{"id":297,"date":"2010-04-28T09:40:40","date_gmt":"2010-04-28T16:40:40","guid":{"rendered":"http:\/\/www.ait-pro.com\/aitpro-blog\/?p=297"},"modified":"2020-07-14T13:25:33","modified_gmt":"2020-07-14T20:25:33","slug":"bulletproof-security-wordpress-plugin-support","status":"publish","type":"post","link":"https:\/\/www.ait-pro.com\/aitpro-blog\/297\/bulletproof-security-plugin-support\/bulletproof-security-wordpress-plugin-support\/","title":{"rendered":"BulletProof Security &#8211; BulletProof Security WordPress Plugin, BulletProof Security Plugin"},"content":{"rendered":"<div class=\"bluelink\">\n<h1><span style=\"color: #000066;\"><strong><span style=\"font-size: x-large;\">BulletProof Security General Troubleshooting Steps<\/span><\/strong><\/span><\/h1>\n<p><span style=\"color: #000066; font-size: medium;\" data-mce-mark=\"1\"><strong>An updated\/more current BulletProof Security Free Troubleshooting Guide can be found in the NEW BulletProof Security Free Forum &gt;&gt;&gt;\u00a0<a title=\"BulletProof Security Free Troubleshooting Guide\" href=\"http:\/\/forum.ait-pro.com\/forums\/topic\/read-me-first-free\/\" rel=\"nofollow\">http:\/\/forum.ait-pro.com\/forums\/topic\/read-me-first-free\/<\/a><\/strong><\/span><\/p>\n<p><span style=\"color: #000066; font-size: medium;\" data-mce-mark=\"1\"><strong>An updated\/more current BulletProof Security Pro Troubleshooting Guide can be found in the NEW BulletProof Security Pro Forum &gt;&gt;&gt;\u00a0<a title=\"BulletProof Security Pro Troubleshooting Guide\" href=\"http:\/\/forum.ait-pro.com\/forums\/topic\/read-me-first-pro\/\" rel=\"nofollow\">http:\/\/forum.ait-pro.com\/forums\/topic\/read-me-first-pro\/<\/a><\/strong><\/span><\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"font-size: medium; color: #000066;\" data-mce-mark=\"1\"><strong>BulletProof Security setup steps:<\/strong><\/span><\/p>\n<p><span style=\"font-size: medium; color: #000066;\" data-mce-mark=\"1\"><strong>1.<\/strong><\/span> Click the AutoMagic buttons<br \/>\n<span style=\"font-size: medium; color: #000066;\" data-mce-mark=\"1\"><strong>2.<\/strong><\/span> Activate All BulletProof Modes.<br \/>\n<span style=\"font-size: medium; color: #000066;\" data-mce-mark=\"1\"><strong>3.<\/strong><\/span> Setup complete.<\/p>\n<p><span style=\"font-size: medium; color: #000066;\" data-mce-mark=\"1\"><strong>BulletProof Security removal steps:<\/strong><\/span><\/p>\n<p><span style=\"font-size: medium; color: #000066;\" data-mce-mark=\"1\"><strong>1.<\/strong><\/span> Activate Default Mode on the Security Modes page.<br \/>\n<span style=\"font-size: medium; color: #000066;\" data-mce-mark=\"1\"><strong>2.<\/strong><\/span> Use the Delete wp-admin .htaccess feature on the Security Modes page.<br \/>\n<span style=\"font-size: medium; color: #000066;\" data-mce-mark=\"1\"><strong>3.<\/strong><\/span> Deactivate and delete BulletProof Security on the WP Plugins page.<\/p>\n<p><span style=\"font-size: medium; color: #000066;\" data-mce-mark=\"1\"><strong>Unable to login into your website:<\/strong><\/span><\/p>\n<p><span style=\"font-size: medium; color: #000066;\" data-mce-mark=\"1\"><strong>1.<\/strong><\/span> Use FTP or your Web Host Control Panel File Manager and delete the .htaccess file in your website root folder.<br \/>\n<span style=\"font-size: medium; color: #000066;\" data-mce-mark=\"1\"><strong>2.<\/strong><\/span> Log into your website, click the BulletProof Security AutoMagic Buttons and Activate all BulletProof Modes.