Version Description
- Feature: You can now block POST requests to your WordPress site that have an empty User-Agent and Referer header. This is a common pattern among badly written brute force bots.
- Feature: Added cron viewer at bottom of Wordfence options page. The plugin we were using to help diagnose customer issues is broken. Use this instead.
- Feature: Added DB table viewer at bottom of Wordfence options page. This is a read-only utility to view table names and detailed status. Also for customer diagnostic purposes.
- Improvement: Code cleanup after in-depth code analysis. Removed unused functions and variables and re-indented selected code.
- Fix: Fixed issue that appeared after last release where raw HTML tags were appearing in email alerts.
- Fix: Tour behaved inconsistently under some conditions. Fixed.
- Fix: Mismatched HTML tags in some presentation code. Fixed.
- Fix: When fetching theme list the interator had the same name as the array. Fixed.
- Fix: Detection for malware URLs in comments had a partial description in the issue. Was being overwritten when it should have been appended. Fixed.
- Fix: Check if dns_get_record() exists before using it to avoid warnings.
- Fix: If you have the wordfence security network disabled, the _wfVulnScanners table may have grown indefinitely. Fixed so it's regularly truncated.
- Fix: wordfence::getLog() was private and should be public. Fixed.
- Fix: Removed warning about wfsf not being an element of GET params. Usually hidden, but in case something checks errorget_last()
Download this release
Release Info
| Developer | mmaunder |
| Plugin |  Wordfence Security – Firewall & Malware Scan |
| Version | 5.3.6 |
| Comparing to | |
| See all releases | |
Code changes from version 5.3.5 to 5.3.6
- js/admin.js +51 -63
- js/tourTip.js +18 -4
- lib/Diff/SequenceMatcher.php +0 -50
- lib/IPTraf.php +1 -1
- lib/conntest.php +1 -1
- lib/cronview.php +30 -0
- lib/dbview.php +31 -0
- lib/diffResult.php +1 -1
- lib/email_genericAlert.php +14 -14
- lib/menu_options.php +1114 -375
- lib/menu_scan.php +4 -4
- lib/menu_sitePerfStats.php +1 -1
- lib/sysinfo.php +1 -1
- lib/wfAPI.php +1 -3
- lib/wfCache.php +1 -2
- lib/wfConfig.php +5 -4
- lib/wfCrawl.php +0 -1
- lib/wfDB.php +0 -6
- lib/wfIssues.php +0 -2
- lib/wfLog.php +5 -14
- lib/wfScan.php +0 -2
- lib/wfScanEngine.php +10 -19
- lib/wfUtils.php +3 -6
- lib/wfViewResult.php +1 -1
- lib/wordfenceClass.php +27 -22
- lib/wordfenceHash.php +0 -1
- lib/wordfenceScanner.php +0 -14
- lib/wordfenceURLHoover.php +0 -2
- readme.txt +17 -2
- wordfence.php +3 -2
js/admin.js
CHANGED
|
@@ -11,7 +11,6 @@ window['wordfenceAdmin'] = {
|
|
| 11 |
iconErrorMsgs: [],
|
| 12 |
scanIDLoaded: 0,
|
| 13 |
colorboxQueue: [],
|
| 14 |
-
colorboxOpen: false,
|
| 15 |
mode: '',
|
| 16 |
visibleIssuesPanel: 'new',
|
| 17 |
preFirstScanMsgsLoaded: false,
|
|
@@ -35,11 +34,15 @@ window['wordfenceAdmin'] = {
|
|
| 35 |
countryCodesToSave: "",
|
| 36 |
performanceScale: 3,
|
| 37 |
performanceMinWidth: 20,
|
|
|
|
|
|
|
| 38 |
init: function(){
|
| 39 |
this.nonce = WordfenceAdminVars.firstNonce;
|
| 40 |
this.debugOn = WordfenceAdminVars.debugOn == '1' ? true : false;
|
| 41 |
this.tourClosed = WordfenceAdminVars.tourClosed == '1' ? true : false;
|
|
|
|
| 42 |
var startTicker = false;
|
|
|
|
| 43 |
if(jQuery('#wordfenceMode_scan').length > 0){
|
| 44 |
this.mode = 'scan';
|
| 45 |
jQuery('#wfALogViewLink').prop('href', WordfenceAdminVars.siteBaseURL + '?_wfsf=viewActivityLog&nonce=' + this.nonce);
|
|
@@ -48,13 +51,12 @@ window['wordfenceAdmin'] = {
|
|
| 48 |
this.noScanHTML = jQuery('#wfNoScanYetTmpl').tmpl().html();
|
| 49 |
this.loadIssues();
|
| 50 |
this.startActivityLogUpdates();
|
| 51 |
-
if
|
| 52 |
this.scanTourStart();
|
| 53 |
}
|
| 54 |
} else if(jQuery('#wordfenceMode_activity').length > 0){
|
| 55 |
this.mode = 'activity';
|
| 56 |
-
|
| 57 |
-
this.setupSwitches('wfLiveTrafficOnOff', 'liveTrafficEnabled', function(){});
|
| 58 |
jQuery('#wfLiveTrafficOnOff').change(function(){
|
| 59 |
if(/^(?:falcon|php)#x2F;.test(WordfenceAdminVars.cacheType) ){
|
| 60 |
jQuery('#wfLiveTrafficOnOff').attr('checked', false);
|
|
@@ -71,8 +73,7 @@ window['wordfenceAdmin'] = {
|
|
| 71 |
this.switchTab(jQuery('#wfLoginLogoutTab'), 'wfTab1', 'wfDataPanel', 'wfActivity_loginLogout', function(){ WFAD.activityTabChanged(); });
|
| 72 |
}
|
| 73 |
startTicker = true;
|
| 74 |
-
if
|
| 75 |
-
var self = this;
|
| 76 |
this.tour('wfWelcomeContent3', 'wfHeading', 'top', 'left', "Learn about Site Performance", function(){ self.tourRedir('WordfenceSitePerf'); });
|
| 77 |
}
|
| 78 |
} else if(jQuery('#wordfenceMode_options').length > 0){
|
|
@@ -80,9 +81,8 @@ window['wordfenceAdmin'] = {
|
|
| 80 |
jQuery('.wfConfigElem').change(function(){ jQuery('#securityLevel').val('CUSTOM'); });
|
| 81 |
this.updateTicker(true);
|
| 82 |
startTicker = true;
|
| 83 |
-
if
|
| 84 |
-
|
| 85 |
-
this.tour('wfContentBasicOptions', 'wfMarkerBasicOptions', 'top', 'left', "Learn about Live Traffic Options", function(){
|
| 86 |
self.tour('wfContentLiveTrafficOptions', 'wfMarkerLiveTrafficOptions', 'bottom', 'left', "Learn about Scanning Options", function(){
|
| 87 |
self.tour('wfContentScansToInclude', 'wfMarkerScansToInclude', 'bottom', 'left', "Learn about Firewall Rules", function(){
|
| 88 |
self.tour('wfContentFirewallRules', 'wfMarkerFirewallRules', 'bottom', 'left', "Learn about Login Security", function(){
|
|
@@ -99,15 +99,13 @@ window['wordfenceAdmin'] = {
|
|
| 99 |
this.staticTabChanged();
|
| 100 |
this.updateTicker(true);
|
| 101 |
startTicker = true;
|
| 102 |
-
if
|
| 103 |
-
var self = this;
|
| 104 |
this.tour('wfWelcomeContent4', 'wfHeading', 'top', 'left', "Learn about Cellphone Sign-in", function(){ self.tourRedir('WordfenceTwoFactor'); });
|
| 105 |
}
|
| 106 |
} else if(jQuery('#wordfenceMode_twoFactor').length > 0){
|
| 107 |
this.mode = 'twoFactor';
|
| 108 |
startTicker = false;
|
| 109 |
-
if
|
| 110 |
-
var self = this;
|
| 111 |
this.tour('wfWelcomeTwoFactor', 'wfHeading', 'top', 'left', "Learn how to Block Countries", function(){ self.tourRedir('WordfenceCountryBlocking'); });
|
| 112 |
}
|
| 113 |
this.loadTwoFactor();
|
|
@@ -115,15 +113,13 @@ window['wordfenceAdmin'] = {
|
|
| 115 |
} else if(jQuery('#wordfenceMode_countryBlocking').length > 0){
|
| 116 |
this.mode = 'countryBlocking';
|
| 117 |
startTicker = false;
|
| 118 |
-
if
|
| 119 |
-
var self = this;
|
| 120 |
this.tour('wfWelcomeContentCntBlk', 'wfHeading', 'top', 'left', "Learn how to Schedule Scans", function(){ self.tourRedir('WordfenceScanSchedule'); });
|
| 121 |
}
|
| 122 |
} else if(jQuery('#wordfenceMode_rangeBlocking').length > 0){
|
| 123 |
this.mode = 'rangeBlocking';
|
| 124 |
startTicker = false;
|
| 125 |
-
if
|
| 126 |
-
var self = this;
|
| 127 |
this.tour('wfWelcomeContentRangeBlocking', 'wfHeading', 'top', 'left', "Learn how to Customize Wordfence", function(){ self.tourRedir('WordfenceSecOpt'); });
