Sababta Ay Tahay Inaad URL-yada Ugu Darto Liiska Cad ee Firewall-ka WordFence (Iyo Sida Loo Sameeyo)

Waxaa qoray

ku jira

If you’re using Page Builder Sandwich along with Wordfence Security, there’s a chance you might have encountered something called a 403 error.

Now, according to WordPress resource site WPBeginner, 403 errors occur when server permissions don’t allow access to a specific page.

Laakiin maxay ka dhigan tahay khaladka 403, maxayse ugu horrayn uga dhacaysaa Page Builder Sandwich?

The 403 Error Explained

Sababta ugu badan ee khaladka 403 waa marka furayaasha ammaanka (plugins) aan loo habayn hab gaar ah ama heer la cayimay.

Like WordFence, most security plugins from WordPress restrict some actions if they’re suspected or proven to be malicious. These scenarios usually occur on your WP Admin or WP Login page, or show up as pop-ups alerting you that you don’t have authorization to view your page.

Waa kan sida daaqadda soo boodda (pop-up) u ekaan doonto haddii aad waligaa kala kulanto Sandwich:

So what does this mean? Is Sandwich safe to use? Is WordFence bad? And does the 403 error warrant bad points for both Wordfence and Page Builder Sandwich?

Hagaag, maya.

All of this just means that Wordfence is extra careful when scanning your external plugins.

And that’s actually a really good thing, especially since they’re a security plugin.

WordFence is Legit…

WordFence waa mid ka mid ah furayaasha ammaanka ugu caansan WordPress. Waxa uu leeyahay in ka badan hal milyan oo rakibaadood oo firfircoon, markaa waxay u badan tahay in lagu rakibay mareegtaada WP sidoo kale. Waxay u jiraan sabab weyn: Ma aha oo keliya inay mareegtaada nabad geliyaan, laakiin sidoo kale inay yareeyaan khataraha amniga, ayna guud ahaan horumariyaan amniga mareegtaada.

Isku soo duub; WordFence waa mid dhab ah oo lagu kalsoonaan karo.

…And So is Sandwich. But Why Does It Need Whitelisting?

Ma aha Sandwich oo keliya waxa WordFence xannibo.

Furayaasha kale iyo URL-yadu waxay sidoo kale u baahan yihiin in lagu daro liiska cad (lidka ku darista liiska madow) ee WordFence. Qaybo ka mid ah furayaasha ugu caansan ayaa laga yaabaa in WordFence mar horeba oggolaaday.

Haddaba maxaa ka dhacaya daaha gadaashiisa, xaggee buuse khaladka 403 ka imaanayaa?

Ajax Functions and Page Builder Sandwich

Page Builder Sandwich waxa uu sameeyaa shaqooyinka ajax inta aad wax ku dhex tafatirayso. Furayaasha qaarkoodna sidoo kale ayay sameeyaan.

W3Schools waxay si faahfaahsan uga sii hadashaa ajax:

AJAX is a technique for creating fast and dynamic web pages. It allows web pages to be updated asynchronously by exchanging small amounts of data with the server behind the scenes. This means that it is possible to update parts of a web page, without reloading the whole page.

Chart taken from W3Schools

Gudaha Page Builder Sandwich, wicitaanada ajax waxay u dhexeeyaan helidda khariidadaha koodhadhka gaagaaban, soo bandhigidda koodhadhka gaagaaban ilaa kaydinta isbeddelladaada. Tani waxay sababi kartaa inaad la kulanto dhibaatooyin, sida khaladka 403, dhibaatooyin xagga kaydinta natiijadaada ah, ama koodhadh gaagaaban oo aan soo bixin. Tani waa xilliga laga yaabo inaad u baahato inaad liiska cad ku darto wicitaanada ajax ee u gaarka ah Page Builder Sandwich.

Whitelisting Page Builder Sandwich on WordFence

Si aad PBS ugu darto liiska cad ee WordFence Firewall, ku dar gelitaan qaybta Whitelisted URLs adoo adeegsanaya xuduudahan:

URL: /wp-admin/admin-ajax.php

Param Name: main-content

Param: POST Body

Rakibaadaha WordPress ee mareegaha badan (multisite), waa fikrad wanaagsan inaad magaca galka mareegtaada ku darto URL-ka kore. Tusaale ahaan: /my-multisite/wp-admin/admin-ajax.php

Ka dib marka aad ku darto qiyamkan, Khaladka 403 waa in si habboon loo xalliyaa, waana inaad awood u yeelataa inaad kaydiso natiijadaada oo aad mar kale soo saarto koodhadhka gaagaaban ee la soo bandhigay.

Waa kan sida ay u ekaan doonto marka la eego goobaha WordFence Firewall:

Ta-da!

Conclusion

Haa, Page Builder Sandwich waa ammaan in la isticmaalo.

Wax intaas ka badan, waxa uu keliya qabtaa ficillada ajax marka la joogo habka tafatirka, waana mid la jaanqaadi kara furayaasha iyo mawduucyada dibadda (haddii ay la heer yihiin hab-raacyada koodhka ee WordPress).

WordFence Security-na kama duwana.

Laakiin waxa ku fiican ayaa ah inay siiyaan isticmaalayaasha WordPress fursad ay ku dhawraan mareegahooda kuwo badbaado iyo ammaan ah, iyadoo la raaciyay ikhtiyaar kuu oggolaanaya inaad go’aansato furayaasha ammaan ah iyo kuwa aan ahayn.