<\/p>\n<p><span style=\"font-size: medium; color: #000066;\" data-mce-mark=\"1\"><strong>BulletProof Security Free and BulletProof Security Pro are compatible with 1,000&#8217;s of Web Hosts, but are not compatible with these 2 Web Hosting Companies (Landis Holdings &amp; NTT Communications &#8211; Due to Custom Server Configurations)\u00a0<\/strong><\/span><\/p>\n<p>Hostingzoom (Landis Holdings)<br \/>\nResellerzoom (Landis Holdings)<br \/>\nModvps (Landis Holdings)<br \/>\nWowVPS.com (Landis Holdings)<br \/>\nJaguarPC (Landis Holdings)<br \/>\nVerio (NTT Communications)<br \/>\nNTT America (NTT Communications)<br \/>\nNTT Europe (NTT Communications)<\/p>\n<p><span style=\"font-size: medium; color: #000066;\"><strong>BulletProof Security Plugin Conflict or Some Functionality On Your Website Is Not Working Correctly<\/strong><\/span><\/p>\n<p>If you think that BulletProof Security is causing a plugin conflict or any other issue on your website that is causing something not to work, then please use these steps below to take BulletProof Security out of the equation completely for testing. \u00a0There is no need to deactivate BulletProof Security because it has a built-in Default Mode that allows you to put WordPress in a default state without deactivating BulletProof Security. If you find that BulletProof Security does have a conflict with another plugin then please check the<a title=\"BPS Plugin Compatibility &amp; Fixes\" href=\"http:\/\/www.ait-pro.com\/aitpro-blog\/2252\/bulletproof-security-plugin-support\/checking-plugin-compatibility-with-bps-plugin-testing-to-do-list\/\"> BulletProof Security Plugin Compatibility Issues \u2013 Testing and Fixes Page<\/a>\u00a0to see if a fix (bypass\/skip rule) is already listed. If your plugin is not listed and you have confirmed that BulletProof Security is definitely causing a conflict then please post a comment in the new <a title=\"BulletProof Security Forum\" href=\"http:\/\/forum.ait-pro.com\/\">BulletProof Security Forum<\/a>.<\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"font-size: medium; color: #000066;\"><strong>1.<\/strong> <\/span>Make a backup of your .htaccess files using BulletProof Security built-in Backup.<br \/>\n<span style=\"font-size: medium; color: #000066;\"><strong>2.<\/strong> <\/span>Activate Default Mode on the Security Modes page.<br \/>\n<span style=\"font-size: medium; color: #000066;\"><strong>3.<\/strong><\/span> Use the Delete wp-admin .htaccess feature on the Security Modes page.<br \/>\n<span style=\"font-size: medium; color: #000066;\"><strong>4.<\/strong><\/span> Test your plugin or theme.<br \/>\n<span style=\"font-size: medium; color: #000066;\"><strong>5.<\/strong><\/span> Restore your .htaccess files using BulletProof Security built-in Restore.<\/p>\n<p>To completely uninstall BulletProof Security you would do steps 2 and 3 above and then just delete the BulletProof Security plugin on the WP Plugins page.<\/p>\n<p><span style=\"font-size: medium; color: #000066;\"><strong>NOTE:<\/strong><\/span> Both the Root BulletProof Mode and the wp-admin BulletProof Mode MUST be activated &#8211; Activate Root BulletProof Mode and then activate wp-admin BulletProof Mode. \u00a0If you only activate Root BulletProof Mode and you do not activate the wp-admin BulletProof Mode then some wp-admin Dashboard functions may not work correctly on some web hosts, such as configuring Widgets.<\/p>\n<p><strong style=\"color: #000066; font-size: medium;\">BulletProof Security Pro Troubleshooting Steps<\/strong><\/p>\n<p>You can take BulletProof Security Pro out of the equation for troubleshooting without having to remove\/uninstall BulletProof Security Pro.<\/p>\n<p><span style=\"font-size: medium; color: #000066;\" data-mce-mark=\"1\"><strong>1.<\/strong><\/span> Make a backup of your .htaccess files using BulletProof Security Pro built-in Backup.<br \/>\n<span style=\"font-size: medium; color: #000066;\" data-mce-mark=\"1\"><strong>2.<\/strong><\/span> Activate Default Mode on the Security Modes page.<br \/>\n<span style=\"font-size: medium; color: #000066;\" data-mce-mark=\"1\"><strong>3.