend and backend of a site.  So the problem that is occurring is probably caused by something on the frontend of the site, which is then breaking the Plugin Firewall in the backend of your site.  I received the login info and will be logging into the site now.

[AITpro Admin]

@ Pako – I am still unable to login to your site.  This is the error that I see:  ERR_TOO_MANY_REDIRECTS

[Pako]

Ouch!
I do not what’s happen ! I was logged into the backoffice and all was working great. I logged off and now I have the same error as you!
Help,… What can I do to? I suppose I can not delete the diretory of your plugin? I’m stuck…

[Pako]

IT WORKS now
It was the rules below in /wp-admin/.htacess file that I have removed and it works:
Those rules has always work before… but now you can login.

# BEGIN BPSQSE-check BPS QUERY STRING EXPLOITS AND FILTERS
...
...
...
# END BPSQSE-check BPS QUERY STRING EXPLOITS AND FILTERS

[AITpro Admin]

See the newest/most current list of possible causes and solutions for Plugin Firewall issues/problems here: http://forum.ait-pro.com/forums/topic/plugin-firewall-read-me-first-troubleshooting/#common-pfw-problems

@ Pako – Yeah that is wierd. No one has reported a redirect problem with those wp-admin htaccess rules before.  I will check your Security Log for any clues for what could cause the redirect error.

[Pako]

I let you look at this and do not do antyhing in the backoffice 🙂

PS : I do not remember why I added those rules, and are they mandatory?

[AITpro Admin]

See the newest/most current list of possible causes and solutions for Plugin Firewall issues/problems here: http://forum.ait-pro.com/forums/topic/plugin-firewall-read-me-first-troubleshooting/#common-pfw-problems

@ Pako – Normally that wp-admin code is standard that should be in the wp-admin htaccess file.  What I suspect is the problem is your custom wp-admin BasicAuth/Directory password protection code since that would make much more sense as a cause for the login error than the standard BPS htaccess rules causing the error.  Send me your wp-admin htaccess file so I can take a look at your custom code.

[Pako]

Hi

All is ok now with wp-admin .htaccess file, but the broken UI still occurs because you JS seem to be blocked.
You can login into my website and take a look?
PS: just tell me please when you have finished because today this website will be switched to HTTPS, so I have a lot a modification to do.

EDIT : I’m forced to disabled the PF because it block some of my JS to be loaded, and AutoPilot (set to one minute) do no have add the right rules in /wp-content/plugin/.htaccess

ie: http://www.domodeco.fr/wp-content/plugins/flow-flow/js/public.js is blocked

Thanks

[403 GET Request: 12 septembre 2016 - 7 h 41 min]
Event Code: PFWR-PSBR-HPR
Solution: http://forum.ait-pro.com/forums/topic/security-log-event-codes/
REMOTE_ADDR: 88.183.180.78
Host Name: boi69-1-88-183-180-78.fbx.proxad.net
SERVER_PROTOCOL: HTTP/1.1
HTTP_CLIENT_IP:
HTTP_FORWARDED:
HTTP_X_FORWARDED_FOR:
HTTP_X_CLUSTER_CLIENT_IP:
REQUEST_METHOD: GET
HTTP_REFERER: http://www.domodeco.fr/wp-admin/admin.php?page=bulletproof-security%2Fadmin%2Fcore%2Fcore.php
REQUEST_URI: /wp-content/plugins/bulletproof-security/admin/js/bps-ui-accordion.js?ver=12.3
QUERY_STRING:
HTTP_USER_AGENT: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:48.0) Gecko/20100101 Firefox/48.0

[AITpro Admin]

See the newest/most current list of possible causes and solutions for Plugin Firewall issues/problems here: http://forum.ait-pro.com/forums/topic/plugin-firewall-read-me-first-troubleshooting/#common-pfw-problems

@ Pako – So yeah after logging into your site and seeing that everything was already working since you turned off WP Rocket js plugin script minification already, it turns out that the cause of the problem that was breaking the Plugin Firewall was WP Rocket js plugin script minfication.  😉

[Author]

Posts