Nega WordFence fayervolida URL manzillarni oq ro’yxatga kiritish kerak (va buni qanday qilish mumkin)

Muallif:

ichida

If you’re using Page Builder Sandwich along with Wordfence Security, there’s a chance you might have encountered something called a 403 error.

Now, according to WordPress resource site WPBeginner, 403 errors occur when server permissions don’t allow access to a specific page.

Ammo 403 xatosi nimani anglatadi va u nima uchun Page Builder Sandwich’da umuman yuzaga kelmoqda?

The 403 Error Explained

403 xatosining eng keng tarqalgan sababi xavfsizlik plaginlarining ma’lum bir usulda yoki standartda sozlanmaganligidir.

Like WordFence, most security plugins from WordPress restrict some actions if they’re suspected or proven to be malicious. These scenarios usually occur on your WP Admin or WP Login page, or show up as pop-ups alerting you that you don’t have authorization to view your page.

Agar Sandwich’da ushbu holatga duch kelsangiz, qalqib chiquvchi oyna quyidagicha ko’rinadi:

So what does this mean? Is Sandwich safe to use? Is WordFence bad? And does the 403 error warrant bad points for both Wordfence and Page Builder Sandwich?

Xo’sh, yo’q.

All of this just means that Wordfence is extra careful when scanning your external plugins.

And that’s actually a really good thing, especially since they’re a security plugin.

WordFence is Legit…

WordFence WordPress uchun eng mashhur xavfsizlik plaginlaridan biridir. U milliondan ortiq faol o’rnatmalarga ega, shuning uchun u sizning WP veb-saytingizda ham o’rnatilgan bo’lishi ehtimoli yuqori. Ular ajoyib maqsad uchun mavjud: faqat veb-saytingizni xavfsiz saqlash emas, balki xavfsizlik xatarlarini kamaytirish va umumiy veb-saytingiz xavfsizligini yaxshilash uchun ham.

Qisqasi: WordFence ishonchli.

…And So is Sandwich. But Why Does It Need Whitelisting?

WordFence faqat Sandwich’ni bloklamaydi.

Boshqa plaginlar va URL manzillar ham WordFence’da oq ro’yxatga kiritishni (qora ro’yxatga kiritishning aksi) talab qiladi. Ba’zi ommabop plaginlarga Wordfence tomonidan allaqachon ruxsat berilgan bo’lishi mumkin.

Xo’sh, sahna ortida nima sodir bo’lmoqda va 403 xatosi qayerdan kelib chiqmoqda?

Ajax Functions and Page Builder Sandwich

Page Builder Sandwich tahrirlash jarayoni davomida ajax funksiyalarini bajaradi. Ayrim plaginlar ham shunday qiladi.

W3Schools ajax haqida batafsilroq ma’lumot beradi:

AJAX is a technique for creating fast and dynamic web pages. It allows web pages to be updated asynchronously by exchanging small amounts of data with the server behind the scenes. This means that it is possible to update parts of a web page, without reloading the whole page.

Chart taken from W3Schools

Page Builder Sandwich’da ajax chaqiruvlari shortkodlar moslashuvini olishdan tortib, shortkodlarni render qilish va o’zgarishlaringizni saqlashgacha bo’lgan amallarni qamrab oladi. Bu sizda 403 xatosi, natijalarni saqlashdagi muammolar yoki render qilinmagan shortkodlar kabi muammolarni keltirib chiqarishi mumkin. Aynan shu paytda siz Page Builder Sandwich uchun xos bo’lgan ajax chaqiruvlarini oq ro’yxatga kiritishingiz kerak bo’lishi mumkin.

Whitelisting Page Builder Sandwich on WordFence

PBS’ni Wordfence xavfsizlik devorida (Firewall) oq ro’yxatga kiritish uchun Whitelisted URLs bo’limiga quyidagi parametrlar bilan yozuv qo’shing:

URL: /wp-admin/admin-ajax.php

Param Name: main-content

Param: POST Body

Ko’p saytli (multisite) WordPress o’rnatmalari uchun yuqoridagi URL manziliga saytingiz jild nomini kiritish yaxshi fikrdir. Masalan: /my-multisite/wp-admin/admin-ajax.php

Ushbu qiymatlarni qo’shgandan so’ng, 403 xatosi bartaraf etilishi kerak va siz yana natijalaringizni saqlashingiz hamda render qilingan shortkodlarni yaratishingiz mumkin bo’ladi.

WordFence Firewall sozlamalaringiz ostida bu quyidagicha ko’rinishi kerak:

Ta-da!

Conclusion

Ha, Page Builder Sandwich’dan foydalanish xavfsiz.

Bundan tashqari, u ajax amallarini faqat tahrirlash rejimida bajaradi va tashqi plaginlar hamda mavzular bilan mos keladi (agar ular WordPress kodlash standartlariga javob bersa).

WordFence Security ham bundan mustasno emas.

Ammo ularning ajoyib tomoni shundaki, ular WordPress foydalanuvchilariga saytlarini xavfsiz va himoyalangan saqlash imkoniyatini taqdim etadi, shuningdek, qaysi plaginlar xavfsiz ekanligi va qaysilari emasligini o’zingiz hal qilishingiz uchun qo’shimcha imkoniyat beradi.