|
| 128 |
}
|
| 129 |
this.calcRangeTotal();
|
|
@@ -131,8 +127,7 @@ window['wordfenceAdmin'] = {
|
|
| 131 |
} else if(jQuery('#wordfenceMode_whois').length > 0){
|
| 132 |
this.mode = 'whois';
|
| 133 |
startTicker = false;
|
| 134 |
-
if
|
| 135 |
-
var self = this;
|
| 136 |
this.tour('wfWelcomeContentWhois', 'wfHeading', 'top', 'left', "Learn how to use Advanced Blocking", function(){ self.tourRedir('WordfenceRangeBlocking'); });
|
| 137 |
}
|
| 138 |
this.calcRangeTotal();
|
|
@@ -142,34 +137,20 @@ window['wordfenceAdmin'] = {
|
|
| 142 |
this.mode = 'scanScheduling';
|
| 143 |
startTicker = false;
|
| 144 |
this.sched_modeChange();
|
| 145 |
-
if
|
| 146 |
-
var self = this;
|
| 147 |
this.tour('wfWelcomeContentScanSched', 'wfHeading', 'top', 'left', "Learn about WHOIS", function(){ self.tourRedir('WordfenceWhois'); });
|
| 148 |
}
|
| 149 |
} else if(jQuery('#wordfenceMode_caching').length > 0){
|
| 150 |
this.mode = 'caching';
|
| 151 |
startTicker = false;
|
| 152 |
-
if
|
| 153 |
-
var self = this;
|
| 154 |
this.tour('wfWelcomeContentCaching', 'wfHeading', 'top', 'left', "Learn about IP Blocking", function(){ self.tourRedir('WordfenceBlockedIPs'); });
|
| 155 |
}
|
| 156 |
this.loadCacheExclusions();
|
| 157 |
-
// } else if(jQuery('#wordfenceMode_perfStats').length > 0){
|
| 158 |
-
// var self = this;
|
| 159 |
-
// this.loadAvgSitePerf();
|
| 160 |
-
// this.setupSwitches('wfPerfOnOff', 'perfLoggingEnabled', function(){});
|
| 161 |
-
// jQuery('#wfPerfOnOff').change(function(){ self.updateSwitch('wfPerfOnOff', 'perfLoggingEnabled', function(){}); });
|
| 162 |
-
// this.mode = 'perfStats';
|
| 163 |
-
// startTicker = true;
|
| 164 |
-
// if(! this.tourClosed){
|
| 165 |
-
// var self = this;
|
| 166 |
-
// this.tour('wfWelcomeContentCaching', 'wfHeading', 'top', 'left', "Learn about IP Blocking", function(){ self.tourRedir('WordfenceBlockedIPs'); });
|
| 167 |
-
// }
|
| 168 |
} else {
|
| 169 |
this.mode = false;
|
| 170 |
}
|
| 171 |
if(this.mode){ //We are in a Wordfence page
|
| 172 |
-
var self = this;
|
| 173 |
if(startTicker){
|
| 174 |
this.updateTicker();
|
| 175 |
this.liveInt = setInterval(function(){ self.updateTicker(); }, WordfenceAdminVars.actUpdateInterval);
|
|
@@ -177,6 +158,13 @@ window['wordfenceAdmin'] = {
|
|
| 177 |
jQuery(document).bind('cbox_closed', function(){ self.colorboxIsOpen = false; self.colorboxServiceQueue(); });
|
| 178 |
}
|
| 179 |
},
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 180 |
sendTestEmail: function(email){
|
| 181 |
var self = this;
|
| 182 |
this.ajax('wordfence_sendTestEmail', { email: email }, function(res){
|
|
@@ -275,9 +263,11 @@ window['wordfenceAdmin'] = {
|
|
| 275 |
}
|
| 276 |
},
|
| 277 |
startTourAgain: function(){
|
| 278 |
-
|
| 279 |
-
this.
|
| 280 |
-
|
|
|
|
|
|
|
| 281 |
},
|
| 282 |
showLoading: function(){
|
| 283 |
this.loadingCount++;
|
|
@@ -381,46 +371,47 @@ window['wordfenceAdmin'] = {
|
|
| 381 |
}
|
| 382 |
},
|
| 383 |
processSummaryLine: function(item){
|
|
|
|
| 384 |
if(item.msg.indexOf('SUM_START:') != -1){
|
| 385 |
-
|
| 386 |
jQuery('#consoleSummary').append('<div class="wfSummaryLine"><div class="wfSummaryDate">[' + item.date + ']</div><div class="wfSummaryMsg">' + msg + '</div><div class="wfSummaryResult"><div class="wfSummaryLoading"></div></div><div class="wfClear"></div>');
|
| 387 |
summaryUpdated = true;
|
| 388 |
} else if(item.msg.indexOf('SUM_ENDBAD') != -1){
|
| 389 |
-
|
| 390 |
jQuery('div.wfSummaryMsg:contains("' + msg + '")').next().addClass('wfSummaryBad').html('Problems found.');
|
| 391 |
summaryUpdated = true;
|
| 392 |
} else if(item.msg.indexOf('SUM_ENDFAILED') != -1){
|
| 393 |
-
|
| 394 |
jQuery('div.wfSummaryMsg:contains("' + msg + '")').next().addClass('wfSummaryBad').html('Failed.');
|
| 395 |
summaryUpdated = true;
|
| 396 |
} else if(item.msg.indexOf('SUM_ENDOK') != -1){
|
| 397 |
-
|
| 398 |
jQuery('div.wfSummaryMsg:contains("' + msg + '")').next().addClass('wfSummaryOK').html('Secure.');
|
| 399 |
summaryUpdated = true;
|
| 400 |
} else if(item.msg.indexOf('SUM_ENDSUCCESS') != -1){
|
| 401 |
-
|
| 402 |
jQuery('div.wfSummaryMsg:contains("' + msg + '")').next().addClass('wfSummaryOK').html('Success.');
|
| 403 |
summaryUpdated = true;
|
| 404 |
} else if(item.msg.indexOf('SUM_ENDERR') != -1){
|
| 405 |
-
|
| 406 |
jQuery('div.wfSummaryMsg:contains("' + msg + '")').next().addClass('wfSummaryErr').html('An error occurred.');
|
| 407 |
summaryUpdated = true;
|
| 408 |
} else if(item.msg.indexOf('SUM_DISABLED:') != -1){
|
| 409 |
-
|
| 410 |
jQuery('#consoleSummary').append('<div class="wfSummaryLine"><div class="wfSummaryDate">[' + item.date + ']</div><div class="wfSummaryMsg">' + msg + '</div><div class="wfSummaryResult">Disabled [<a href="admin.php?page=WordfenceSecOpt">Visit Options to Enable</a>]</div><div class="wfClear"></div>');
|
| 411 |
summaryUpdated = true;
|
| 412 |
} else if(item.msg.indexOf('SUM_PAIDONLY:') != -1){
|
| 413 |
-
|
| 414 |
jQuery('#consoleSummary').append('<div class="wfSummaryLine"><div class="wfSummaryDate">[' + item.date + ']</div><div class="wfSummaryMsg">' + msg + '</div><div class="wfSummaryResult"><a href="https://www.wordfence.com/wordfence-signup/" target="_blank">Paid Members Only</a></div><div class="wfClear"></div>');
|
| 415 |
summaryUpdated = true;
|
| 416 |
} else if(item.msg.indexOf('SUM_FINAL:') != -1){
|
| 417 |
-
|
| 418 |
jQuery('#consoleSummary').append('<div class="wfSummaryLine"><div class="wfSummaryDate">[' + item.date + ']</div><div class="wfSummaryMsg wfSummaryFinal">' + msg + '</div><div class="wfSummaryResult wfSummaryOK">Scan Complete.</div><div class="wfClear"></div>');
|
| 419 |
} else if(item.msg.indexOf('SUM_PREP:') != -1){
|
| 420 |
-
|
| 421 |
jQuery('#consoleSummary').empty().html('<div class="wfSummaryLine"><div class="wfSummaryDate">[' + item.date + ']</div><div class="wfSummaryMsg">' + msg + '</div><div class="wfSummaryResult" id="wfStartingScan"><div class="wfSummaryLoading"></div></div><div class="wfClear"></div>');
|
| 422 |
} else if(item.msg.indexOf('SUM_KILLED:') != -1){
|
| 423 |
-
|
| 424 |
jQuery('#consoleSummary').empty().html('<div class="wfSummaryLine"><div class="wfSummaryDate">[' + item.date + ']</div><div class="wfSummaryMsg">' + msg + '</div><div class="wfSummaryResult wfSummaryOK">Scan Complete.</div><div class="wfClear"></div>');
|
| 425 |
}
|
| 426 |
},
|
|
@@ -470,13 +461,13 @@ window['wordfenceAdmin'] = {
|
|
| 470 |
if(newMsg && newMsg != oldMsg){
|
| 471 |
jQuery('#wfLiveStatus').hide().html(newMsg).fadeIn(200);
|
| 472 |
}
|
| 473 |
-
|
| 474 |
if(this.mode == 'activity'){
|
| 475 |
if(res.alsoGet != 'logList_' + this.activityMode){ return; } //user switched panels since ajax request started
|
| 476 |
if(res.events.length > 0){
|
| 477 |
this.newestActivityTime = res.events[0]['ctime'];
|
| 478 |
}
|
| 479 |
-
|
| 480 |
