Plugin Firewall – BPS menu tabs not displaying correctly, visual format is broken, CSS format is broken

[Immerse]

[Topic has been merged into this relevant Topic]
I’ve had this issue on several sites now and it doesn’t seem to have an obvious fix, and on a site where the problem had gone away, it has reappeared this morning for no obvious reason..

If I click on a BPS page in admin, the /bulletproof-security/admin/js/bps-ui-accordion.js doesn’t appear to work. Instead of appearing properly, the whole page is laid out without accordion formatting, so seems several kilometres long.. At the same time, I get something like this in the security logs:

[403 GET Request: January 29, 2017 8:28 am]
BPS Pro: 12.6
Event Code: PFWR-PSBR-HPRA
Solution: https://forum.ait-pro.com/forums/topic/security-log-event-codes/
REMOTE_ADDR: xxxxxxxxxxx
Host Name: xxxxxxxxxxxxxx
SERVER_PROTOCOL: HTTP/1.1
HTTP_CLIENT_IP:
HTTP_FORWARDED:
HTTP_X_FORWARDED_FOR:
HTTP_X_CLUSTER_CLIENT_IP:
REQUEST_METHOD: GET
HTTP_REFERER: https://xxxxxxxxxxxxxx/xxxxxxx/wp-admin/admin.php?page=bulletproof-security%2Fadmin%2Fcore%2Fcore.php
REQUEST_URI: /xxxxxxxxxx/wp-content/plugins/bulletproof-security/admin/js/bps-ui-accordion.js?ver=12.6
QUERY_STRING:
HTTP_USER_AGENT: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:47.0) Gecko/20100101 Firefox/47.0

[403 GET Request: January 29, 2017 8:28 am]
BPS Pro: 12.6
Event Code: PFWR-PSBR-HPRA
Solution: https://forum.ait-pro.com/forums/topic/security-log-event-codes/
REMOTE_ADDR: xxxxxxxxxxx
Host Name: xxxxxxxxxxx
SERVER_PROTOCOL: HTTP/1.1
HTTP_CLIENT_IP:
HTTP_FORWARDED:
HTTP_X_FORWARDED_FOR:
HTTP_X_CLUSTER_CLIENT_IP:
REQUEST_METHOD: GET
HTTP_REFERER: https://xxxxxxxxxxx/xxxxxxxxxxx/wp-admin/admin.php?page=bulletproof-security%2Fadmin%2Fcore%2Fcore.php
REQUEST_URI: /xxxxxxxxxxx/wp-content/plugins/bulletproof-security/admin/js/bps-ui-dialog.js?ver=12.6
QUERY_STRING:
HTTP_USER_AGENT: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:47.0) Gecko/20100101 Firefox/47.0

[403 GET Request: January 29, 2017 8:28 am]
BPS Pro: 12.6
Event Code: PFWR-PSBR-HPRA
Solution: https://forum.ait-pro.com/forums/topic/security-log-event-codes/
REMOTE_ADDR: xxxxxxxxxxx
Host Name: xxxxxxxxxxx
SERVER_PROTOCOL: HTTP/1.1
HTTP_CLIENT_IP:
HTTP_FORWARDED:
HTTP_X_FORWARDED_FOR:
HTTP_X_CLUSTER_CLIENT_IP:
REQUEST_METHOD: GET
HTTP_REFERER: https://xxxxxxxxxxx/xxxxxxxxxxx/wp-admin/admin.php?page=bulletproof-security/admin/core/core.php
REQUEST_URI: /xxxxxxxxxxx/wp-content/plugins/bulletproof-security/admin/js/bps-ui-tabs.js?ver=12.6
QUERY_STRING:
HTTP_USER_AGENT: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:47.0) Gecko/20100101 Firefox/47.0

The ip that showed in each case was my home ip, the error whilst I was using bps in site admin, as admin.
Obviously, xxx replaces data I don’t want displayed..
I believe it isn’t possible to whitelist BPS files, so what should I do?

[AITpro Admin]

@ Immerse – Sounds like a Plugin Firewall – Proxy or Minification problem.  Do BPS Pro troubleshooting step #3:  https://forum.ait-pro.com/forums/topic/read-me-first-pro/#bps-pro-general-troubleshooting  If BPS Plugin pages are displaying correctly after doing troubleshooting step #3 then click this link for common problems that can break the BPS Pro Plugin Firewall: https://forum.ait-pro.com/forums/topic/plugin-firewall-read-me-first-troubleshooting/#common-pfw-problems

[Immerse]

Okay, will do.

[Author]

Posts