Block URL Access ?

Resolved magicmiles
(@magicmiles)

7 years, 2 months ago
I’d like to block access to this non-existent page.

I thought that if I entered these URLs into Options > Other Options > Immediately block IPs that access this URL:

/docs/u4rkjtg.php*

Shouldn’t this force WordFence to block access to any page that matches this query ?

Hmmmm that’s not what’s happening. It’s still matching queries like these:

https://tangotopics.com/docs/u4rkjtg.php?jtjd=reliance-industries-jamnagar
http://tangotopics.com/docs/u4rkjtg.php?jtjd=libra-career-october-2017
https://tangotopics.com/docs/u4rkjtg.php?jtjd=give-me-jesus
https://tangotopics.com/docs/u4rkjtg.php?jtjd=ppm-to-oz-calculator

How do I stop it ?
- This topic was modified 7 years, 2 months ago by magicmiles.

Viewing 8 replies - 1 through 8 (of 8 total)

bluebearmedia
(@bluebearmedia)

7 years, 2 months ago

Have you tried using:
/docs/u4rkjtg*

WF support can correct me if I’m wrong, but I don’t believe the URL blocking abilities includes URL query parameters.

wfalaa
(@wfalaa)

7 years, 2 months ago

Hi @magicmiles
Wildcards should be working fine with query strings in “Immediately block IPs that access these URLs”, I’ve visited the URLs you shared above and I got blocked immediately, did you manage to get it working?

Thanks.

Thread Starter magicmiles
(@magicmiles)

7 years, 2 months ago

Yes, sort of, after a fashion. Sometimes it blocks the user and sometimes it doesn’t.

bluebearmedia
(@bluebearmedia)

7 years, 2 months ago

Good to know – thanks, Alaa!

Thread Starter magicmiles
(@magicmiles)

7 years, 2 months ago

See Issues with WordFence not blocking visitors that accessed banned URLs. 😉

wfalaa
(@wfalaa)

7 years, 2 months ago

I see now, please try replacing /dirictor* with /*dirictor* and I believe it should work fine then.

Thanks.

Thread Starter magicmiles
(@magicmiles)

7 years, 2 months ago

ummm….Wfalaa…ok, that takes care of one, but what about the rest of them that are sporadically working ? Because every item on that list the same thing is happening. So should I add * to the beginning of each item ?

Reminder > https://imgur.com/wlzufLu

wfalaa
(@wfalaa)

7 years, 2 months ago

Yes, you will need to wrap the trigger word between two asterisks “*”, that means anything before and after this word will match and hence the request will be blocked.

Thanks.

Viewing 8 replies - 1 through 8 (of 8 total)

The topic ‘Block URL Access ?’ is closed to new replies.

Tags