Profiles

Posted a reply to Password reset requests still triggering with Login Protection enabled, on the site WordPress.org Forums:
That's the way the Login Protection works: it protects against login attempts, not reset or…

Posted a reply to 403 error via Cloudflare: Occurs only when Login Protection is enabled, on the site WordPress.org Forums:
Check the firewall log (NinjaFirewall > Logs), it will show the reason why you were…

Posted a reply to Locked Out Of Site, on the site WordPress.org Forums:
Your submission was marked as spam, please try again or contact a site administrator for…

Posted a reply to Error updating security rules: HTTP 403 on updates.nintechnet.com, on the site WordPress.org Forums:
api.nintechnet.com is the correct endpoint since version 4.7. You can remove all other subdomains.I will…

Posted a reply to SAAS applications, on the site WordPress.org Forums:
How does it connect to your site: REST API, XML-PRC API, admin-ajax ?

Posted a reply to Downloaded list of vulnerabilities is corrupted, on the site WordPress.org Forums:
Do you have a specific server setup, because normally it should work out of the…

Posted a reply to [NinjaFirewall (WP Edition) - Advanced Security Plugin and Firewall] Downloaded list of vulnerabilities is corrupted, on the site WordPress.org Forums:
Try to run this code: <?phpheader('Content-type: text/plain');require 'wp-config.php';$url = 'https://api.nintechnet.com/ninjafirewall/security-update';global $wp_version;$res = wp_remote_get( $url, […

Posted a reply to 404 status for blocked none, on the site WordPress.org Forums:
Do you need some rewrite rules in your Nginx configuration file such as try_files $uri…

Posted a reply to 404 status for blocked none, on the site WordPress.org Forums:
I can't reproduce the 404 code. I always get 403.Do you have some rules somewhere…

Posted a reply to PHP Fatal error: Uncaught UnexpectedValueException, on the site WordPress.org Forums:
Version 4.8.2 was released on November 28th, but your log shows "21-Nov-2025". Can you check…

Posted a reply to PHP Fatal error: Uncaught UnexpectedValueException, on the site WordPress.org Forums:
It looks like you're still running version 4.8.1 That error should be gone after upgrading…

Posted a reply to Missing /wp-content/session folder, on the site WordPress.org Forums:
@gosuccess: Thanks for providing the log and details. I will push an update today.

Posted a reply to Missing /wp-content/session folder, on the site WordPress.org Forums:
Upgrading PHP shouldn't affect the firewall, but could potentially affect file permission and ownership. But…

Posted a reply to Missing /wp-content/session folder, on the site WordPress.org Forums:
Did you change the path of the firewall's cache/log or the session folders (it can…

Posted a reply to Integration with WP Engine, on the site WordPress.org Forums:
Live Log is handled by the firewall, just like the firewall log. The login event…

Posted a reply to Integration with WP Engine, on the site WordPress.org Forums:
/wp-content/nfwlog was the default log/cache folder.The new folder shows all files, including session files. Live…

Posted a reply to Integration with WP Engine, on the site WordPress.org Forums:
Could it be due to some WP Engine restrictions ?You can try to change the…

Posted a reply to Integration with WP Engine, on the site WordPress.org Forums:
It is loaded. Is /usr/local/share/auto_prepends/auto_prepends.php your own file or WP Engine's?Can you try to trigger…

Posted a reply to Integration with WP Engine, on the site WordPress.org Forums:
Can you run the troubleshooter script: https://nintechnet.com/share/wp-check.txt 1. Rename the file to "wp-check.php".2. Upload it…

Posted a reply to New Version 4.8.1, on the site WordPress.org Forums:
The purpose of the .user.ini and the MU files is simply to load NinjaFirewall, it…

Posted a reply to New Version 4.8.1, on the site WordPress.org Forums:
There's no need to change anything.

