WP Google Maps Markers are not displaying

Home Forums BulletProof Security Pro WP Google Maps Markers are not displaying

This topic contains 8 replies, has 3 voices, and was last updated by  Paul 3 years, 6 months ago.

Viewing 9 posts - 1 through 9 (of 9 total)
  • Author
    Posts
  • #15016

    Rich
    Participant

    Markers are not displaying for WP Google Maps when I have UAEG enabled.

    Here’s the error:

    Failed to load resource: the server responded with a status of 403 (Forbidden) http://www.url-obscured.net/wp-content/uploads/wp-google-maps/1markers.xml?u=8657

    I obscured the URL I’m working on above but I tried editing the Uploads htaccess file as follows:

    # FORBID THESE FILE EXTENSIONS FROM BEING ACCESSED OR EXECUTED REMOTELY
    <FilesMatch "\.(7z|as|bat|bin|cgi|chm|chml|class|cmd|com|command|dat|db|db2|db3|dba|dll|DS_Store|exe|gz|hta|htaccess|htc|htm|html|htx|idc|ini|ins|isp|jar|jav|java|js|jse|jsfl|json|jsp|jsx|lib|lnk|out|php|phps|php5|php4|php3|phtml|phpt|pl|py|pyd|pyc|pyo|rar|shtm|shtml|sql|swf|sys|tar|taz|tgz|tpl|vb|vbe|vbs|war|ws|wsf|xhtml|xml|z)$">
    Order Deny,Allow
    Deny from all
    #Allow from example.com
    Allow from url-obscured.net
    Allow from google.com
    </FilesMatch>

    In other words I’ve tried my url but that didn’t work so I added Google and that didn’t work.  Any ideas about how I can figure out the external URL that’s requesting access to the XML content?

    #15017

    Rich
    Participant

    Well, I looked at the security log and saw this:

    >>>>>>>>>>> 403 GET or HEAD Request Error Logged - April 22, 2014 - 7:14 am <<<<<<<<<<<
    REMOTE_ADDR: 108.162.222.176
    Host Name: 108.162.222.176
    SERVER_PROTOCOL: HTTP/1.1
    HTTP_CLIENT_IP:
    HTTP_FORWARDED:
    HTTP_X_FORWARDED_FOR: ip-deleted
    HTTP_X_CLUSTER_CLIENT_IP: ip-delected
    REQUEST_METHOD: GET
    HTTP_REFERER: http://www.url-obscured.net/wp-admin/admin.php?page=wp-google-maps-menu&action=edit&map_id=1
    REQUEST_URI: /wp-content/uploads/wp-google-maps/1markers.xml?u=8657
    QUERY_STRING:
    HTTP_USER_AGENT: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.116 Safari/537.36

    In other words, the request is coming from the site URL so why is UAEG blocking this request?

    #15020

    AITpro Admin
    Keymaster

    You just need to use 1 of the whitelisting methods to whitelist either all xml files or just that specific file or add a RewriteEngine Off .htaccess file in the /wp-google-maps/ folder.  See the link below.

    http://forum.ait-pro.com/forums/topic/uploads-anti-exploit-guard-uaeg-read-me-first/

    #15021

    Rich
    Participant

    Thanks.  Do I have to manually edit the uploads .htaccess every time or is there a way to add custom code so it’s there every time I update the plugin?

    #15022

    AITpro Admin
    Keymaster

    The UAEG .htaccess file is a special case and it will never change unless you delete it and recreate it on the BPS Pro Security Modes page so there is no need to create any permanent Custom Code features for the UAEG .htaccess file.

    #15024

    Rich
    Participant

    Thanks!

    #20381

    Paul
    Participant

    [Topic has been merged into this relevant Topic]

    I have a google map marker that shows in error log as REQUEST_URI: /wp-content/uploads/wp-google-maps/1markers.xml?u=8221
    have added to firewall as wp-google-maps/1markers.xml
    But still shows error, can i overide a .xml
    I,m guessing as it is not in plugins directory i don’t do this.although it is a plugin
    https://wordpress.org/plugins/wp-google-maps/

    #20398

    AITpro Admin
    Keymaster
    #20401

    Paul
    Participant

    Thanks tried the RewriteEngine Off .htaccess File Method and put into wp-content/uploads/wp-google-maps/.htaccess
    but i still get no marker and still get the error
    my file just says
    RewriteEngine Off

    Removing .xml from master htaccess does however work

Viewing 9 posts - 1 through 9 (of 9 total)

You must be logged in to reply to this topic.