<\/strong><\/span> Use the Delete wp-admin .htaccess feature on the Security Modes page.<br \/>\n<span style=\"font-size: medium; color: #000066;\" data-mce-mark=\"1\"><strong>4.<\/strong><\/span> Turn Off AutoRestore.<br \/>\n<span style=\"font-size: medium; color: #000066;\" data-mce-mark=\"1\"><strong>5.<\/strong><\/span> If you created a custom php.ini file for your website rename it to php.ini.BAK<br \/>\n<span style=\"font-size: medium; color: #000066;\" data-mce-mark=\"1\"><strong>6.<\/strong><\/span> Test your plugin, theme, app or script.<br \/>\n<span style=\"font-size: medium; color: #000066;\" data-mce-mark=\"1\"><strong>7.<\/strong><\/span> After testing is completed &#8211; Restore your .htaccess files using BulletProof Security Pro built-in Restore.<br \/>\n<span style=\"font-size: medium; color: #000066;\" data-mce-mark=\"1\"><strong>8.<\/strong><\/span>\u00a0Rename your php.ini.BAK file back to php.ini.<br \/>\n<span style=\"font-size: medium; color: #000066;\" data-mce-mark=\"1\"><strong>9.<\/strong><\/span>\u00a0Turn AutoRestore back On.<\/p>\n<p><strong style=\"color: #000066; font-size: medium;\">BulletProof Security AutoMagic Not Working, Unable to Edit .htaccess Files, 404 Errors, Quarantine Not Working, WordPress is broken<\/strong><\/p>\n<p>If you are unable to create .htaccess files with AutoMagic or edit .htaccess files with the built-in editor or you are seeing 404 errors when trying to edit .htaccess files or use AutoMagic and Quarantine does not work period then your site is using the broken cPanel HotLink Protection Tool. It has been broken since at least 2002 and not only breaks BulletProof Security, but it also breaks many other WordPress features such as the WordPress Plugin Editor and too many other things in WordPress to list here.<\/p>\n<p>Log into your cPanel and click on the HotLink Protection Tool. \u00a0If you see this code below then this confirms that the problem that is occurring on your website is the broken cPanel HotLink Protection Tool problem.<\/p>\n<p>URLs to allow access:<\/p>\n<pre>(%0A|%0D|%27|%3C|%3E|%00)\r\n\\.opendirviewer\\.\r\nusers\\.skynet\\.be.*<\/pre>\n<p><span style=\"font-size: medium; color: #000066;\"><strong>Screenshot of the cPanel HotLink Protection Tool<\/strong><\/span><\/p>\n<p><a href=\"https:\/\/www.ait-pro.com\/aitpro-blog\/wp-content\/uploads\/2010\/04\/hotlink-protection.png\" rel=\"lightbox[297]\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-4597 size-thumbnail\" style=\"border: 2px solid grey;\" title=\"cPanel HotLink Protection Tool\" src=\"https:\/\/www.ait-pro.com\/aitpro-blog\/wp-content\/uploads\/2010\/04\/hotlink-protection-150x150.png\" alt=\"cPanel HotLink Protection Tool\" width=\"150\" height=\"150\" \/><\/a><\/p>\n<p><span style=\"color: #000066;\"><strong>Solution:<\/strong><\/span> There is only one way to block the broken cPanel HotLink Protection tool, since enabling and disabling it is also broken \u2013 you cannot turn it off. You need to lock your Root .htaccess file with F-Lock (or manually lock it with 404 file permissions) and log into cPanel and delete all code that you see in the HotLink Protection windows. If you unlock your Root .htaccess file at a later time and WordPress and BulletProof Security and ARQ and Quarantine are not working correctly again then you will need to repeat these steps to fix the problem again as this broken tool will probably do the same thing again as soon as your Root .htaccess file is unlocked.<\/p>\n<p><span style=\"font-size: medium; color: #000066;\"><strong>500 Internal Server Error After Activating BulletProof Mode for your Root Folder<\/strong><\/span><\/p>\n<p>Some Web Hosts do not allow you to use the &#8220;Options&#8221; Directive in .htaccess files. If you see a 500 Internal Server Error then comment out the &#8220;Options&#8221; Directive by adding a pound sign (#) in front of Options -Indexes in your Root .htaccess file as shown below.