Hi,
Sorry for the delay. We got locked out of the dashboard because of WordFence. Please disable the plugin temporarily and if possible, please open a new thread/ticket so that we can close this one.
You are temporarily locked out
You have been temporarily locked out of this system. This means that you will not be able to log in for a while
Generated by Wordfence at Sun, 9 Feb 2020 0:40:41 GMT.
Your computer’s time: Sun, 09 Feb 2020 00:40:41 GMT.
Best regards,
Ismael
Hi Mike,
I used the wordfence assistant to remove any remaining data, hopefully that took care of that…thank you for the tip i had no idea wordfence assistant could do that.
I also removed those odd files you listed. ass.php does not sound like it belongs in wordpress lol!
so i checked the mobile view again in hopes this may have fixed it but no dice…this site did not have any issues up until about a week an a half ago….the home page when from not being visible on mobile to now just being off in terms of responsiveness. i tried disabling all plugins again just to be sure. still not working on mobile…
i contacted the developers for the slider, they insist the slider is not the issue and that it’s the theme…
what’s next?
Hi,
I’m not sure, I have not seen this before. Did you once have the WordFence plugin? It has code in your htaccess file and in your root you have “wordfence-waf.php” From this article it seems these things have to be manually removed, there is also a Wordfence Assistant plugin that will remove the Wordfence firewall & Wordfence data in your database and advanced locks.
I have not used WordFence myself or tried removing it so I’m not sure if this is normal. But the console errors to 'http://sswim.ru and net::ERR_HTTP2_PROTOCOL_ERROR error concerns me.
You also have these files in your home directory that are not normal and I can’t find any info on them from Google:
wp-real-leaf.php
ass.php
wp-ultimate.php
wp-success.php
You said there was another developer, how long have you worked on this site with no issues and when did these issues begin?
Do you have a backup that is from before the issues?
Best regards,
Mike
I recently had an issue with a website that was bogging down and throwing WP-errors. I was able to locate the source of my problem down to a folder in my wp-Content/uploads folder called Dynamic_Avia. This folder had over 10000 avia-footer….. js and css files that had been generated, I disabled the merging functions in the Template performance section and was finally able to clear the files in that folder, freeing over 50GB of server drive space!
The consequence, was that my Wordfence site scanner couldn’t run, leaving me vulnerable.
After disabling the merged CSS and JS and cleaning the dyamic_avia folder out, I was able to scan the site successfully.
This can’t be normal.
Any ideas as to why so many temporary files are being continually generated? And why they hang around taking up disk space when they serve no purpose?
Thanks
Hi there,
My website wordfence tool is saying that there is a suspected malware in an Enfold url which is sitting in the template file. Can you guys have a look and tell me if there is a problem please!
-
This topic was modified 5 years, 11 months ago by
Louise_Brace.
Hey,
You are welcome!
We escaped HTML in excerpt and i reverted it in your installation. I asked review from our devs. If they confirm the changes, we will include this version in upcoming update.
I tried to login again however i was blocked by WordFence. Could you please check if you have any error in your custom CSS using this site – http://csslint.net/?
Regards,
Yigit
Hi,
Great, I’m glad that you found the cause of the problem. I’m not sure how to fix that unfortunately, maybe you could try to reach out to Wordfence support?
Best regards,
Rikard
I found where is the problem. WordFence block iframe in editor. When I disabled, everything work fine. How to fix that with WordFence?
This reply has been marked as private.
Hi,
All of your sites are using an outdated version of the theme. Please download a latest copy of the theme from ThemeForest and replace the theme folder via FTP in wp-content\themes
For more information please check the FTP install guide.
You may not see the changes until the cached files are cleared in your browser.
Please perform the below steps to clear the browser cache:
1. Disable “merging and compression” for CSS and JS files from Enfold > Performance.
2. If a caching plugin like W3 Total Cache or Wordfence is installed check the plugin settings and clear the cache and deactivate the plugins for testing purpose.
3. Hard refresh by pressing Ctrl + Shift + F5 on your browser or press the F12 key to open chrome dev tools and right-click on the refresh button and select “Empty Cache and Hard Reload”.

Once you update the theme to the latest version the issue should be fixed.
If you have any questions please feel free to get back to us.
Best regards,
Vinay
Victoria are you in the Ukraine? Becasuse i got a wordfence admin access message this morning.
Hi on my side the preview ist not working.
I just have followed some tips from other threads:
– updated WP to 503
– Updatede Theme to 3,62
– Activated WP Super Cache and deleted Cache
– Deactivatet Super Cache Plugin
– Deaktivated Wordfence
– Duplicated Post and tried the duplicate
– Deactivatet all Plugins
I have no idea what to do…. Your advice would be very helpful.
Oke, I found the solution myself: I am building this new website on a subdomain and on the main domain Wordfence security was blocking the iframe!
So I whitelisted the action in Wordfence in the main domain, and now it’s working on the subdomain too!
