I think we found the cause, you cannot enable “Disallow unauthorized REST requests” or it blocks all external access to Webhooks.
Hi @joyryde,
Yes, If you have “Disallow unauthorized REST requests” it may create the issue.
We are working on the feature to whitelist certain plugin namespaces for REST reqeust.
Upcoming releases might have this feature.
Regards
Hi, We are now hearing from another vendor that the plugin is blocking them from puling data from Woocommerce; they said this is no longer functioning:
method=GET url=/wp-json/wc/v3/orders params={‘page’: 1, ‘after’: None, ‘before’: None, ‘dates_are_gmt’: True, ‘modified_before’: None, ‘modified_after’: None} headers={‘user-agent’: ‘WooCommerce-Python-REST-API/3.0.0’, ‘accept’: ‘application/json’}
Hi @joyrde,
It seems the issue for the REST requests, you have disabled the Disallow unauthorized REST requests it should make this work, Hope It is not cache issue.
please check one by one below settings Hope it is not the issue
1) Deny bad query string – WP Security > Firewall > PHP rules tab. Deny bad query strings: uncheck the checkbox and save
2) Advanced char filter – WP Security > Firewall > PHP rules tab. Enable advanced character string filter :uncheck the checkbox and save
3) 5g firewall rules – WP Security > Firewall > 6G Blacklist firewall rules tab. Enable legacy 5G firewall protection uncheck the checkbox and save
4) 6g firewall rules – WP Security > Firewall > 6G Blacklist firewall rules tab. Enable 6G firewall rules – uncheck the checkbox and save
5) REST API – WP Security > Firewall > PHP rules – WP REST API Can you please cross check the Disallow unauthorized REST requests:
6) WP Security > Firewall > Internet bots ban – Blank HTTP headers Ban POST requests that have a blank user-agent and referer
Regards
Don’t we need these to be enabled?
4) 6g firewall rules – WP Security > Firewall > 6G Blacklist firewall rules tab. Enable 6G firewall rules – uncheck the checkbox and save
6) WP Security > Firewall > Internet bots ban – Blank HTTP headers Ban POST requests that have a blank user-agent and referer
Hello –
None of these fixed the problem:
1) Deny bad query string – WP Security > Firewall > PHP rules tab. Deny bad query strings: uncheck the checkbox and save
2) Advanced char filter – WP Security > Firewall > PHP rules tab. Enable advanced character string filter :uncheck the checkbox and save
3) 5g firewall rules – WP Security > Firewall > 6G Blacklist firewall rules tab. Enable legacy 5G firewall protection uncheck the checkbox and save
5) REST API – WP Security > Firewall > PHP rules – WP REST API Can you please cross check the Disallow unauthorized REST requests:
Hi @joyryde,
If you have any cache plugin please try flush the cache once and check.
Also if still have an issue please disable once AIOS plugin and check if the AIOS plugin actually is making an issue.
Regards.