Viewing 30 results - 391 through 420 (of 958 total)
  • Author
    Search Results
  • #939336

    The suggestion to upgrade PHP version to minimum 5.6 OR replace the content of header.php has essentially been done. I am using PHP version 5.6.32 and have been since the issue began. I have not replaced the header.php and would prefer another workaround. I have 15 or so sites with the same basic configuration – Enfold, Wordfence, Yoast SEO, etc. and I’m concerned with updating to the latest version of Enfold if this will need to be done on all of those sites.

    #937922

    I’ve had two sites that I’ve updated today go down when updating to 4.2.6 from 4.2.5. They’ve had similar configurations: php 5.6, WP 4.9.5, Wordfence 7.1.2, All in One SEO 2.5. I received an http 500 error. Thanks for any help.

    #932534

    In reply to: Cache Minify Plugins

    Hey SuperSportsUAE,
    BWP has been recommended in the past as one of the few minify plugins that doesn’t break the code. I have seen a few posts of issues with W3. Try reading other member’s feedback on Recommended plugins Why do you want to leave WP Fastest Cache? I don’t remember seeing any issues with it.
    As for the Wordfence warning, try to change the Firewall to “Learning Mode”. Also check Wordfence support for similar reports.

    Best regards,
    Mike

    #931837

    Topic: Cache Minify Plugins

    in forum Enfold
    SuperSportsUAE
    Participant

    I’ve been using WP Fastest Cache but it appears that WP Super Cache is the way to go when using Enfold.

    However, when I choose the recommended settings, and try to save, I get this message

    403 Forbidden
    A potentially unsafe operation has been detected in your request to this site.

    Generated by Wordfence at Fri, 23 Mar 2018 5:33:14 GMT.
    Your computer’s time: Fri, 23 Mar 2018 05:33:16 GMT.

    Any advice, please?

    I’m looking at W3 Total Cache as another recommendation, but since it comes with Minify built-in why do people also seem to use BWP Minify?

    Is it best to use W3 for caching only, and then BWP for minifying?

    My concern for BWP is that it has not been updated for 3 years – is this cause for concern? It’s still being recommended.

    Thanks
    Angus

    #929597

    I tried to disable both WordFence and WPRocket with no effect.
    I updated through the admin panel.
    Thank you.

    #929593

    Hi,

    From your situation, it appears there may be malware on your local system and infected any files which you may have upload to your site?

    Another possibility the hosting server is infected with malware and the malware is trying to get to your system when you access the site so the local antivirus is blocking it.

    Please run a full scan on your local system and check with your hosting company and run a full scan on your site online.

    Once you are able to get access to your site please make sure to protect your self by using security plugins like

    WPS Hide Login
    Wordfence Security
    Anti-Malware Security and Brute-Force Firewall

    Hope this helps :)

    Best regards,
    Vinay

    #929495

    Hi,
    I see you are using a cache plugin, please disable, I also see you are using Wordfence, this may be blocking your /uploads/dynamic_avia/ “avia-merged-styles” from loading. Please disable.
    When you last updated, did you update via FTP, or though the admin panel?

    Best regards,
    Mike

    #929133

    Hi,

    I tried to login and check your site but I’m getting an error

    Are you using Wordfence or any other security plugin? If so please whitelist the below file in the plugin settings.

    wp-admin/admin-ajax.php
    

    If you still have the same issue please try to deactivate all plugins for testing purpose and let us know if that helps.

    Best regards,
    Vinay

    Hi,

    It was related to WordFence options. I went to WordFence > Firewall > All Firewall Options and enabled “Web Application Firewall Status”. Please flush browser cache and review your website.

    Best regards,
    Yigit

    #923315

    Hi Basilis,

    It is Apache (1&1).
    I use Wordfence security, but that no longer uses caching (I’m pretty sure).

    But this did happen on every single woocommerce site, where Advanced Editor was used.