if(jQuery('#wfActivity_' + this.activityMode + ' .wfActEvent').length > 0){
|
| 481 |
haveEvents = true;
|
| 482 |
}
|
|
@@ -488,7 +479,6 @@ window['wordfenceAdmin'] = {
|
|
| 488 |
var elemID = '#wfActEvent_' + res.events[i].id;
|
| 489 |
if(jQuery(elemID).length < 1){
|
| 490 |
res.events[i]['activityMode'] = this.activityMode;
|
| 491 |
-
var newElem;
|
| 492 |
if(this.activityMode == 'loginLogout'){
|
| 493 |
newElem = jQuery('#wfLoginLogoutEventTmpl').tmpl(res.events[i]);
|
| 494 |
} else {
|
|
@@ -509,7 +499,7 @@ window['wordfenceAdmin'] = {
|
|
| 509 |
jQuery(elem).html(self.makeTimeAgo(res.serverTime - jQuery(elem).data('wfctime')) + ' ago');
|
| 510 |
});
|
| 511 |
} else if(this.mode == 'perfStats'){
|
| 512 |
-
|
| 513 |
if(jQuery('#wfPerfStats .wfPerfEvent').length > 0){
|
| 514 |
haveEvents = true;
|
| 515 |
}
|
|
@@ -525,7 +515,7 @@ window['wordfenceAdmin'] = {
|
|
| 525 |
for(var i = res.events.length - 1; i >= 0; i--){
|
| 526 |
res.events[i]['scale'] = this.performanceScale;
|
| 527 |
res.events[i]['min'] = this.performanceMinWidth;
|
| 528 |
-
|
| 529 |
jQuery(newElem).find('.wfTimeAgo').data('wfctime', res.events[i].ctime);
|
| 530 |
newElem.prependTo('#wfPerfStats').fadeIn();
|
| 531 |
}
|
|
@@ -534,7 +524,6 @@ window['wordfenceAdmin'] = {
|
|
| 534 |
jQuery('#wfPerfStats').html('<p>No events to report yet.</p>');
|
| 535 |
}
|
| 536 |
}
|
| 537 |
-
var self = this;
|
| 538 |
jQuery('.wfTimeAgo').each(function(idx, elem){
|
| 539 |
jQuery(elem).html(self.makeTimeAgo(res.serverTime - jQuery(elem).data('wfctime')) + ' ago');
|
| 540 |
});
|
|
@@ -565,7 +554,7 @@ window['wordfenceAdmin'] = {
|
|
| 565 |
if(res.ok){
|
| 566 |
jQuery('.wfReverseLookup').each(function(idx, elem){
|
| 567 |
var txt = jQuery(elem).text();
|
| 568 |
-
for(ip in res.ips){
|
| 569 |
if(txt == ip){
|
| 570 |
if(res.ips[ip]){
|
| 571 |
jQuery(elem).html('<strong>Hostname:</strong> ' + res.ips[ip]);
|
|
@@ -591,7 +580,7 @@ window['wordfenceAdmin'] = {
|
|
| 591 |
startScan: function(){
|
| 592 |
var scanReqAnimation = setInterval(function(){
|
| 593 |
var str = jQuery('#wfStartScanButton1').prop('value');
|
| 594 |
-
ch = str.charAt(str.length - 1);
|
| 595 |
if(ch == '/'){ ch = '-'; }
|
| 596 |
else if(ch == '-'){ ch = '\\'; }
|
| 597 |
else if(ch == '\\'){ ch = '|'; }
|
|
@@ -631,7 +620,7 @@ window['wordfenceAdmin'] = {
|
|
| 631 |
res.summary['lastScanCompleted'] = 'Never';
|
| 632 |
}
|
| 633 |
jQuery('.wfIssuesContainer').hide();
|
| 634 |
-
for(issueStatus in res.issuesLists){
|
| 635 |
var containerID = 'wfIssues_dataTable_' + issueStatus;
|
| 636 |
var tableID = 'wfIssuesTable_' + issueStatus;
|
| 637 |
if(jQuery('#' + containerID).length < 1){
|
|
@@ -672,8 +661,7 @@ window['wordfenceAdmin'] = {
|
|
| 672 |
"sClass": "center",
|
| 673 |
"sType": 'severity',
|
| 674 |
"fnRender": function(obj) {
|
| 675 |
-
var cls =
|
| 676 |
-
cls = 'wfProbSev' + obj.aData.severity;
|
| 677 |
return '<span class="' + cls + '"></span>';
|
| 678 |
}
|
| 679 |
},
|
|
@@ -833,6 +821,7 @@ window['wordfenceAdmin'] = {
|
|
| 833 |
},
|
| 834 |
updateAllIssues: function(op){ // deleteIgnored, deleteNew, ignoreAllNew
|
| 835 |
var head = "Please confirm";
|
|
|
|
| 836 |
if(op == 'deleteIgnored'){
|
| 837 |
body = "You have chosen to remove all ignored issues. Once these issues are removed they will be re-scanned by Wordfence and if they have not been fixed, they will appear in the 'new issues' list. Are you sure you want to do this?";
|
| 838 |
} else if(op == 'deleteNew'){
|
|
@@ -1391,8 +1380,7 @@ window['wordfenceAdmin'] = {
|
|
| 1391 |
}
|
| 1392 |
}
|
| 1393 |
});
|
| 1394 |
-
|
| 1395 |
-
this.countryCodesToSave = codes;
|
| 1396 |
if(ownCountryBlocked){
|
| 1397 |
this.colorbox('400px', "Please confirm blocking yourself", "You are about to block your own country. This could lead to you being locked out. Please make sure that your user profile on this machine has a current and valid email address and make sure you know what it is. That way if you are locked out, you can send yourself an unlock email. If you're sure you want to block your own country, click 'Confirm' below, otherwise click 'Cancel'.<br />" +
|
| 1398 |
'<input type="button" name="but1" value="Confirm" onclick="jQuery.colorbox.close(); WFAD.confirmSaveCountryBlocking();" /> <input type="button" name="but1" value="Cancel" onclick="jQuery.colorbox.close();" />');
|
|
@@ -1503,7 +1491,7 @@ window['wordfenceAdmin'] = {
|
|
| 1503 |
}
|
| 1504 |
schedule[day] = hours.join(',');
|
| 1505 |
}
|
| 1506 |
-
scheduleTxt = schedule.join('|');
|
| 1507 |
var self = this;
|
| 1508 |
this.ajax('wordfence_saveScanSchedule', {
|
| 1509 |
schedMode: schedMode,
|
| 11 |
iconErrorMsgs: [],
|
| 12 |
scanIDLoaded: 0,
|
| 13 |
colorboxQueue: [],
|
|
|
|
| 14 |
mode: '',
|
| 15 |
visibleIssuesPanel: 'new',
|
| 16 |
preFirstScanMsgsLoaded: false,
|
| 34 |
countryCodesToSave: "",
|
| 35 |
performanceScale: 3,
|
| 36 |
performanceMinWidth: 20,
|
| 37 |
+
tourClosed: false,
|
| 38 |
+
welcomeClosed: false,
|
| 39 |
init: function(){
|
| 40 |
this.nonce = WordfenceAdminVars.firstNonce;
|
| 41 |
this.debugOn = WordfenceAdminVars.debugOn == '1' ? true : false;
|
| 42 |
this.tourClosed = WordfenceAdminVars.tourClosed == '1' ? true : false;
|
| 43 |
+
this.welcomeClosed = WordfenceAdminVars.welcomeClosed == '1' ? true : false;
|
| 44 |
var startTicker = false;
|
| 45 |
+
var self = this;
|
| 46 |
if(jQuery('#wordfenceMode_scan').length > 0){
|
| 47 |
this.mode = 'scan';
|
| 48 |
jQuery('#wfALogViewLink').prop('href', WordfenceAdminVars.siteBaseURL + '?_wfsf=viewActivityLog&nonce=' + this.nonce);
|
| 51 |
this.noScanHTML = jQuery('#wfNoScanYetTmpl').tmpl().html();
|
| 52 |
this.loadIssues();
|
| 53 |
this.startActivityLogUpdates();
|
| 54 |
+
if(this.needTour()){
|
| 55 |
this.scanTourStart();
|
| 56 |
}
|
| 57 |
} else if(jQuery('#wordfenceMode_activity').length > 0){
|
| 58 |
this.mode = 'activity';
|
| 59 |
+
this.setupSwitches('wfLiveTrafficOnOff', 'liveTrafficEnabled', function(){});
|
|
|
|
| 60 |
jQuery('#wfLiveTrafficOnOff').change(function(){
|
| 61 |
if(/^(?:falcon|php)#x2F;.test(WordfenceAdminVars.cacheType) ){
|
| 62 |
jQuery('#wfLiveTrafficOnOff').attr('checked', false);
|
| 73 |
this.switchTab(jQuery('#wfLoginLogoutTab'), 'wfTab1', 'wfDataPanel', 'wfActivity_loginLogout', function(){ WFAD.activityTabChanged(); });
|
| 74 |
}
|
| 75 |
startTicker = true;
|
| 76 |
+
if(this.needTour()){
|
|
|
|
| 77 |
this.tour('wfWelcomeContent3', 'wfHeading', 'top', 'left', "Learn about Site Performance", function(){ self.tourRedir('WordfenceSitePerf'); });
|
| 78 |
}
|
| 79 |
} else if(jQuery('#wordfenceMode_options').length > 0){
|
| 81 |
jQuery('.wfConfigElem').change(function(){ jQuery('#securityLevel').val('CUSTOM'); });
|
| 82 |
this.updateTicker(true);
|
| 83 |
startTicker = true;
|
| 84 |
+
if(this.needTour()){
|
| 85 |
+
