/ Register

Discover Centmin Mod today
Register Now

Wordpress error 500 on wp -backend

Discussion in 'Blogs & CMS usage' started by ahmed, Feb 3, 2018.

Previous Thread Next Thread
Loading...
  1. Feb 3, 2018 #1
    ahmed

    ahmed Active Member

    404
    49
    28
    Feb 21, 2017
    Ratings:
    +63
    Local Time:
    8:57 AM
    Hello

    where is that rule that causing error 500 on backend please?

    Code:
    2018/02/03 06:23:59 [error] 15439#15439: *6453 access forbidden by rule, client: 195.22.127.249, server: domain.com, request: "GET /.ftpconfig HTTP/1.1", host:

"domain.com" 2018/02/03 10:25:10 [error] 10068#10068: *2440 access forbidden by rule, client: 41.35.157.2, server: domain.com, request: "GET /wp-content/ HTTP/2.0",

host: "domain.com", referrer: "https://domain.com/wp-admin/admin.php?page=revslider" 2018/02/03 10:25:30 [error] 10068#10068: *2440 access forbidden by rule, client:

41.35.157.2, server: domain.com, request: "GET /wp-content/ HTTP/2.0", host: "domain.com", referrer: "https://domain.com/wp-admin/admin.php?page=revslider"

2018/02/03 10:38:32 [error] 10068#10068: *2440 access forbidden by rule, client: 41.35.157.2, server: domain.com, request: "GET /wp-content/ HTTP/2.0", host:

"domain.com", referrer: "https://domain.com/wp-admin/admin.php?page=revslider&view=sliders"

     
  2. Feb 3, 2018 #2
    eva2000

    eva2000 Administrator Staff Member

    58,893
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    4:57 PM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    Centmin Mod values security and puts additional measures in place so that end users are also mindful of security. So in your case, you might need to whitelist or unblock the WP plugins related to your 403 permission denied messages.

    If you used centmin.sh menu option 22 auto installer Wordpress Nginx Auto Installer, the default wpsecure conf file at /usr/local/nginx/conf/wpsecure_${vhostname}.conf where vhostname is your domain name, blocks php scripts from executing in wp-content for security

    Below links you can see examples of setting up specific wordpress location matches to punch a hole in the wpsecure blocking to whitelist specific php files that need to be able to run.
    If on Centmin Mod 123.09beta01, you may have ran into the new tools/autoprotect.sh cronjob feature outlined at Beta Branch - autoprotect.sh - apache .htaccess check & migration to nginx deny all | Centmin Mod Community You uploaded scripts may have .htaccess deny from all type files in their directories which may need bypassing autoprotect. It's a security feature that no other nginx based stack has as far as I know :)

    So instead, all .htaccess 'deny from all' detected directories now get auto generated Nginx equivalent location match and deny all setups except if you want to manually bypass the directory from auto protection via a .autoprotect-bypass file - details below here.

    You can read a few threads below on how autoprotect.sh may have caught some folks web apps falsely and the workarounds or improvements made to autoprotect.sh with the help of users feedback and troubleshooting.
     
Previous Thread Next Thread
Loading...

.