    Stevo

    #921469
    craigriches
    Participant

    At the request of Mike, I am creating a new thread so that my issue can be investigated.
    Update attempts have been made to the latest version of Enfold 4.2.5 both from within Dashboard and by downloading latest version from Themeforest and then FTP install.
    Both resulted in Blank homepage but still access to Backend Dashboard via wp-admin.
    Wordfence is installed and active and I would like to continue to use this plugin, so if it is the cause then a solution needs to be found.
    Rolling back to 4.2.4 brings the site back to operational with Wordfence active, so it would appear that some file change in 4.2.5 is breaking things.
    Staging site details and Admin user access credentials are in Private Content

    Regards
    Craig

    #921134

    Hi Mike
    I will start a new thread and put the login details in Pvt.
    You may not have seen my previous comments in this thread but the issue IS on my staging site. I am not prepared to apply the current update to my live site until this issue is resolved. And it doesn’t appear to be an isolated incident as it seems to be affecting quite a lot of others.
    Previous comments confirmed I am using PHP 7.1
    I can try disabling Wordfence, but I would want to continue its usage if I manage a successful update. And strange that Wordfence active does not affect 4.2.4.

    #921130

    Is the theme incompatible with Wordfence? Or should we deactivate Wordfence only during installation?

    • This reply was modified 7 years, 10 months ago by frlozano.
    #921124

    Hi,

    @frlozano
    Please open a new thread so we can assist, we will want communicate in the Private Content area, for login info, but as this is not your thread you will not see what we write, nor will your info be private.
    Two things to look at is to try disabling your plugins, such as wordfence, and ensure your PHP is v7

    Please try creating a staging / testing site on a sub-domain with a copy of your site. This will allow you to test updates without effecting your production site, it will also allow us to help debug.

    Best regards,
    Mike

    #920902

    Hi,
    Do you have Wordfence? That maybe preventing loading of JS files within the uploads folder, Try to disable Wordfence or other security plugins.

    Best regards,
    Mike

    #920901

    Hey dhuet,
    I see you have Wordfence, that is preventing loading of JS files within the uploads folder, I disabled Wordfence and your site is now back up.
    Please check.

    Best regards,
    Mike

    Hi,

    I deactivated Wordfence via FTP and increased memory limit to 256M in wp-config.php file. Please review your website :)

    Best regards,
    Yigit

    jkdavis
    Participant

    Cannot login as admin due to this error:

    INSECURE PASSWORD: Your login attempt has been blocked because the password you are using exists on lists of passwords leaked in data breaches. Attackers use such lists to break into sites and install malicious code. Please reset your password to reactivate your account. Learn More

    So I’m trying to deactivate Wordfence to bypass this, and I am receiving the following error after attempting to rename the Wordfence plugin via FTP.

    Fatal error: Allowed memory size of 67108864 bytes exhausted (tried to allocate 7040 bytes) in -PRIVATE CONTENT-

    I’ve seen this error pop up when making blog post at times as well. Anyhow, I have PHP set to 128. Any help would be greatly appreciated!

    Thanks!!

    This reply has been marked as private.
    #915514

    Sorry this is going to be a pain as I have WordFence set up which blocks all countries except UK and requires a mobile phone code when logged in.

    #911914

    Hi,

    You would need to either re-upload WordPress OR you can try use a software like WordFence to try replace the file through their automated system

    Best regards,
    Basilis

    #907232

    Hey Mireya,

    You should take security measures very seriously, but I don’t think this is one of them to be honest. I have several private site where my author name and user name is the same, and I’ve never seen login attempt using that user name. Bots tend to only use “admin”, as that is the default user created by WordPress if you don’t change it yourself. Did you try to use a plugin like WordFence to see if this is actually a problem on your site? If not then I don’t think you have to worry about it too much.

