Home › Forums › BulletProof Security Pro › Plugin Firewall – BPS menu tabs not displaying correctly, visual format is broken, CSS format is broken
Tagged: BPS menu tabs not displaying correctly, bps-ui-accordion.js, bps-ui-dialog.js, bps-ui-tabs.js, CSS format is broken, Invalid Whitelist Rules, Plugin Firewall, visual format is broken
- This topic has 32 replies, 6 voices, and was last updated 6 years, 4 months ago by
Immerse.
-
AuthorPosts
-
AITpro Admin
Keymaster@ Pako – Send a WP Administrator login to the site to: info at ait-pro dot com. Thanks
Pako
Participantdone 🙂
be careful with wp rocket…
thanks
AITpro Admin
KeymasterSee the newest/most current list of possible causes and solutions for Plugin Firewall issues/problems here: http://forum.ait-pro.com/forums/topic/plugin-firewall-read-me-first-troubleshooting/#common-pfw-problems
@ Pako – I am having problems logging into your site. The password reset link went to a 404 error page. When I try to view your login page I see redirect errors. Please send me a new password directly and also let me know where/how to login to your site.
I see what is breaking the BPS Pro Plugin Firewall on this site. You are minifying plugin js scripts, which is known to break the Plugin Firewall: http://forum.ait-pro.com/forums/topic/plugin-firewall-read-me-first-troubleshooting/ So if you want to use the Plugin Firewall then you cannot minify plugin js scripts.
Pako
ParticipantSorry I forgot to tell you that my website is .htaccess protected and forgot to give you the credentials, anyway and about tje js minification, I can tell you that it is not the problem because I have 10 others website with WP Rocket AND BPS Pro and do not have any issue like this. FYI WP Rocket DO NOT minify any file when you are looged into the WordPress Back office.
I can give you the htaccess credentials if you want?
Thanks
AITpro Admin
Keymaster@ Pako – This plugin js script is minified
script src="http://www.domodeco.fr/wp-content/cache/min/1/3b944ae381aa04e16cf0c2869e41f046.js" data-minify="1"></script
when I right mouse click on your site’s homepage. I also see many other minified plugin js scripts. So they would definitely cause a problem on the backend of your site due to the way the Plugin Firewall works.Pako
ParticipantOk, maybe but why the 10 others website with same configuration (wp rocket + BPS pro) works fine? See this one: http://www.pascal-bourhis.net it’s the same same configuration (wp rocket + BPS pro) and no issue with BPS Pro in the backend…and please remember that I’m not talking about any issue in frontend, the website is ok. It’s just your UI dialog that are broken in the backend.
Don’t forget what I said : when you are logged into the website, there is not any minification.
All the others rules in the white list of the firewall are ok and well added/discovered automaticily.AITpro Admin
KeymasterSee the newest/most current list of possible causes and solutions for Plugin Firewall issues/problems here: http://forum.ait-pro.com/forums/topic/plugin-firewall-read-me-first-troubleshooting/#common-pfw-problems
@ Pako – Not really sure why the other sites are working correctly. Technically the same Plugin Firewall problem should be occurring on each site with minified js plugin scripts. Yep, I got it that you are referring to just the backend of your site. The Plugin Firewall affects both the frontend and backend of a site. So the problem that is occurring is probably caused by something on the frontend of the site, which is then breaking the Plugin Firewall in the backend of your site. I received the login info and will be logging into the site now.
AITpro Admin
Keymaster@ Pako – I am still unable to login to your site. This is the error that I see: ERR_TOO_MANY_REDIRECTS
Pako
ParticipantOuch!
I do not what’s happen ! I was logged into the backoffice and all was working great. I logged off and now I have the same error as you!
Help,… What can I do to? I suppose I can not delete the diretory of your plugin? I’m stuck…Pako
ParticipantIT WORKS now
It was the rules below in /wp-admin/.htacess file that I have removed and it works:
Those rules has always work before… but now you can login.# BEGIN BPSQSE-check BPS QUERY STRING EXPLOITS AND FILTERS ... ... ... # END BPSQSE-check BPS QUERY STRING EXPLOITS AND FILTERS
AITpro Admin
KeymasterSee the newest/most current list of possible causes and solutions for Plugin Firewall issues/problems here: http://forum.ait-pro.com/forums/topic/plugin-firewall-read-me-first-troubleshooting/#common-pfw-problems
@ Pako – Yeah that is wierd. No one has reported a redirect problem with those wp-admin htaccess rules before. I will check your Security Log for any clues for what could cause the redirect error.
Pako
ParticipantI let you look at this and do not do antyhing in the backoffice 🙂
PS : I do not remember why I added those rules, and are they mandatory?
AITpro Admin
KeymasterSee the newest/most current list of possible causes and solutions for Plugin Firewall issues/problems here: http://forum.ait-pro.com/forums/topic/plugin-firewall-read-me-first-troubleshooting/#common-pfw-problems
@ Pako – Normally that wp-admin code is standard that should be in the wp-admin htaccess file. What I suspect is the problem is your custom wp-admin BasicAuth/Directory password protection code since that would make much more sense as a cause for the login error than the standard BPS htaccess rules causing the error. Send me your wp-admin htaccess file so I can take a look at your custom code.
Pako
ParticipantHi
All is ok now with wp-admin .htaccess file, but the broken UI still occurs because you JS seem to be blocked.
You can login into my website and take a look?
PS: just tell me please when you have finished because today this website will be switched to HTTPS, so I have a lot a modification to do.EDIT : I’m forced to disabled the PF because it block some of my JS to be loaded, and AutoPilot (set to one minute) do no have add the right rules in /wp-content/plugin/.htaccess
ie: http://www.domodeco.fr/wp-content/plugins/flow-flow/js/public.js is blocked
Thanks
[403 GET Request: 12 septembre 2016 - 7 h 41 min] Event Code: PFWR-PSBR-HPR Solution: http://forum.ait-pro.com/forums/topic/security-log-event-codes/ REMOTE_ADDR: 88.183.180.78 Host Name: boi69-1-88-183-180-78.fbx.proxad.net SERVER_PROTOCOL: HTTP/1.1 HTTP_CLIENT_IP: HTTP_FORWARDED: HTTP_X_FORWARDED_FOR: HTTP_X_CLUSTER_CLIENT_IP: REQUEST_METHOD: GET HTTP_REFERER: http://www.domodeco.fr/wp-admin/admin.php?page=bulletproof-security%2Fadmin%2Fcore%2Fcore.php REQUEST_URI: /wp-content/plugins/bulletproof-security/admin/js/bps-ui-accordion.js?ver=12.3 QUERY_STRING: HTTP_USER_AGENT: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:48.0) Gecko/20100101 Firefox/48.0
AITpro Admin
KeymasterSee the newest/most current list of possible causes and solutions for Plugin Firewall issues/problems here: http://forum.ait-pro.com/forums/topic/plugin-firewall-read-me-first-troubleshooting/#common-pfw-problems
@ Pako – So yeah after logging into your site and seeing that everything was already working since you turned off WP Rocket js plugin script minification already, it turns out that the cause of the problem that was breaking the Plugin Firewall was WP Rocket js plugin script minfication. 😉
-
AuthorPosts
- You must be logged in to reply to this topic.