<\/p>\n<pre># DO NOT SHOW DIRECTORY LISTING\r\n# If you are getting 500 Errors when activating BPS then comment out Options -Indexes\r\n# by adding a # sign in front of it. If there is a typo anywhere in this file you will also see 500 errors.\r\n#Options -Indexes<\/pre>\n<p><span style=\"font-size: medium; color: #000066;\"><strong>BulletProof Security AutoMagic Not Working\/built in .htaccess File Editor\u00a0Not Working, Unable to Backup or Restore Files and the Broken cPanel HotLink Protection Tool is Not The Cause<\/strong><\/span><\/p>\n<p>If your Server API type is DSO then you will need to do some manual file and folder permission changes. \u00a0You can check your Server API on the System Info tab in BPS and BPS Pro. \u00a0If you see that your Server API is DSO then you will need to perform these<a title=\"BPS DSO Setup Steps\" href=\"http:\/\/www.ait-pro.com\/aitpro-blog\/1166\/bulletproof-security-plugin-support\/bulletproof-security-plugin-guide-bps-version-45\/\"> installation steps for DSO<\/a>. \u00a0We are currently working on adding additional coding in BPS and BPS Pro for DSO configured Servers and will eventually release a BulletProof Security version that has full automation for DSO configured Servers.<\/p>\n<p><span style=\"font-size: medium; color: #000066;\"><strong>BulletProof Security WP Error: &#8220;no input file specified&#8221;-\u00a0Permalink Problems\/404 Errors &#8211; using the .html permalink hack is causing 404 Errors<\/strong><\/span><\/p>\n<p>If you see a &#8220;no input file specified&#8221; error then there is something wrong with your WordPress custom permalink structure. \u00a0Another cause of 404 Errors is using the .html Permalink hack. \u00a0Using .html in your WordPress Permalink Structure is considered a hack and is not a standard WordPress Custom Permalink Structure. \u00a0Example Permalink .html Hack: \u00a0\/%postname%.html. \u00a0Many years ago this supposedly increased page ranking and SEO. \u00a0If that was ever really true it is definitely not true now. \u00a0Using this permalink hack will only cause your website problems and BulletProof Security will not work with this permalink hack. \u00a0You will need to change your custom permalink to a standard <a title=\"WordPress Custom Permalink Structure\" href=\"http:\/\/www.ait-pro.com\/aitpro-blog\/2304\/misc-projects\/wordpress-tips-tricks-fixes\/permalinks-wordpress-custom-permalinks-wordpress-best-wordpress-permalinks-structure\/\">WordPress custom permalink structure<\/a> in order to be able to use BulletProof Security.<\/p>\n<p><span style=\"color: #000066;\"><strong><span style=\"font-size: medium;\">403 Forbidden Error after updating\/upgrading BPS<\/span><\/strong><\/span><\/p>\n<p>Some web hosts (approximately 6 Hosts out of 1000&#8217;s of Hosts) have a strict policy that .htaccess files can ONLY have 644 permissions and do not allow you to change your .htaccess file permissions to 404. \u00a0During the BPS automatic update\/upgrade process your Server API is detected and if it is a typical SAPI that should allow your .htaccess file to be locked with 404 permissions then BPS will automatically lock the file. \u00a0To see if this is the problem that is occuring FTP to your website and change the .htaccess file permissions in your website root folder to 644. \u00a0If the 403 error goes away then please let us know which Host you have by posting a comment here so that we can add them to the below of Hosts that do not allow 404 file permissions for .htaccess files.