• Hi,

    I disabled AIO security only firewall feature to avoid conflict with another firewall.

    But this file “aios-firewall-loader.php” still exist in: /wp-content/mu-plugins directory and is executed automatically.

    Do I have just to delete it from mu-plugins without any issue?
    Does the plugin not manage it itself while disabling firewall?

    Thanks!

Viewing 4 replies - 1 through 4 (of 4 total)
  • Plugin Support hjogiupdraftplus

    (@hjogiupdraftplus)

    Hi @davidovic123,

    If you have downgraded the firewall AIOS > Firewall > Advanced settings it should remove the mu-plugins folder aios-firewall-loader.php

    https://snipboard.io/Elx14S.jpg

    Please cross-check as per the above screenshot.

    If it shows “Setup Firewall” you can remove that file manually from the mu-plugins folder Also, make sure included the aios-bootstrap.php from wp-config.php related code also removed.

    Regards

    Thread Starter davidovic123

    (@davidovic123)

    Hi, @hjogiupdraftplus

    I have set up the firewall manually from the beginning by ticking options.

    1. AIOS > Firewall > Advanced settings, effectively shows “Setup Firewall” in my dashboard.
    When I disabled the firewall, I didn’t click on “Downgrade firewall”, but on “Disable All Firewall Rules” in Settings > General settings.

    I see this info below “Downgrade firewall”:
    The firewall will still be active if it is downgraded or not set up, but you will have reduced protection.



    How the firewall will still be active even it’s downgraded/disabled?


    2. “aios-bootstrap.php” isn’t present in “wp-config.php”, it’s present in website root, instead.
    The file contains this warning:

    —-
    WARNING: Please do not delete this file.

    This will cause PHP to throw a fatal error and render your site unusable.

    To safely delete this file, please check both your .user.ini file and your php.ini file and ensure this file is not set in the auto_prepend_file directive.

    Please ask your web hosting provider if you need guidance with executing the aforementioned steps.
    —-

    And, despite “Setup Firewall” display in Advanced setting, the firewall rule is still present in .htaccess:

    # Begin AIOWPSEC Firewall
    <IfModule LiteSpeed>
    php_value auto_prepend_file '/home/username/public_html/aios-bootstrap.php'
    </IfModule>
    <IfModule lsapi_module>
    php_value auto_prepend_file '/home/username/public_html/aios-bootstrap.php'
    </IfModule>
    # End AIOWPSEC Firewall



    ——–

    How to correctly and completely remove all AIO security Firewall files & rules?
    Is there any other file or rule elsewhere?

    Thanks,

    Thread Starter davidovic123

    (@davidovic123)

    I made a test in local server, I noticed that even if we perform “Downgrade firewall”, the PHP rules and other firewall settings are still enabled!

    Plugin Support hjogiupdraftplus

    (@hjogiupdraftplus)

    Hi @davidovic123,

    Ok, please add the below constant in wp-config.php after the below comment. It will not apply any firewall rule.

    /* Add any custom values between this line and the "stop editing" line. */

    define( 'AIOS_NO_FIREWALL', true);

    I will create an internal ticket to check that this downgrade firewall should not apply any firewall rules.

    Regards

Viewing 4 replies - 1 through 4 (of 4 total)

You must be logged in to reply to this topic.