However, that leaves me with one question: can I use the Google Maps iframe code without an Google Api key and without paying for it? It seems the answer is yes, because it is up and running now. But I am confused, because I read a lot of stuff about having to use the Api key?
Anyone can clear that up for me?
Hi Victoria,
what now? While I totally understand that this is a tricky issue for you, I’ll have to find a solution for my customer. She is simply not able to edit anything. Even IF Wordfence would be the problem, should I disable one of the most popular plugins?
Thanks!
Mike
Hi,
Thank you for the update.
Have you tried using the Google reCAPTCHA option instead of the default captcha question? It’s a much better form of protection compare to the default captcha. Please visit the documentation for more info.
// https://kriesi.at/documentation/enfold/contact-form/#activate-google-captcha
And you should install plugins like Sucuri or WordFence to enchance the overall security of the site.
Best regards,
Ismael
Hi Matthias,
Yes, that was correct. It should be working. Can you please deactivate Wordfence for now?
Best regards,
Victoria
Hi,
unfortunately, I can’t confirm that. We tested it, and it worked. Then, I reactivated Wordfence and the Cache Plugin. It still worked. Then a disabled wp_debug, and the editor did not worked. I enabled wp_debug again, but the problems are still there. We cleared the cache and I even asked the client to shut down her computer. However, it would not a solution anyway. I don’t want to run a site with debugging enabled. What now? I know, it’s a weird situation. I can’t see any of theses problems on my machine. But the client is pretty pissed, and I understand her.
Hi Guys.
I apologize for reposting this topic, but Wordfence alerted me that there was a log in from you all. However, no answer was given to my problem.
I’m using Enfold and trying to create my mega menu. However, for some reason, when I try to make a column start a new row, it won’t. Example: When I try to place ‘Guitars’ (which I’ve chosen to be a column) under ‘Categories’ (which is a mega menu item), ‘Guitars’ doesn’t show up at all.
I’m trying to have it look like:
‘Categories’ (in the mega menu but not a link) Then,
‘Guitars’ ( Column DIRECTLY under ‘Categories’, but not in the mega menu)
Acoustic Guitars (Category, DIRECTLY under ‘Guitars’)
Electric Guitars (Category, DIRECTLY under ‘Acoustic Guitars’) etc.
I watched the documentation video and read the page. What am I doing wrong?
Much appreciation and Looking forward to your help!
P.S. Also, no plugins are blocking any countries, so all moderators should be able to get through.
Hi rwalderh,
Please disable Wordfence and switch to the Classic editor in the theme options and see if the issue persists.
Best regards,
Victoria
Disabling Wordfence made things even worse. The editor stayed in loading mode. That means, the loading indicator was spinning forever, and no content was loaded even in Mac + Safari and Win 7 + Chrome. My customer is not amused. Any ideas?
Best, Mike
Hi DFME,
I am getting the connection reset a few times.
Please disable Wordfence and see if the issue persists.
Best regards,
Victoria
Hi Brad,
I tried to check the API key you used on my local server and it works fine, tested a few working API keys on your site and it’s not working.
I think the issue maybe coming from one of your plugins, I think it might be wordfence however since your site is live it’s not a good idea to disable it.
Can you try to create a staging site? here’s a tutorial that you can follow: https://themeisle.com/blog/wordpress-staging-site/
Best regards,
Nikko
Hi,
Please ensure the login info is correct, since I couldn’t see the login page from my IP I used a VPN with a France IP and was able to see the login page but when I used your login info I was locked out by WordFence. Please disable WordFence so we can help.
Best regards,
Mike
Hi,
Sorry for the late reply, I’m in the USA but am blocked by WordFence, Please see the screenshot in Private Content area.
In your screenshot I see the main menu is black for the current page, this is how you want the sub-menu to be also, correct?
Best regards,
Mike
This reply has been marked as private.
Hey Philippe,
The link is blocked by Wordfence and we cannot see the issue.
Can you share the link to your website too?
Best regards,
Victoria
Hi,
Thank you for following up.
The reCAPTCHA option can only do so much to protect the site from spammers, so in addition to it, you should install security plugins to filter malicious softwares and unwanted addresses, and stop them from ever getting through. This should help protect the site not only from spammers, but also from any harmful activities directed to it. You can pick one from this list.
// https://wordpress.org/plugins/wordfence/
// https://wordpress.org/plugins/wp-cerber/
// https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/
Best regards,
Ismael
Hey Hugh,
There are plugins that can do that for you. You need to use one of the anti-spam plugins.
These plugins might help to prevent spams and get rid of third party scripts.
// https://wordpress.org/plugins/sucuri-scanner/
// https://wordpress.org/plugins/wordfence/
Related article: https://www.wpbeginner.com/opinion/sucuri-review-how-sucuri-helped-us-block-450000-wordpress-attacks-in-3-months/
Best regards,
Victoria
Hi Victoria,
I am not using any page speed plugins. I am using theese plugins:
Wordfence WPML Language
WP SMTP
WasUp Real Time Analytics
Duplicate post
I have already disabled all plugins on the website without any difference.