    If you are worried about someone gaining access to your, site then I would recommend that you lock down the login screen instead as explained on this page: https://steadywp.com/wordpress-security/

    Best regards,
    Rikard

    #901445

    Hi,
    I see you are using PHP Version: 5.4.45
    Please ask your webhost to update to version 7
    I also recommend disabling Wordfence when upgrading.

    Best regards,
    Mike

    #895986

    Hi,

    Thank you for the update. The site is stuck on the preloader and I get the following errors.

    Uncaught ReferenceError: jQuery is not defined
        at eval (eval at <anonymous> (layerslider.kreaturamedia.jquery.js:13), <anonymous>:1:216)
        at layerslider.kreaturamedia.jquery.js:13
    12:23:04.497 www.zipzapmoney.com/:660 Uncaught ReferenceError: jQuery is not defined
        at www.zipzapmoney.com/:660
    12:23:04.497 www.zipzapmoney.com/:661 Uncaught TypeError: lsjQuery is not a function
        at www.zipzapmoney.com/:661
    12:23:04.697 /cdn-cgi/pe/bag2?r[]=https%3A%2F%2Fwww.zipzapmoney.com%2Fwp-content%2Fplugins%2Fjvzoo-ad-manager%2Fjs%2Fjam-js.js&r[]=https%3A%2F%2Fwww.zipzapmoney.com%2Fwp-includes%2Fjs%2Fjquery%2Fjquery.js%3Fver%3D1.12.4&r[]=https%3A%2F%2Fwww.zipzapmoney.com%2Fwp-includes%2Fjs%2Fjquery%2Fjquery-migrate.min.js%3Fver%3D1.4.1&r[]=https%3A%2F%2Fwww.zipzapmoney.com%2Fwp-content%2Fplugins%2Fcommentluv%2Fjs%2Fcommentluv.js%3Fver%3D2.94.7&r[]=https%3A%2F%2Fwww.zipzapmoney.com%2Fwp-content%2Fthemes%2Fenfold%2Fjs%2Favia-compat.js%3Fver%3D4.2&r[]=https%3A%2F%2Fwww.zipzapmoney.com%2Fwp-includes%2Fjs%2Fmediaelement%2Fmediaelement-and-player.min.js%3Fver%3D4.2.6-78496d1&r[]=https%3A%2F%2Fwww.zipzapmoney.com%2Fwp-includes%2Fjs%2Fmediaelement%2Fmediaelement-migrate.min.js%3Fver%3D264ec6cb2547a41467b349fded2eee78&r[]=https%3A%2F%2Fwww.zipzapmoney.com%2Fwp-content%2Fplugins%2Fjetpack%2F_inc%2Fbuild%2Fpostmessage.min.js%3Fver%3D5.7&r[]=https%3A%2F%2Fwww.zipzapmoney.com%2Fwp-content%2Fplugins%2Fjetpack%2F_inc%2Fbuild%2Fjquery.jetpack-resize.min.js%3Fver%3D5.7&r[]=https%3A%2F%2Fwww.zipzapmoney.com%2Fwp-content%2Fplugins%2Fjetpack%2F_inc%2Fbuild%2Fphoton%2Fphoton.min.js%3Fver%3D20130122&r[]=https%3A%2F%2Fwww.zipzapmoney.com%2Fwp-content%2Fplugins%2Fbbpress%2Ftemplates%2Fdefault%2Fjs%2Feditor.js%3Fver%3D2.5.14-6684&r[]=https%3A%2F%2Fs0.wp.com%2Fwp-content%2Fjs%2Fdevicepx-jetpack.js%3Fver%3D201802&r[]=https%3A%2F%2Fwww.zipzapmoney.com%2Fwp-content%2Fplugins%2Fadrotate%2Flibrary%2Fjquery.adrotate.clicktracker.js&r[]=https%3A%2F%2Fwww.zipzapmoney.com%2Fwp-content%2Fplugins%2Femail-subscribers%2Fwidget%2Fes-widget.js%3Fver%3D264ec6cb2547a41467b349fded2eee78&r[]=https%3A%2F%2Fwww.zipzapmoney.com%2Fwp-content%2Fplugins%2Femail-subscribers%2Fwidget%2Fes-widget-page.js%3Fver%3D264ec6cb2547a41467b349fded2eee78&r[]=https%3A%2F%2Fsecure.gravatar.com%2Fjs%2Fgprofiles.js%3Fver%3D2018Janaa Failed to load resource: the server responded with a status of 400 ()
    12:23:04.699 /cdn-cgi/pe/bag2?r[]=https%3A%2F%2Fwww.zipzapmoney.com%2Fwp-includes%2Fjs%2Fwp-emoji-release.min.js%3Fver%3D264ec6cb2547a41467b349fded2eee78 Failed to load resource: the server responded with a status of 400 ()
    12:23:04.731 jquery-migrate.min.js?ver=1.4.1:2 JQMIGRATE: Migrate is installed, version 1.4.1
    12:23:04.969 /cdn-cgi/pe/bag2?r[]=https%3A%2F%2Fwww.google-analytics.com%2Fanalytics.js Failed to load resource: the server responded with a status of 400 ()
    12:23:17.877 /cdn-cgi/pe/bag2?r[]=https%3A%2F%2Fwww.zipzapmoney.com%2F%3Fwordfence_lh%3D1%26hid%3D8DB16A025F724E93FB2F914E1DCF5780%26r%3D0.35909935387044034 Failed to load resource: the server responded with a status of 400 ()
    