this.tour('wfContentBasicOptions', 'wfMarkerBasicOptions', 'top', 'left', "Learn about Live Traffic Options", function(){
|
|
|
|
| 86 |
self.tour('wfContentLiveTrafficOptions', 'wfMarkerLiveTrafficOptions', 'bottom', 'left', "Learn about Scanning Options", function(){
|
| 87 |
self.tour('wfContentScansToInclude', 'wfMarkerScansToInclude', 'bottom', 'left', "Learn about Firewall Rules", function(){
|
| 88 |
self.tour('wfContentFirewallRules', 'wfMarkerFirewallRules', 'bottom', 'left', "Learn about Login Security", function(){
|
| 99 |
this.staticTabChanged();
|
| 100 |
this.updateTicker(true);
|
| 101 |
startTicker = true;
|
| 102 |
+
if(this.needTour()){
|
|
|
|
| 103 |
this.tour('wfWelcomeContent4', 'wfHeading', 'top', 'left', "Learn about Cellphone Sign-in", function(){ self.tourRedir('WordfenceTwoFactor'); });
|
| 104 |
}
|
| 105 |
} else if(jQuery('#wordfenceMode_twoFactor').length > 0){
|
| 106 |
this.mode = 'twoFactor';
|
| 107 |
startTicker = false;
|
| 108 |
+
if(this.needTour()){
|
|
|
|
| 109 |
this.tour('wfWelcomeTwoFactor', 'wfHeading', 'top', 'left', "Learn how to Block Countries", function(){ self.tourRedir('WordfenceCountryBlocking'); });
|
| 110 |
}
|
| 111 |
this.loadTwoFactor();
|
| 113 |
} else if(jQuery('#wordfenceMode_countryBlocking').length > 0){
|
| 114 |
this.mode = 'countryBlocking';
|
| 115 |
startTicker = false;
|
| 116 |
+
if(this.needTour()){
|
|
|
|
| 117 |
this.tour('wfWelcomeContentCntBlk', 'wfHeading', 'top', 'left', "Learn how to Schedule Scans", function(){ self.tourRedir('WordfenceScanSchedule'); });
|
| 118 |
}
|
| 119 |
} else if(jQuery('#wordfenceMode_rangeBlocking').length > 0){
|
| 120 |
this.mode = 'rangeBlocking';
|
| 121 |
startTicker = false;
|
| 122 |
+
if(this.needTour()){
|
|
|
|
| 123 |
this.tour('wfWelcomeContentRangeBlocking', 'wfHeading', 'top', 'left', "Learn how to Customize Wordfence", function(){ self.tourRedir('WordfenceSecOpt'); });
|
| 124 |
}
|
| 125 |
this.calcRangeTotal();
|
| 127 |
} else if(jQuery('#wordfenceMode_whois').length > 0){
|
| 128 |
this.mode = 'whois';
|
| 129 |
startTicker = false;
|
| 130 |
+
if(this.needTour()){
|
|
|
|
| 131 |
this.tour('wfWelcomeContentWhois', 'wfHeading', 'top', 'left', "Learn how to use Advanced Blocking", function(){ self.tourRedir('WordfenceRangeBlocking'); });
|
| 132 |
}
|
| 133 |
this.calcRangeTotal();
|
| 137 |
this.mode = 'scanScheduling';
|
| 138 |
startTicker = false;
|
| 139 |
this.sched_modeChange();
|
| 140 |
+
if(this.needTour()){
|
|
|
|
| 141 |
this.tour('wfWelcomeContentScanSched', 'wfHeading', 'top', 'left', "Learn about WHOIS", function(){ self.tourRedir('WordfenceWhois'); });
|
| 142 |
}
|
| 143 |
} else if(jQuery('#wordfenceMode_caching').length > 0){
|
| 144 |
this.mode = 'caching';
|
| 145 |
startTicker = false;
|
| 146 |
+
if(this.needTour()){
|
|
|
|
| 147 |
this.tour('wfWelcomeContentCaching', 'wfHeading', 'top', 'left', "Learn about IP Blocking", function(){ self.tourRedir('WordfenceBlockedIPs'); });
|
| 148 |
}
|
| 149 |
this.loadCacheExclusions();
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 150 |
} else {
|
| 151 |
this.mode = false;
|
| 152 |
}
|
| 153 |
if(this.mode){ //We are in a Wordfence page
|
|
|
|
| 154 |
if(startTicker){
|
| 155 |
this.updateTicker();
|
| 156 |
this.liveInt = setInterval(function(){ self.updateTicker(); }, WordfenceAdminVars.actUpdateInterval);
|
| 158 |
jQuery(document).bind('cbox_closed', function(){ self.colorboxIsOpen = false; self.colorboxServiceQueue(); });
|
| 159 |
}
|
| 160 |
},
|
| 161 |
+
needTour: function(){
|
| 162 |
+
if( (! this.tourClosed) && this.welcomeClosed) {
|
| 163 |
+
return true;
|
| 164 |
+
} else {
|
| 165 |
+
return false;
|
| 166 |
+
}
|
| 167 |
+
},
|
| 168 |
sendTestEmail: function(email){
|
| 169 |
var self = this;
|
| 170 |
this.ajax('wordfence_sendTestEmail', { email: email }, function(res){
|
| 263 |
}
|
| 264 |
},
|
| 265 |
startTourAgain: function(){
|
| 266 |
+
var self = this;
|
| 267 |
+
this.ajax('wordfence_startTourAgain', {}, function(res){
|
| 268 |
+
self.tourClosed = false;
|
| 269 |
+
self.scanTourStart();
|
| 270 |
+
});
|
| 271 |
},
|
| 272 |
showLoading: function(){
|
| 273 |
this.loadingCount++;
|
| 371 |
}
|
| 372 |
},
|
| 373 |
processSummaryLine: function(item){
|
| 374 |
+
var msg, summaryUpdated;
|
| 375 |
if(item.msg.indexOf('SUM_START:') != -1){
|
| 376 |
+
msg = item.msg.replace('SUM_START:', '');
|
| 377 |
jQuery('#consoleSummary').append('<div class="wfSummaryLine"><div class="wfSummaryDate">[' + item.date + ']</div><div class="wfSummaryMsg">' + msg + '</div><div class="wfSummaryResult"><div class="wfSummaryLoading"></div></div><div class="wfClear"></div>');
|
| 378 |
summaryUpdated = true;
|
| 379 |
} else if(item.msg.indexOf('SUM_ENDBAD') != -1){
|
| 380 |
+
msg = item.msg.replace('SUM_ENDBAD:', '');
|
| 381 |
jQuery('div.wfSummaryMsg:contains("' + msg + '")').next().addClass('wfSummaryBad').html('Problems found.');
|
| 382 |
summaryUpdated = true;
|
| 383 |
} else if(item.msg.indexOf('SUM_ENDFAILED') != -1){
|
| 384 |
+
msg = item.msg.replace('SUM_ENDFAILED:', '');
|
| 385 |
jQuery('div.wfSummaryMsg:contains("' + msg + '")').next().addClass('wfSummaryBad').html('Failed.');
|
| 386 |
summaryUpdated = true;
|
| 387 |
} else if(item.msg.indexOf('SUM_ENDOK') != -1){
|
| 388 |
+
msg = item.msg.replace('SUM_ENDOK:', '');
|
| 389 |
jQuery('div.wfSummaryMsg:contains("' + msg + '")').next().addClass('wfSummaryOK').html('Secure.');
|
| 390 |
summaryUpdated = true;
|
| 391 |
} else if(item.msg.indexOf('SUM_ENDSUCCESS') != -1){
|
| 392 |
+
msg = item.msg.replace('SUM_ENDSUCCESS:', '');
|
| 393 |
jQuery('div.wfSummaryMsg:contains("' + msg + '")').next().addClass('wfSummaryOK').html('Success.');
|
| 394 |
summaryUpdated = true;
|
| 395 |
} else if(item.msg.indexOf('SUM_ENDERR') != -1){
|
| 396 |
+
msg = item.msg.replace('SUM_ENDERR:', '');
|
| 397 |
jQuery('div.wfSummaryMsg:contains("' + msg + '")').next().addClass('wfSummaryErr').html('An error occurred.');
|
| 398 |
summaryUpdated = true;
|
| 399 |
} else if(item.msg.indexOf('SUM_DISABLED:') != -1){
|
| 400 |
+
msg = item.msg.replace('SUM_DISABLED:', '');
|
| 401 |
jQuery('#consoleSummary').append('<div class="wfSummaryLine"><div class="wfSummaryDate">[' + item.date + ']</div><div class="wfSummaryMsg">' + msg + '</div><div class="wfSummaryResult">Disabled [<a href="admin.php?page=WordfenceSecOpt">Visit Options to Enable</a>]</div><div class="wfClear"></div>');
|
| 402 |
summaryUpdated = true;
|
| 403 |
} else if(item.msg.indexOf('SUM_PAIDONLY:') != -1){
|
| 404 |
+
msg = item.msg.replace('SUM_PAIDONLY:', '');
|
| 405 |
jQuery('#consoleSummary').append('<div class="wfSummaryLine"><div class="wfSummaryDate">[' + item.date + ']</div><div class="wfSummaryMsg">' + msg + '</div><div class="wfSummaryResult"><a href="https://www.wordfence.com/wordfence-signup/" target="_blank">Paid Members Only</a></div><div class="wfClear"></div>');
|
| 406 |
summaryUpdated = true;
|
| 407 |
