Comments for Perishable Press http://perishablepress.com WordPress, Web Design, Code & Tutorials Fri, 10 Feb 2012 19:54:11 +0000 hourly 1 http://perishablepress.com/http://perishablepress.com/link/perishable-press.jpegPerishable PressSubscribe with My Yahoo!Subscribe with NewsGatorSubscribe with My AOLSubscribe with BloglinesSubscribe with NetvibesSubscribe with GoogleSubscribe with PageflakesPerishable Press provides high-quality, in-depth articles on web design and development, graphic design, social media, blogging, software, and more. Learn how to use WordPress, PHP, SQL, HTAccess, JavaScript, (X)HTML, and CSS to create beautiful sites that are usable, accessible, and secure. Comment on 5G Blacklist 2012 by Dan http://perishablepress.com/5g-blacklist-2012/#comment-1756 Dan Fri, 10 Feb 2012 19:54:11 +0000 http://perishablepress.com/?p=120#comment-1756 Hey,I got here from watching your security for wordpress video on lynda.com. I have not uploaded my website yet, I'm just about to, I am using bluehost. I put this code in my .htaccess, but certain things don't work.I figured out it was this line <code>RewriteCond %{QUERY_STRING} (environ|localhost|mosconfig|scanner) [NC,OR]</code>. I guess because I'm using localhost to access my site right now? After I upload it should I stick this piece of code back in? Also there seems to be so much security I need, In the lynda course wordpress basics they show you how to make a self hosted site and upload it, but they don't talk much about security, I only found out about it after making my site so I couldn't do things like change the <code>wp_</code> rows. If I just did what they showed me in that course and didn't add security features that I learned in your course, would my wordpress site even be safe on bluehost? Sorry for so many questions, thanks again! Thanks! Hey,I got here from watching your security for wordpress video on lynda.com. I have not uploaded my website yet, I’m just about to, I am using bluehost. I put this code in my .htaccess, but certain things don’t work.I figured out it was this line RewriteCond %{QUERY_STRING} (environ|localhost|mosconfig|scanner) [NC,OR]. I guess because I’m using localhost to access my site right now? After I upload it should I stick this piece of code back in?

Also there seems to be so much security I need, In the lynda course wordpress basics they show you how to make a self hosted site and upload it, but they don’t talk much about security, I only found out about it after making my site so I couldn’t do things like change the wp_ rows. If I just did what they showed me in that course and didn’t add security features that I learned in your course, would my wordpress site even be safe on bluehost?

Sorry for so many questions, thanks again!

Thanks!

]]> Comment on 5G Blacklist 2012 by Ken http://perishablepress.com/5g-blacklist-2012/#comment-1751 Ken Wed, 08 Feb 2012 23:36:38 +0000 http://perishablepress.com/?p=120#comment-1751 Hi, I have been trying out the 5G and have noticed the following semi-frequent error messages in my error log (on HostMonster) <code>[Wed Feb 08 16:23:44 2012] [warn] RewriteCond: NoCase option for non-regex pattern '-f' is not supported and will be ignored.</code> <code>[Wed Feb 08 16:24:16 2012] [error] [client 127.0.0.1] (104)Connection reset by peer: ap_content_length_filter: apr_bucket_read() failed</code> <code>Use of uninitialized value in concatenation (.) or string at /usr/local/cpanel/cgi-sys/fourohfour.cgi line 31.</code> <code>[Wed Feb 08 16:24:16 2012] [error] [client 127.0.0.1] (104)Connection reset by peer: ap_content_length_filter: apr_bucket_read() failed</code> <code>Use of uninitialized value in concatenation (.) or string at /usr/local/cpanel/cgi-sys/fourohfour.cgi line 31.</code> Are these errors something I should be commenting out in 5G? Are they anything that should be added to 5G? This inquiring mind wants to know! ;-) In general, I am seeing *way* fewer "errors" from bozos and bots trying to sniff around my site. Great Work! Thank you! Ken Hi,
I have been trying out the 5G and have noticed the following semi-frequent error messages in my error log (on HostMonster)

[Wed Feb 08 16:23:44 2012] [warn] RewriteCond: NoCase option for non-regex pattern '-f' is not supported and will be ignored.

[Wed Feb 08 16:24:16 2012] [error] [client 127.0.0.1] (104)Connection reset by peer: ap_content_length_filter: apr_bucket_read() failed

Use of uninitialized value in concatenation (.) or string at /usr/local/cpanel/cgi-sys/fourohfour.cgi line 31.

[Wed Feb 08 16:24:16 2012] [error] [client 127.0.0.1] (104)Connection reset by peer: ap_content_length_filter: apr_bucket_read() failed

Use of uninitialized value in concatenation (.) or string at /usr/local/cpanel/cgi-sys/fourohfour.cgi line 31.

