henrikpiski on "[Plugin: Wordfence Security] Cannot enable Web Application Firewall"

I can't seem to get the web application firewall working on several of my WordPress websites that are hosted with SiteGround. I have done it for some of the websites that I manage on Bluehost - no issues whatsoever.

I strongly suspect that it has to do with the configuration of the Siteground servers. I have tried all sorts of server configurations and also tued off caching but it does not seem to work. I even manually created the php ini file with the necessary info but still no goodness.

I even got advanced SiteGround technical support to assist me and they told me that I would need to speak to WordFence technical support.

What can I do to get it working on websites hosted with SIteGround hosting servers?

https://wordpress.org/plugins/wordfence/

Hello,

Could you give me your domain name so I can check if there is anything we at SiteGround can do to further investigate this issue and find a solution?

Sure thing. Domain name I'm trying to install the WAF on is coolwebs.com.au

I've investigated your case and it tued out that WordFence is properly generating the line for the php.ini file:

auto_prepend_file = '/home/*****/public_html/wordfence-waf.php'

and the file was generated successfully in the website main folder. However, by default php.ini files do not work recursively on our environment. That's why we've added the following line to the .htaccess file in your public_html folder:

SetEnv PHPRC /home/*****/public_html/php.ini

Now, the rules in the php.ini file apply to all folders including the wp-admin one and your firewall is working flawlessly :)

Thanks heaps Hristo! I have some other addon domains with SiteGround I would also like to have the WF Firewall enabled for. Can I log a support ticket in SG so you can take a look at them from your ticketing system rather than leaving it here on the public WordPress.org forum?

Cheers.

Yeah, sure. If you want, you can just add the line in the .htaccess file in the root folder for each domain and then simply enable it from the interface, that should be even quicker :)

HI,

I am having a similar issue not being able to activate the firewall on my server guruplay.tv
I have many different wordpress domains on the same server, and it does'nt work for anyone.
The correct .htaccess is created in the root directory of each domain, the waf file is also there but the firewall is not activated. Any ideas what could be the issue?

Thanks

Henrik

Check if you have the php.ini file placed too! The .htaccess file just makes it work for the entire domain.

yes I have a local php.ini file in the same directory as the waf file and I have added the SetEnv PHPRC /home/*****/public_html/php.ini in .htaccess

http://guruplay.tv