} else if(item.msg.indexOf('SUM_FINAL:') != -1){
|
| 408 |
+
msg = item.msg.replace('SUM_FINAL:', '');
|
| 409 |
jQuery('#consoleSummary').append('<div class="wfSummaryLine"><div class="wfSummaryDate">[' + item.date + ']</div><div class="wfSummaryMsg wfSummaryFinal">' + msg + '</div><div class="wfSummaryResult wfSummaryOK">Scan Complete.</div><div class="wfClear"></div>');
|
| 410 |
} else if(item.msg.indexOf('SUM_PREP:') != -1){
|
| 411 |
+
msg = item.msg.replace('SUM_PREP:', '');
|
| 412 |
jQuery('#consoleSummary').empty().html('<div class="wfSummaryLine"><div class="wfSummaryDate">[' + item.date + ']</div><div class="wfSummaryMsg">' + msg + '</div><div class="wfSummaryResult" id="wfStartingScan"><div class="wfSummaryLoading"></div></div><div class="wfClear"></div>');
|
| 413 |
} else if(item.msg.indexOf('SUM_KILLED:') != -1){
|
| 414 |
+
msg = item.msg.replace('SUM_KILLED:', '');
|
| 415 |
jQuery('#consoleSummary').empty().html('<div class="wfSummaryLine"><div class="wfSummaryDate">[' + item.date + ']</div><div class="wfSummaryMsg">' + msg + '</div><div class="wfSummaryResult wfSummaryOK">Scan Complete.</div><div class="wfClear"></div>');
|
| 416 |
}
|
| 417 |
},
|
| 461 |
if(newMsg && newMsg != oldMsg){
|
| 462 |
jQuery('#wfLiveStatus').hide().html(newMsg).fadeIn(200);
|
| 463 |
}
|
| 464 |
+
var haveEvents, newElem;
|
| 465 |
if(this.mode == 'activity'){
|
| 466 |
if(res.alsoGet != 'logList_' + this.activityMode){ return; } //user switched panels since ajax request started
|
| 467 |
if(res.events.length > 0){
|
| 468 |
this.newestActivityTime = res.events[0]['ctime'];
|
| 469 |
}
|
| 470 |
+
haveEvents = false;
|
| 471 |
if(jQuery('#wfActivity_' + this.activityMode + ' .wfActEvent').length > 0){
|
| 472 |
haveEvents = true;
|
| 473 |
}
|
| 479 |
var elemID = '#wfActEvent_' + res.events[i].id;
|
| 480 |
if(jQuery(elemID).length < 1){
|
| 481 |
res.events[i]['activityMode'] = this.activityMode;
|
|
|
|
| 482 |
if(this.activityMode == 'loginLogout'){
|
| 483 |
newElem = jQuery('#wfLoginLogoutEventTmpl').tmpl(res.events[i]);
|
| 484 |
} else {
|
| 499 |
jQuery(elem).html(self.makeTimeAgo(res.serverTime - jQuery(elem).data('wfctime')) + ' ago');
|
| 500 |
});
|
| 501 |
} else if(this.mode == 'perfStats'){
|
| 502 |
+
haveEvents = false;
|
| 503 |
if(jQuery('#wfPerfStats .wfPerfEvent').length > 0){
|
| 504 |
haveEvents = true;
|
| 505 |
}
|
| 515 |
for(var i = res.events.length - 1; i >= 0; i--){
|
| 516 |
res.events[i]['scale'] = this.performanceScale;
|
| 517 |
res.events[i]['min'] = this.performanceMinWidth;
|
| 518 |
+
newElem = jQuery('#wfPerfStatTmpl').tmpl(res.events[i]);
|
| 519 |
jQuery(newElem).find('.wfTimeAgo').data('wfctime', res.events[i].ctime);
|
| 520 |
newElem.prependTo('#wfPerfStats').fadeIn();
|
| 521 |
}
|
| 524 |
jQuery('#wfPerfStats').html('<p>No events to report yet.</p>');
|
| 525 |
}
|
| 526 |
}
|
|
|
|
| 527 |
jQuery('.wfTimeAgo').each(function(idx, elem){
|
| 528 |
jQuery(elem).html(self.makeTimeAgo(res.serverTime - jQuery(elem).data('wfctime')) + ' ago');
|
| 529 |
});
|
| 554 |
if(res.ok){
|
| 555 |
jQuery('.wfReverseLookup').each(function(idx, elem){
|
| 556 |
var txt = jQuery(elem).text();
|
| 557 |
+
for(var ip in res.ips){
|
| 558 |
if(txt == ip){
|
| 559 |
if(res.ips[ip]){
|
| 560 |
jQuery(elem).html('<strong>Hostname:</strong> ' + res.ips[ip]);
|
| 580 |
startScan: function(){
|
| 581 |
var scanReqAnimation = setInterval(function(){
|
| 582 |
var str = jQuery('#wfStartScanButton1').prop('value');
|
| 583 |
+
var ch = str.charAt(str.length - 1);
|
| 584 |
if(ch == '/'){ ch = '-'; }
|
| 585 |
else if(ch == '-'){ ch = '\\'; }
|
| 586 |
else if(ch == '\\'){ ch = '|'; }
|
| 620 |
res.summary['lastScanCompleted'] = 'Never';
|
| 621 |
}
|
| 622 |
jQuery('.wfIssuesContainer').hide();
|
| 623 |
+
for(var issueStatus in res.issuesLists){
|
| 624 |
var containerID = 'wfIssues_dataTable_' + issueStatus;
|
| 625 |
var tableID = 'wfIssuesTable_' + issueStatus;
|
| 626 |
if(jQuery('#' + containerID).length < 1){
|
| 661 |
"sClass": "center",
|
| 662 |
"sType": 'severity',
|
| 663 |
"fnRender": function(obj) {
|
| 664 |
+
var cls = 'wfProbSev' + obj.aData.severity;
|
|
|
|
| 665 |
return '<span class="' + cls + '"></span>';
|
| 666 |
}
|
| 667 |
},
|
| 821 |
},
|
| 822 |
updateAllIssues: function(op){ // deleteIgnored, deleteNew, ignoreAllNew
|
| 823 |
var head = "Please confirm";
|
| 824 |
+
var body;
|
| 825 |
if(op == 'deleteIgnored'){
|
| 826 |
body = "You have chosen to remove all ignored issues. Once these issues are removed they will be re-scanned by Wordfence and if they have not been fixed, they will appear in the 'new issues' list. Are you sure you want to do this?";
|
| 827 |
} else if(op == 'deleteNew'){
|
| 1380 |
}
|
| 1381 |
}
|
| 1382 |
});
|
| 1383 |
+
this.countryCodesToSave = codesArr.join(',');
|
|
|
|
| 1384 |
if(ownCountryBlocked){
|
| 1385 |
this.colorbox('400px', "Please confirm blocking yourself", "You are about to block your own country. This could lead to you being locked out. Please make sure that your user profile on this machine has a current and valid email address and make sure you know what it is. That way if you are locked out, you can send yourself an unlock email. If you're sure you want to block your own country, click 'Confirm' below, otherwise click 'Cancel'.<br />" +
|
| 1386 |
'<input type="button" name="but1" value="Confirm" onclick="jQuery.colorbox.close(); WFAD.confirmSaveCountryBlocking();" /> <input type="button" name="but1" value="Cancel" onclick="jQuery.colorbox.close();" />');
|
| 1491 |
}
|
| 1492 |
schedule[day] = hours.join(',');
|
| 1493 |
}
|
| 1494 |
+
var scheduleTxt = schedule.join('|');
|
| 1495 |
var self = this;
|
| 1496 |
this.ajax('wordfence_saveScanSchedule', {
|
| 1497 |
schedMode: schedMode,
|
js/tourTip.js
CHANGED
|
@@ -126,7 +126,7 @@ window['wordfenceTour'] = {
|
|
| 126 |
}
|
| 127 |
|
| 128 |
jQuery(function(){
|
| 129 |
-
if(WordfenceAdminVars.tourClosed != '1'){
|
| 130 |
var formHTML = '<div style="padding: 0 5px 0 15px;" id="wordfenceEmailDiv"><form target="_new" style="display: inline;" method="post" class="af-form-wrapper" action="http://www.aweber.com/scripts/addlead.pl" ><div style="display: none;"><input type="hidden" name="meta_web_form_id" value="1428034071" /><input type="hidden" name="meta_split_id" value="" /><input type="hidden" name="listname" value="wordfence" /><input type="hidden" name="redirect" value="http://www.aweber.com/thankyou-coi.htm?m=text" id="redirect_ae9f0882518768f447c80ea8f3b7afde" /><input type="hidden" name="meta_adtracking" value="widgetForm" /><input type="hidden" name="meta_message" value="1" /><input type="hidden" name="meta_required" value="email" /><input type="hidden" name="meta_tooltip" value="" /></div><input class="text" id="wfListEmail" type="text" name="email" value="Enter your email" tabindex="500" onclick="wordfenceTour.wfClearEmailField(); return false;" /><input name="submit" type="submit" value="Get Alerted" tabindex="501" onclick="var evt = event || window.event; try { return wordfenceTour.processEmailClick(evt); } catch(err){ evt.returnValue = false; evt.preventDefault(); }" /><div style="display: none;"><img src="http://forms.aweber.com/form/displays.htm?id=jCxMHAzMLAzsjA==" alt="" /></div><div style="padding: 5px; font-size: 10px;"><input type="checkbox" id="wfJoinListCheck" value="1" checked /><span style="font-size: 10px;">Also join our WordPress Security email list to receive WordPress Security Alerts and Wordfence news.</span></div></form></div>';