Are these errors something I should be commenting out in 5G?

Are they anything that should be added to 5G?

This inquiring mind wants to know! ;-)

In general, I am seeing *way* fewer “errors” from bozos and bots trying to sniff around my site.

Great Work!
Thank you!
Ken

]]> Comment on 5G Blacklist 2012 by conualfy http://perishablepress.com/5g-blacklist-2012/#comment-1749 conualfy Wed, 08 Feb 2012 04:37:11 +0000 http://perishablepress.com/?p=120#comment-1749 I changed the path to plugin files and a long parameter (both containing multiple dashes) and now it works. That seems to be the problem. I changed the path to plugin files and a long parameter (both containing multiple dashes) and now it works. That seems to be the problem.

]]> Comment on 5G Blacklist 2012 by conualfy http://perishablepress.com/5g-blacklist-2012/#comment-1748 conualfy Wed, 08 Feb 2012 04:18:39 +0000 http://perishablepress.com/?p=120#comment-1748 I clicked the admin and other links can run ok: <code>http://domain.tld/wp-admin/plugin-editor.php?file=subscribe-to-comments/subscribe-to-comments.php</code> I clicked the admin and other links can run ok:

http://domain.tld/wp-admin/plugin-editor.php?file=subscribe-to-comments/subscribe-to-comments.php

]]> Comment on 5G Blacklist 2012 by conualfy http://perishablepress.com/5g-blacklist-2012/#comment-1747 conualfy Wed, 08 Feb 2012 04:15:22 +0000 http://perishablepress.com/?p=120#comment-1747 I think it blocks the addresses containing parameters with dash (-). I cannot get to edit this plugin's settings and cannot event deactivate it as the link looks like this: <code>http://domain.tld/wp-admin/plugins.php?action=deactivate&plugin=timthumb-vulnerability-scanner%2Ftimthumb-vulnerability-scanner.php&plugin_status=all&paged=1&s&_wpnonce=05cea08e75</code> I get wordpress "Page not found" message. I think it blocks the addresses containing parameters with dash (-). I cannot get to edit this plugin’s settings and cannot event deactivate it as the link looks like this:

http://domain.tld/wp-admin/plugins.php?action=deactivate&plugin=timthumb-vulnerability-scanner%2Ftimthumb-vulnerability-scanner.php&plugin_status=all&paged=1&s&_wpnonce=05cea08e75

I get wordpress “Page not found” message.

]]> Comment on 5G Blacklist 2012 by Deyson http://perishablepress.com/5g-blacklist-2012/#comment-1740 Deyson Sat, 04 Feb 2012 10:38:12 +0000 http://perishablepress.com/?p=120#comment-1740 Hello, has anyone been able to get this script to work with Paypal, I also received an email from PayPal “ Please check your server that handles PayPal Instant Payment Notifications (IPN). IPNs sent to the following URL(s) are failing:” Please let me know what I need to add to the script to get it to work with Paypal. Thank you. Hello, has anyone been able to get this script to work with Paypal, I also received an email from PayPal “ Please check your server that handles PayPal Instant Payment Notifications
(IPN). IPNs sent to the following URL(s) are failing:”

Please let me know what I need to add to the script to get it to work with Paypal. Thank you.

]]> Comment on 5G Blacklist 2012 by jeffM http://perishablepress.com/5g-blacklist-2012/#comment-1739 jeffM Sat, 04 Feb 2012 09:44:37 +0000 http://perishablepress.com/?p=120#comment-1739 PP recommend DNS lookups, but your hoster may not permit that. Is there not something in IPN's <code>REQUEST_URI</code> or <code>QUERY_STRING</code> that you could check? PP recommend DNS lookups, but your hoster may not permit that. Is there not something in IPN’s REQUEST_URI or QUERY_STRING that you could check?

]]> Comment on 5G Blacklist 2012 by MickeyRoush http://perishablepress.com/5g-blacklist-2012/#comment-1738 MickeyRoush Fri, 03 Feb 2012 23:42:58 +0000 http://perishablepress.com/?p=120#comment-1738 It's not so much a task if you whitelist by say, Class B, leaving off the ending anchor. The Akamai information is covered within those links as well, so using that information it would be quite easy and straightforward to whitelist based on Class B or even Class C, depending on how specific you wanted it. It’s not so much a task if you whitelist by say, Class B, leaving off the ending anchor.

The Akamai information is covered within those links as well, so using that information it would be quite easy and straightforward to whitelist based on Class B or even Class C, depending on how specific you wanted it.

]]>