    It seems to related to the cdn and the wordfence plugin. Please disable those temporarily. I also tried to login but got locked out.

    You are temporarily locked out
    You have been temporarily locked out of this system. This means that you will not be able to sign-in or use several other features that may compromise security. Please try back in a short while.

    Return to the site home page
    Attempt to return to the admin login page (you may still be locked out)

    Best regards,
    Ismael

    #895469

    Hi,
    Thank you, I was able to login, yet I was unable reach some features do you have another security plugin? I didn’t see this setting in your Wordfence plugin.
    I know you say this happens often, which is unusual. I’d like to see how your site responds on a clean install localhost. Would you mind if I try this? (make a copy of your site)

    Best regards,
    Mike

    #881469

    Hi,

    Thanks for providing access. Yes, I do understand what the problem is, I tried to turn on debug but I couldn’t find any errors. Can you try to reinstall wordpress manually? this instruction should help: https://www.wordfence.com/learn/how-to-manually-upgrade-wordpress-themes-and-plugins/

    Also can you set all folder permissions to 755 and file permissions to 644. I tried to use a default theme and the issue is not related with the theme. Let us know if reinstalling wp and fixing permissions help.

    Best regards,
    Nikko

    #879078

    If a compromise has happened, it was likely not from someone guessing your admin password. When Google crawls your site, it collects information contained in the WP database. This is likely where the issue is. In some cases you won’t even know if just looking at your web site. I know for fact that there are hundreds of China-based bots scanning sites all the time looking for weaknesses. When they find one, they will upload php code and execute it on the server, injecting code into the database to accomplish exactly what you see happen when you go to Google and search for your site. It usually happens with paid Google ad sites but does to others as well.

    Long story short – as Rikard suggested, if you’re not a pro at WP and server side admin, check with a pro. I suggest Wordfence, but choose as you wish. There IS an underlying reason for this.

    Hi,
    We are now getting an error that Wordfence has locked us out, please check and disable.

    Best regards,
    Mike

    #875987

    Ismael,

    Can you give me an IP that I can white list?

    My guess is it is Wordfence that is currently keeping you out.

    ~ Greg

    Hi Anna,

    Credentials did not work for me. Could you please update the credentials?
    Are you getting this error now, with Wordfence disabled?

    Best regards,
    Victoria

Viewing 30 results - 391 through 420 (of 958 total)