|
| 131 |
var elem = '#toplevel_page_Wordfence';
|
| 132 |
jQuery(elem).pointer({
|
|
@@ -137,10 +137,10 @@ if(WordfenceAdminVars.tourClosed != '1'){
|
|
| 137 |
pointerWidth: 300,
|
| 138 |
position: { edge: 'bottom', align: 'left' },
|
| 139 |
buttons: function(event, t){
|
| 140 |
-
buttonElem = jQuery('<a id="pointer-close" style="margin-left:5px" class="button-secondary">Close</a>');
|
| 141 |
buttonElem.bind('click.pointer', function(){ t.element.pointer('close');
|
| 142 |
var ajaxData = {
|
| 143 |
-
action: '
|
| 144 |
nonce: WordfenceAdminVars.firstNonce
|
| 145 |
};
|
| 146 |
jQuery.ajax({
|
|
@@ -156,7 +156,21 @@ if(WordfenceAdminVars.tourClosed != '1'){
|
|
| 156 |
}
|
| 157 |
}).pointer('open');
|
| 158 |
jQuery('#pointer-close').after('<a id="pointer-primary" class="button-primary">Start Tour</a>');
|
| 159 |
-
jQuery('#pointer-primary').click(function(){
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 160 |
}
|
| 161 |
});
|
| 162 |
|
| 126 |
}
|
| 127 |
|
| 128 |
jQuery(function(){
|
| 129 |
+
if(WordfenceAdminVars.tourClosed != '1' && WordfenceAdminVars.welcomeClosed != '1'){
|
| 130 |
var formHTML = '<div style="padding: 0 5px 0 15px;" id="wordfenceEmailDiv"><form target="_new" style="display: inline;" method="post" class="af-form-wrapper" action="http://www.aweber.com/scripts/addlead.pl" ><div style="display: none;"><input type="hidden" name="meta_web_form_id" value="1428034071" /><input type="hidden" name="meta_split_id" value="" /><input type="hidden" name="listname" value="wordfence" /><input type="hidden" name="redirect" value="http://www.aweber.com/thankyou-coi.htm?m=text" id="redirect_ae9f0882518768f447c80ea8f3b7afde" /><input type="hidden" name="meta_adtracking" value="widgetForm" /><input type="hidden" name="meta_message" value="1" /><input type="hidden" name="meta_required" value="email" /><input type="hidden" name="meta_tooltip" value="" /></div><input class="text" id="wfListEmail" type="text" name="email" value="Enter your email" tabindex="500" onclick="wordfenceTour.wfClearEmailField(); return false;" /><input name="submit" type="submit" value="Get Alerted" tabindex="501" onclick="var evt = event || window.event; try { return wordfenceTour.processEmailClick(evt); } catch(err){ evt.returnValue = false; evt.preventDefault(); }" /><div style="display: none;"><img src="http://forms.aweber.com/form/displays.htm?id=jCxMHAzMLAzsjA==" alt="" /></div><div style="padding: 5px; font-size: 10px;"><input type="checkbox" id="wfJoinListCheck" value="1" checked /><span style="font-size: 10px;">Also join our WordPress Security email list to receive WordPress Security Alerts and Wordfence news.</span></div></form></div>';
|
| 131 |
var elem = '#toplevel_page_Wordfence';
|
| 132 |
jQuery(elem).pointer({
|
| 137 |
pointerWidth: 300,
|
| 138 |
position: { edge: 'bottom', align: 'left' },
|
| 139 |
buttons: function(event, t){
|
| 140 |
+
var buttonElem = jQuery('<a id="pointer-close" style="margin-left:5px" class="button-secondary">Close</a>');
|
| 141 |
buttonElem.bind('click.pointer', function(){ t.element.pointer('close');
|
| 142 |
var ajaxData = {
|
| 143 |
+
action: 'wordfence_welcomeClosed',
|
| 144 |
nonce: WordfenceAdminVars.firstNonce
|
| 145 |
};
|
| 146 |
jQuery.ajax({
|
| 156 |
}
|
| 157 |
}).pointer('open');
|
| 158 |
jQuery('#pointer-close').after('<a id="pointer-primary" class="button-primary">Start Tour</a>');
|
| 159 |
+
jQuery('#pointer-primary').click(function(){
|
| 160 |
+
var ajaxData = {
|
| 161 |
+
action: 'wordfence_welcomeClosed',
|
| 162 |
+
nonce: WordfenceAdminVars.firstNonce
|
| 163 |
+
};
|
| 164 |
+
jQuery.ajax({
|
| 165 |
+
type: 'POST',
|
| 166 |
+
url: WordfenceAdminVars.ajaxURL,
|
| 167 |
+
dataType: "json",
|
| 168 |
+
data: ajaxData,
|
| 169 |
+
success: function(json){ window.location.href = 'admin.php?page=Wordfence'; },
|
| 170 |
+
error: function(){ window.location.href = 'admin.php?page=Wordfence'; }
|
| 171 |
+
});
|
| 172 |
+
|
| 173 |
+
});
|
| 174 |
}
|
| 175 |
});
|
| 176 |
|
lib/Diff/SequenceMatcher.php
CHANGED
|
@@ -621,56 +621,6 @@ class Diff_SequenceMatcher
|
|
| 621 |
return $sum + ($triple[count($triple) - 1]);
|
| 622 |
}
|
| 623 |
|
| 624 |
-
/**
|
| 625 |
-
* Quickly return an upper bound ratio for the similarity of the strings.
|
| 626 |
-
* This is quicker to compute than Ratio().
|
| 627 |
-
*
|
| 628 |
-
* @return float The calculated ratio.
|
| 629 |
-
*/
|
| 630 |
-
private function quickRatio()
|
| 631 |
-
{
|
| 632 |
-
if($this->fullBCount === null) {
|
| 633 |
-
$this->fullBCount = array();
|
| 634 |
-
$bLength = count ($b);
|
| 635 |
-
for($i = 0; $i < $bLength; ++$i) {
|
| 636 |
-
$char = $this->b[$i];
|
| 637 |
-
$this->fullBCount[$char] = $this->arrayGetDefault($this->fullBCount, $char, 0) + 1;
|
| 638 |
-
}
|
| 639 |
-
}
|
| 640 |
-
|
| 641 |
-
$avail = array();
|
| 642 |
-
$matches = 0;
|
| 643 |
-
$aLength = count ($this->a);
|
| 644 |
-
for($i = 0; $i < $aLength; ++$i) {
|
| 645 |
-
$char = $this->a[$i];
|
| 646 |
-
if(isset($avail[$char])) {
|
| 647 |
-
$numb = $avail[$char];
|
| 648 |
-
}
|
| 649 |
-
else {
|
| 650 |
-
$numb = $this->arrayGetDefault($this->fullBCount, $char, 0);
|
| 651 |
-
}
|
| 652 |
-
$avail[$char] = $numb - 1;
|
| 653 |
-
if($numb > 0) {
|
| 654 |
-
++$matches;
|
| 655 |
-
}
|
| 656 |
-
}
|
| 657 |
-
|
| 658 |
-
$this->calculateRatio($matches, count ($this->a) + count ($this->b));
|
| 659 |
-
}
|
| 660 |
-
|
| 661 |
-
/**
|
| 662 |
-
* Return an upper bound ratio really quickly for the similarity of the strings.
|
| 663 |
-
* This is quicker to compute than Ratio() and quickRatio().
|
| 664 |
-
*
|
| 665 |
-
* @return float The calculated ratio.
|
| 666 |
-
*/
|
| 667 |
-
private function realquickRatio()
|
| 668 |
-
{
|
| 669 |
-
$aLength = count ($this->a);
|
| 670 |
-
$bLength = count ($this->b);
|
| 671 |
-
|
| 672 |
-
return $this->calculateRatio(min($aLength, $bLength), $aLength + $bLength);
|
| 673 |
-
}
|
| 674 |
|
| 675 |
/**
|
| 676 |
* Helper function for calculating the ratio to measure similarity for the strings.
|
| 621 |
return $sum + ($triple[count($triple) - 1]);
|
| 622 |
}
|
| 623 |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 624 |
|
| 625 |
/**
|
| 626 |
* Helper function for calculating the ratio to measure similarity for the strings.