<\/p>\n<p><span style=\"color: #000066;\"><strong><span style=\"font-size: medium;\">List of Web Hosts that require 644 .htaccess file permissions &#8211; 404 permissions are not allowed on these Hosts and will cause a 403 Error<\/span><\/strong><\/span><strong style=\"color: #000066;\"><span style=\"font-size: medium;\">\u00a0<\/span><\/strong><\/p>\n<p>An additional coding check will be added to not automatically lock .htaccess files for these Hosts.<\/p>\n<p>webmasters.com (Host added to BPS Pro 5.1.9 and BPS .47.5)<\/p>\n<h2><\/h2>\n<h2><span style=\"color: #000066; font-size: x-large;\"><strong>WordPress Network \/ MU Specific Help Support<\/strong><\/span><\/h2>\n<p><span style=\"font-size: medium; color: #000066;\"><strong>General Help Information About BPS and WordPress Network \/ MU Websites<\/strong><\/span><\/p>\n<p>Do not Network Activate BPS.<br \/>\nBPS Should only be activated on the Primary Site.<br \/>\nBPS AutoMagic buttons should ONLY be used on the Primary Site<br \/>\nNetwork\/MU sub-sites are virtual sites \u2013 BulletProof Modes should NOT be activated on sub-sites<br \/>\nONLY Super Admins can see the BPS menu in sub-sites for both BPS Free and BPS Pro<br \/>\nIf a Site Admin tries to view BPS Settings or BPS pages a Super Admins Permissions Error message is displayed<\/p>\n<p><span style=\"font-size: medium; color: #000066;\"><strong>Network \/ MU Images Not Displaying in Media Library or on Website<\/strong><\/span><\/p>\n<p><a title=\"Network \/ MU Images Not Displaying\" href=\"http:\/\/www.ait-pro.com\/aitpro-blog\/3454\/misc-projects\/wordpress-tips-tricks-fixes\/wordpress-network-mu-images-not-displaying-images-not-displaying-in-media-library-images-not-displaying-on-website\/\">Network \/ MU Images Not Displaying<\/a><\/p>\n<p>&nbsp;<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>BulletProof Security General Troubleshooting Steps An updated\/more current BulletProof Security Free Troubleshooting Guide can be found in the NEW BulletProof Security Free Forum &gt;&gt;&gt;\u00a0http:\/\/forum.ait-pro.com\/forums\/topic\/read-me-first-free\/ An updated\/more current BulletProof Security Pro Troubleshooting Guide can be found in the NEW BulletProof Security Pro Forum &gt;&gt;&gt;\u00a0http:\/\/forum.ait-pro.com\/forums\/topic\/read-me-first-pro\/ &nbsp; BulletProof Security setup steps: 1. Click the AutoMagic buttons 2. Activate [&hellip;]<\/p>\n","protected":false},"author":167,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","_links_to":"","_links_to_target":""},"categories":[33],"tags":[532,612,37,38,39,87],"class_list":["post-297","post","type-post","status-publish","format-standard","hentry","category-bulletproof-security-plugin-support","tag-bulletproof-security","tag-bulletproof-security-free","tag-bulletproof-security-wordpress-plugin-support","tag-bulletproof-wordpress-plugin","tag-bulletproof-wordpress-security","tag-wordpress-security-plugin"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.ait-pro.com\/aitpro-blog\/wp-json\/wp\/v2\/posts\/297","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ait-pro.com\/aitpro-blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ait-pro.com\/aitpro-blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ait-pro.com\/aitpro-blog\/wp-json\/wp\/v2\/users\/167"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ait-pro.com\/aitpro-blog\/wp-json\/wp\/v2\/comments?post=297"}],"version-history":[{"count":1,"href":"https:\/\/www.ait-pro.com\/aitpro-blog\/wp-json\/wp\/v2\/posts\/297\/revisions"}],"predecessor-version":[{"id":5640,"href":"https:\/\/www.ait-pro.com\/aitpro-blog\/wp-json\/wp\/v2\/posts\/297\/revisions\/5640"}],"wp:attachment":[{"href":"https:\/\/www.ait-pro.com\/aitpro-blog\/wp-json\/wp\/v2\/media?parent=297"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ait-pro.com\/aitpro-blog\/wp-json\/wp\/v2\/categories?post=297"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ait-pro.com\/aitpro-blog\/wp-json\/wp\/v2\/tags?post=297"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}