Posted a reply to New Version 4.8.1, on the site WordPress.org Forums:
You can update as usual, NinjaFirewall will use its own session implementation instead of PHP's.…

Posted a reply to Firewall Log – Bot Accessing PHP Script That Never Existed?, on the site WordPress.org Forums:
You can check your server HTTP log to see what happened at 13:18:13 on October…

Posted a reply to Critical error on API REST, on the site WordPress.org Forums:
The empty file is just a flag that tells the firewall to use its built-in…

Posted a reply to Critical error on API REST, on the site WordPress.org Forums:
It looks like an issue with PHP sessions, maybe due to a conflict with another…

Posted a reply to How To Whitelist “User-Agent: Zapier”, on the site WordPress.org Forums:
This is all you should need: <?phpif ( isset( $_SERVER['HTTP_USER_AGENT'] ) && $_SERVER['HTTP_USER_AGENT'] == 'Zapier')…

Posted a reply to Set firewall on domain root, on the site WordPress.org Forums:
It's not possible, it can apply only to the login page (it is hardcoded).

Posted a reply to Themecanal Purchase, on the site WordPress.org Forums:
You've been scammed, I'm afraid. What you got is a pirated copy (aka nulled plugin)…

Posted a reply to Excluding premium plugins from repo comparison but still scanning for malware, on the site WordPress.org Forums:
I added your request to our suggestions list, so we'll see if we can implement…

Posted a reply to cURL error 28: Operation timed, on the site WordPress.org Forums:
According to the log and the system information report, the profiler can access admin-ajax.php without…

Posted a reply to cURL error 28: Operation timed, on the site WordPress.org Forums:
The profiler needs to access wp-admin/admin-ajax.php and the page you want to profile.Can you paste…

Posted a reply to Bot protection shouldn’t block WooCommerce mobile app, on the site WordPress.org Forums:
It's not possible to "whitelist" the app, because hackers could spoof their user-agent and bypass…

Posted a reply to Excluding premium plugins from repo comparison but still scanning for malware, on the site WordPress.org Forums:
NinjaScanner allows you to upload your premium plugins and themes, so that it can check…

Posted a reply to Login Protection Captcha Does Not Work, on the site WordPress.org Forums:
I cannot reproduce the problem.Are you sure you aren't whitelisted? When you successfully entered the…

Posted a reply to Bot protection shouldn’t block WooCommerce mobile app, on the site WordPress.org Forums:
Just like Cloudflare, you can write your own NinjaFirewall rules. You need to use the…

Posted a reply to Login Protection – Captcha Image – NOT Case Sensitive?, on the site WordPress.org Forums:
That's not a bug: captcha aren't case-sensitive. As mentioned in NinjaFirewall's documentation: The captcha is…

Posted a reply to Custom URL Login protection?, on the site WordPress.org Forums:
It is not possible because  /my-account/ or similar pages are permalinks. Because the brute force…

Posted a reply to Cannot decode JSON-encode file, on the site WordPress.org Forums:
Can you enable debugging in WordPress and see if there's anything written to the PHP…

Posted a reply to Not working on Docker localhost?, on the site WordPress.org Forums:
The profiler needs to connect to your WordPress AJAX endpoint and to the page you…

Posted a reply to Clarification on How Reliable the Results Are, on the site WordPress.org Forums:
I think you have some issues like a conflict with another plugin on your blog…

Posted a reply to How do I uninstall NinjaFirewall, on the site WordPress.org Forums:
Yes, you can remove it. But it looks like it is a very old entry…

Posted a reply to Outdated ‘security update available’ notifications, on the site WordPress.org Forums:
I can't reproduce the issue.If you go to the WordPress "Plugins" page, do you see…

Posted a reply to Use .htninja config file to block access by username, on the site WordPress.org Forums:
You could either: Block the user from logging in: If it is a POST payload…

Posted a reply to full waf mode, on the site WordPress.org Forums:
wp-content/nfwlog/ninjafirewall.php is correct. There's no nf-waf.php file.You can see in the 'NinjaFirewall > Dashboard" page…

Posted a reply to Your website has a technical problem., on the site WordPress.org Forums:
Maybe the version of NinjaFirewall from the live site is also loaded when you load…

Posted a reply to Outdated ‘security update available’ notifications, on the site WordPress.org Forums:
Could you try to deactivate NinjaFirewal from the "Plugins" page, and then reactivate it.

Posted a reply to Your website has a technical problem., on the site WordPress.org Forums:
Does that problem occur often or just once?Do you have other websites with NinjaFirewall, installed…

Posted a reply to 99% cpu, on the site WordPress.org Forums:
I think you posted your message in the wrong forum: this is Code Profiler's forum…