|
lib/IPTraf.php
CHANGED
|
@@ -31,6 +31,6 @@
|
|
| 31 |
|
| 32 |
</table>
|
| 33 |
|
| 34 |
-
<div class="footer">© 2011 to 2015 Wordfence — Visit <a href="http://wordfence.com/">Wordfence.com</a> for help, security updates and more.</
|
| 35 |
</body>
|
| 36 |
</html>
|
| 31 |
|
| 32 |
</table>
|
| 33 |
|
| 34 |
+
<div class="footer">© 2011 to 2015 Wordfence — Visit <a href="http://wordfence.com/">Wordfence.com</a> for help, security updates and more.</div>
|
| 35 |
</body>
|
| 36 |
</html>
|
lib/conntest.php
CHANGED
|
@@ -63,7 +63,7 @@ function doCurlTest($protocol){
|
|
| 63 |
curl_setopt ($curl, CURLOPT_SSL_VERIFYPEER, false);
|
| 64 |
curl_setopt ($curl, CURLOPT_SSL_VERIFYHOST, false);
|
| 65 |
curl_setopt ($curl, CURLOPT_WRITEFUNCTION, 'curlWrite');
|
| 66 |
-
|
| 67 |
$httpStatus = curl_getinfo($curl, CURLINFO_HTTP_CODE);
|
| 68 |
if(strpos($curlContent, 'Your site did not send an API key') !== false){
|
| 69 |
echo "Curl connectivity test passed.<br /><br />\n";
|
| 63 |
curl_setopt ($curl, CURLOPT_SSL_VERIFYPEER, false);
|
| 64 |
curl_setopt ($curl, CURLOPT_SSL_VERIFYHOST, false);
|
| 65 |
curl_setopt ($curl, CURLOPT_WRITEFUNCTION, 'curlWrite');
|
| 66 |
+
curl_exec($curl);
|
| 67 |
$httpStatus = curl_getinfo($curl, CURLINFO_HTTP_CODE);
|
| 68 |
if(strpos($curlContent, 'Your site did not send an API key') !== false){
|
| 69 |
echo "Curl connectivity test passed.<br /><br />\n";
|
lib/cronview.php
ADDED
|
@@ -0,0 +1,30 @@
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 1 |
+
<?php if ( ! wfUtils::isAdmin() ) {
|
| 2 |
+
exit();
|
| 3 |
+
} ?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
|
| 4 |
+
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
| 5 |
+
<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US">
|
| 6 |
+
<head>
|
| 7 |
+
<title>Wordfence Cron Viewer</title>
|
| 8 |
+
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
|
| 9 |
+
<link rel='stylesheet' id='wordfence-main-style-css'
|
| 10 |
+
href='<?php echo wfUtils::getBaseURL(); ?>/css/phpinfo.css?ver=<?php echo WORDFENCE_VERSION; ?>'
|
| 11 |
+
type='text/css' media='all'/>
|
| 12 |
+
<body>
|
| 13 |
+
<h1>Wordfence Cron Viewer</h1>
|
| 14 |
+
<p style="width: 400px;">This page is used for debugging and shows a list of scheduled jobs on your system. Our staff may ask you to send them the
|
| 15 |
+
data on this page as part of a troubleshooting process.</p>
|
| 16 |
+
<?php
|
| 17 |
+
$cron = _get_cron_array();
|
| 18 |
+
|
| 19 |
+
foreach ( $cron as $timestamp => $values ) {
|
| 20 |
+
if ( is_array( $values ) ) {
|
| 21 |
+
foreach ( $values as $cron_job => $v ) {
|
| 22 |
+
echo date( 'r', $timestamp ) . " : " . $cron_job . "<br />";
|
| 23 |
+
}
|
| 24 |
+
}
|
| 25 |
+
}
|
| 26 |
+
?>
|
| 27 |
+
|
| 28 |
+
<div class="diffFooter">© 2011 to 2015 Wordfence — Visit <a href="http://wordfence.com/">Wordfence.com</a> for help, security updates and more.</div>
|
| 29 |
+
</body>
|
| 30 |
+
</html>
|
lib/dbview.php
ADDED
|
@@ -0,0 +1,31 @@
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 1 |
+
<?php if ( ! wfUtils::isAdmin() ) {
|
| 2 |
+
exit();
|
| 3 |
+
} ?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
|
| 4 |
+
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
| 5 |
+
<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US">
|
| 6 |
+
<head>
|
| 7 |
+
<title>Wordfence DB Table Viewer</title>
|
| 8 |
+
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
|
| 9 |
+
<link rel='stylesheet' id='wordfence-main-style-css'
|
| 10 |
+
href='<?php echo wfUtils::getBaseURL(); ?>/css/phpinfo.css?ver=<?php echo WORDFENCE_VERSION; ?>'
|
| 11 |
+
type='text/css' media='all'/>
|
| 12 |
+
<body>
|
| 13 |
+
<h1>Wordfence Database Table Viewer</h1>
|
| 14 |
+
<p style="width: 400px;">This page is used for debugging and shows a list of database tables and their status on your system. Our staff may ask you to send them the
|
| 15 |
+
data on this page as part of a troubleshooting process.</p>
|
| 16 |
+
<?php
|
| 17 |
+
$wfdb = new wfDB();
|
| 18 |
+
$q = $wfdb->querySelect("show table status");
|
| 19 |
+
foreach($q as $val){
|
| 20 |
+
foreach($val as $tkey => $tval){
|
| 21 |
+
echo '<span style="color: #999; font-style: italic;">' . $tkey . ':</span> ' . $tval . ' ';
|
| 22 |
+
}
|
| 23 |
+
echo '<br />-----------------------------------------------------------------------------------------<br />';
|
| 24 |
+
}
|
| 25 |
+
|
| 26 |
+
?>
|
| 27 |
+
|
| 28 |
+
<div class="diffFooter">© 2011 to 2015 Wordfence — Visit <a
|
| 29 |
+
href="http://wordfence.com/">Wordfence.com</a> for help, security updates and more.</div>
|
| 30 |
+
</body>
|
| 31 |
+
</html>
|
lib/diffResult.php
CHANGED
|
@@ -40,6 +40,6 @@
|
|
| 40 |
?>
|
| 41 |
|
| 42 |
|
| 43 |
-
<div class="diffFooter">© 2011 Wordfence — Visit <a href="http://wordfence.com/">Wordfence.com</a> for help, security updates and more.</
|
| 44 |
</body>
|
| 45 |
</html>
|
| 40 |
?>
|
| 41 |
|
| 42 |
|
| 43 |
+
<div class="diffFooter">© 2011 Wordfence — Visit <a href="http://wordfence.com/">Wordfence.com</a> for help, security updates and more.</div>
|
| 44 |
</body>
|
| 45 |
</html>
|
lib/email_genericAlert.php
CHANGED
|
@@ -1,31 +1,31 @@
|
|
| 1 |
-
|
| 2 |
|
| 3 |
-
|
| 4 |
|
| 5 |
-
|
| 6 |
-
<?php if($IPMsg){ echo "\n
|
| 7 |
|
| 8 |
<?php if(! $isPaid){ ?>
|
| 9 |
-
|
| 10 |
two factor authentication (sign-in via cellphone) and country blocking which are both effective methods to block attacks.
|
| 11 |
A Premium Wordfence license also includes remote scanning with each scan of your site which can detect
|
| 12 |
several additional website infections. Premium members can also schedule when website scans occur and
|
| 13 |
-
can scan more than once per day
|
| 14 |
|
| 15 |
-
|
| 16 |
-
priority support tickets using our ticketing system.
|
| 17 |
|
| 18 |
-
|
| 19 |
-
|
| 20 |
|
| 21 |
<?php } ?>
|
| 22 |
|
| 23 |
--
|
| 24 |
-
|
| 25 |
-
<?php echo $myOptionsURL;
|
| 26 |
|
| 27 |
-
|
| 28 |
-
<?php echo $myHomeURL;
|
| 29 |
|
| 30 |
|
| 31 |
|
| 1 |
+
This email was sent from your website "<?php echo $blogName; ?>" by the Wordfence plugin at <?php echo $date; ?>
|
| 2 |
|
| 3 |
+
The Wordfence administrative URL for this site is: <?php echo $adminURL; ?>admin.php?page=Wordfence
|
| 4 |
|
| 5 |
+
<?php echo $alertMsg; ?>
|
| 6 |
+
<?php if($IPMsg){ echo "\n$IPMsg\n"; } ?>
|
| 7 |
|
| 8 |
<?php if(! $isPaid){ ?>
|
| 9 |
+
NOTE: You are using the free version of Wordfence. Upgrading to the paid version of Wordfence gives you
|
| 10 |
two factor authentication (sign-in via cellphone) and country blocking which are both effective methods to block attacks.
|
| 11 |
A Premium Wordfence license also includes remote scanning with each scan of your site which can detect
|
| 12 |
several additional website infections. Premium members can also schedule when website scans occur and
|
| 13 |
+
can scan more than once per day.
|
| 14 |
|
| 15 |
+
As a Premium member you also get access to our priority support system located at http://support.wordfence.com/ and can file
|
| 16 |
+
priority support tickets using our ticketing system.
|
| 17 |
|
| 18 |
+
Click here to sign-up for the Premium version of Wordfence now.
