WP Google Maps Markers are not displaying

[Rich]

Markers are not displaying for WP Google Maps when I have UAEG enabled.

Here’s the error:

Failed to load resource: the server responded with a status of 403 (Forbidden) http://www.url-obscured.net/wp-content/uploads/wp-google-maps/1markers.xml?u=8657

I obscured the URL I’m working on above but I tried editing the Uploads htaccess file as follows:

# FORBID THESE FILE EXTENSIONS FROM BEING ACCESSED OR EXECUTED REMOTELY
<FilesMatch "\.(7z|as|bat|bin|cgi|chm|chml|class|cmd|com|command|dat|db|db2|db3|dba|dll|DS_Store|exe|gz|hta|htaccess|htc|htm|html|htx|idc|ini|ins|isp|jar|jav|java|js|jse|jsfl|json|jsp|jsx|lib|lnk|out|php|phps|php5|php4|php3|phtml|phpt|pl|py|pyd|pyc|pyo|rar|shtm|shtml|sql|swf|sys|tar|taz|tgz|tpl|vb|vbe|vbs|war|ws|wsf|xhtml|xml|z)$">
Order Deny,Allow
Deny from all
#Allow from example.com
Allow from url-obscured.net
Allow from google.com
</FilesMatch>

In other words I’ve tried my url but that didn’t work so I added Google and that didn’t work.  Any ideas about how I can figure out the external URL that’s requesting access to the XML content?

[Rich]

Well, I looked at the security log and saw this:

>>>>>>>>>>> 403 GET or HEAD Request Error Logged - April 22, 2014 - 7:14 am <<<<<<<<<<<
REMOTE_ADDR: 108.162.222.176
Host Name: 108.162.222.176
SERVER_PROTOCOL: HTTP/1.1
HTTP_CLIENT_IP:
HTTP_FORWARDED:
HTTP_X_FORWARDED_FOR: ip-deleted
HTTP_X_CLUSTER_CLIENT_IP: ip-delected
REQUEST_METHOD: GET
HTTP_REFERER: http://www.url-obscured.net/wp-admin/admin.php?page=wp-google-maps-menu&action=edit&map_id=1
REQUEST_URI: /wp-content/uploads/wp-google-maps/1markers.xml?u=8657
QUERY_STRING:
HTTP_USER_AGENT: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.116 Safari/537.36

In other words, the request is coming from the site URL so why is UAEG blocking this request?

[AITpro Admin]

You just need to use 1 of the whitelisting methods to whitelist either all xml files or just that specific file or add a RewriteEngine Off .htaccess file in the /wp-google-maps/ folder.  See the link below.

http://forum.ait-pro.com/forums/topic/uploads-anti-exploit-guard-uaeg-read-me-first/

[Rich]

Thanks.  Do I have to manually edit the uploads .htaccess every time or is there a way to add custom code so it’s there every time I update the plugin?

[AITpro Admin]

The UAEG .htaccess file is a special case and it will never change unless you delete it and recreate it on the BPS Pro Security Modes page so there is no need to create any permanent Custom Code features for the UAEG .htaccess file.

[Rich]

Thanks!

[Paul]

[Topic has been merged into this relevant Topic]

I have a google map marker that shows in error log as REQUEST_URI: /wp-content/uploads/wp-google-maps/1markers.xml?u=8221
have added to firewall as wp-google-maps/1markers.xml
But still shows error, can i overide a .xml
I,m guessing as it is not in plugins directory i don’t do this.although it is a plugin
https://wordpress.org/plugins/wp-google-maps/

[AITpro Admin]

@ Paul – See this reply in this Forum Topic above:  http://forum.ait-pro.com/forums/topic/uaeg-blocking-wp-google-maps-markers/#post-15020

[Paul]

Thanks tried the RewriteEngine Off .htaccess File Method and put into wp-content/uploads/wp-google-maps/.htaccess
but i still get no marker and still get the error
my file just says
RewriteEngine Off

Removing .xml from master htaccess does however work

[Author]

Posts