|
| 19 |
+
https://www.wordfence.com/wordfence-signup/
|
| 20 |
|
| 21 |
<?php } ?>
|
| 22 |
|
| 23 |
--
|
| 24 |
+
To change your alert options for Wordfence, visit:
|
| 25 |
+
<?php echo $myOptionsURL; ?>
|
| 26 |
|
| 27 |
+
To see current Wordfence alerts, visit:
|
| 28 |
+
<?php echo $myHomeURL; ?>
|
| 29 |
|
| 30 |
|
| 31 |
|
lib/menu_options.php
CHANGED
|
@@ -1,402 +1,1141 @@
|
|
| 1 |
-
<?php
|
| 2 |
-
$w = new wfConfig();
|
| 3 |
?>
|
| 4 |
<script type="text/javascript">
|
| 5 |
-
var WFSLevels = <?php echo json_encode(wfConfig::$securityLevels); ?>;
|
| 6 |
</script>
|
| 7 |
<div class="wordfenceModeElem" id="wordfenceMode_options"></div>
|
| 8 |
<div class="wrap">
|
| 9 |
-
<?php require
|
| 10 |
-
<?php $helpLink
|
|
|
|
|
|
|
|
|
|
| 11 |
<div class="wordfenceLive">
|
| 12 |
<table border="0" cellpadding="0" cellspacing="0">
|
| 13 |
-
|
|
|
|
|
|
|
|
|
|
| 14 |
</table>
|
| 15 |
</div>
|
| 16 |
|
| 17 |
<form id="wfConfigForm">
|
| 18 |
-
|
| 19 |
-
|
| 20 |
-
|
| 21 |
-
|
| 22 |
-
|
| 23 |
-
|
| 24 |
-
|
| 25 |
-
|
| 26 |
-
|
| 27 |
-
|
| 28 |
-
|
| 29 |
-
|
| 30 |
-
|
| 31 |
-
|
| 32 |
-
|
| 33 |
-
|
| 34 |
-
|
| 35 |
-
|
| 36 |
-
|
| 37 |
-
|
| 38 |
-
|
| 39 |
-
|
| 40 |
-
|
| 41 |
-
|
| 42 |
-
|
| 43 |
-
|
| 44 |
-
|
| 45 |
-
|
| 46 |
-
|
| 47 |
-
|
| 48 |
-
|
| 49 |
-
|
| 50 |
-
|
| 51 |
-
|
| 52 |
-
|
| 53 |
-
|
| 54 |
-
|
| 55 |
-
|
| 56 |
-
|
| 57 |
-
|
| 58 |
-
|
| 59 |
-
|
| 60 |
-
|
| 61 |
-
|
| 62 |
-
|
| 63 |
-
|
| 64 |
-
|
| 65 |
-
|
| 66 |
-
|
| 67 |
-
|
| 68 |
-
|
| 69 |
-
|
| 70 |
-
|
| 71 |
-
|
| 72 |
-
|
| 73 |
-
<
|
| 74 |
-
|
| 75 |
-
|
| 76 |
-
|
| 77 |
-
|
| 78 |
-
|
| 79 |
-
|
| 80 |
-
|
| 81 |
-
|
| 82 |
-
|
| 83 |
-
|
| 84 |
-
|
| 85 |
-
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 86 |
</p>
|
| 87 |
-
|
| 88 |
-
|
| 89 |
-
|
| 90 |
-
|
| 91 |
-
|
| 92 |
-
|
| 93 |
-
|
| 94 |
-
|
| 95 |
-
|
| 96 |
-
|
| 97 |
-
|
| 98 |
-
|
| 99 |
-
|
| 100 |
-
|
| 101 |
-
|
| 102 |
-
|
| 103 |
-
|
| 104 |
-
|
| 105 |
-
|
| 106 |
-
|
| 107 |
-
|
| 108 |
-
|
| 109 |
-
|
| 110 |
-
|
| 111 |
-
|
| 112 |
-
|
| 113 |
-
|
| 114 |
-
|
| 115 |
-
|
| 116 |
-
|
| 117 |
-
|
| 118 |
-
|
| 119 |
-
|
| 120 |
-
|
| 121 |
-
|
| 122 |
-
|
| 123 |
-
|
| 124 |
-
|
| 125 |
-
|
| 126 |
-
|
| 127 |
-
|
| 128 |
-
|
| 129 |
-
|
| 130 |
-
|
| 131 |
-
|
| 132 |
-
|
| 133 |
-
|
| 134 |
-
|
| 135 |
-
|
| 136 |
-
|
| 137 |
-
|
| 138 |
-
|
| 139 |
-
|
| 140 |
-
|
| 141 |
-
|
| 142 |
-
|
| 143 |
-
|
| 144 |
-
|
| 145 |
-
|
| 146 |
-
|
| 147 |
-
|
| 148 |
-
|
| 149 |
-
|
| 150 |
-
|
| 151 |
-
|
| 152 |
-
|
| 153 |
-
|
| 154 |
-
|
| 155 |
-
|
| 156 |
-
|
| 157 |
-
|
| 158 |
-
|
| 159 |
-
|
| 160 |
-
|
| 161 |
-
|
| 162 |
-
|
| 163 |
-
|
| 164 |
-
|
| 165 |
-
|
| 166 |
-
|
| 167 |
-
|
| 168 |
-
|
| 169 |
-
|
| 170 |
-
|
| 171 |
-
|
| 172 |
-
|
| 173 |
-
|
| 174 |
-
|
| 175 |
-
|
| 176 |
-
|
| 177 |
-
|
| 178 |
-
|
| 179 |
-
|
| 180 |
-
|
| 181 |
-
|
| 182 |
-
|
| 183 |
-
|
| 184 |
-
|
| 185 |
-
|
| 186 |
-
|
| 187 |
-
|
| 188 |
-
|
| 189 |
-
|
| 190 |
-
|
| 191 |
-
|
| 192 |
-
|
| 193 |
-
|
| 194 |
-
|
| 195 |
-
|
| 196 |
-
|
| 197 |
-
|
| 198 |
-
|
| 199 |
-
|
| 200 |
-
|
| 201 |
-
|
| 202 |
-
|
| 203 |
-
|
| 204 |
-
|
| 205 |
-
|
| 206 |
-
|
| 207 |
-
|
| 208 |
-
|
| 209 |
-
|
| 210 |
-
|
| 211 |
-
|
| 212 |
-
|
| 213 |
-
|
| 214 |
-
|
| 215 |
-
|
| 216 |
-
|
| 217 |
-
|
| 218 |
-
|
| 219 |
-
|
| 220 |
-
|
| 221 |
-
|
| 222 |
-
|
| 223 |
-
|
| 224 |
-
|
| 225 |
-
|
| 226 |
-
|
| 227 |
-
|
| 228 |
-
|
| 229 |
-
|
| 230 |
-
|
| 231 |
-
|
| 232 |
-
|
| 233 |
-
|
| 234 |
-
|
| 235 |
-
|
| 236 |
-
|
| 237 |
-
|
| 238 |
-
|
| 239 |
-
|
| 240 |
-
|
| 241 |
-
|
| 242 |
-
|
| 243 |
-
|
| 244 |
-
|
| 245 |
-
|
| 246 |
-
|
| 247 |
-
|
| 248 |
-
|
| 249 |
-
|
| 250 |
-
|
| 251 |
-
|
| 252 |
-
|
| 253 |
-
|
| 254 |
-
|
| 255 |
-
|
| 256 |
-
|
| 257 |
-
|
| 258 |
-
|
| 259 |
-
|
| 260 |
-
|
| 261 |
-
|
| 262 |
-
|
| 263 |
-
|
| 264 |
-
|
| 265 |
-
|
| 266 |
-
|
| 267 |
-
|
| 268 |
-
|
| 269 |
-
|
| 270 |
-
|
| 271 |
-
|
| 272 |
-
|
| 273 |
-
|
| 274 |
-
|
| 275 |
-
|
| 276 |
-
|
| 277 |
-
|
| 278 |
-
|
| 279 |
-
|
| 280 |
-
|
| 281 |
-
|
| 282 |
-
|
| 283 |
-
|
| 284 |
-
|
| 285 |
-
|
| 286 |
-
|
| 287 |
-
|
| 288 |
-
|
| 289 |
-
|
| 290 |
-
|
| 291 |
-
|
| 292 |
-
|
| 293 |
-
|
| 294 |
-
|
| 295 |
-
|
| 296 |
-
|
| 297 |
-
|
| 298 |
-
|
| 299 |
-
|
| 300 |
-
|
| 301 |
-
|
| 302 |
-
|
| 303 |
-
|
| 304 |
-
|
| 305 |
-
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 306 |
</form>
|
| 307 |
</div>
|
| 308 |
<script type="text/x-jquery-template" id="wfContentBasicOptions">
|
| 309 |
-
<div>
|
| 310 |
-
<h3>Basic Options</h3>
|
| 311 |
-
|
| 312 |
-
|
| 313 |
-
|
| 314 |
-
|
| 315 |
-
|
| 316 |
-
|
| 317 |
-
|
| 318 |
-
|
| 319 |
-
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 320 |
</script>
|
| 321 |
<script type="text/x-jquery-template" id="wfContentLiveTrafficOptions">
|
| 322 |
-
<div>
|
| 323 |
-
<h3>Live Traffic Options</h3>
|
| 324 |
-
|
| 325 |
-
|
| 326 |
-
|
| 327 |
-
|
| 328 |
-
|
|
|
|
|
|
|
|
|
|
| 329 |
</script>
|
| 330 |
<script type="text/x-jquery-template" id="wfContentScansToInclude">
|
| 331 |
-
<div>
|
| 332 |
-
<h3>Scans to Include</h3>
|
| 333 |
-
|
| 334 |
-
|
| 335 |
-
|
| 336 |
-
|
| 337 |
-
|
| 338 |
-
|
| 339 |
-
|
| 340 |
-
|
| 341 |
-
|
| 342 |
-
|
| 343 |
-
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 344 |
</script>
|
| 345 |
<script type="text/x-jquery-template" id="wfContentFirewallRules">
|
| 346 |
-
<div>
|
| 347 |
-
<h3>Firewall Rules</h3>
|
| 348 |
-
|
| 349 |
-
|
| 350 |
-
|
| 351 |
-
|
| 352 |
-
|
| 353 |
-
|
| 354 |
-
|
| 355 |
-
|
| 356 |
-
|
| 357 |
-
|
| 358 |
-
|
| 359 |
-
|
| 360 |
-
|
| 361 |
-
|
| 362 |
-
|
| 363 |
-
|
| 364 |
-
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 365 |
</script>
|
| 366 |
<script type="text/x-jquery-template" id="wfContentLoginSecurity">
|
| 367 |
-
<div>
|
| 368 |
-
<h3>Login Security</h3>
|
| 369 |
-
|
| 370 |
-
|
| 371 |
-
|
| 372 |
-
|
| 373 |
-
|
| 374 |
-
|
| 375 |
-
|
|
|
|
|
|
|
|
|
|
| 376 |
</script>
|
| 377 |
<script type="text/x-jquery-template" id="wfContentOtherOptions">
|
| 378 |
-
<div>
|
| 379 |
-
<h3>Other Options</h3>
|
| 380 |
-
|
| 381 |
-
|
| 382 |
-
|
| 383 |
-
|
| 384 |
-
|
| 385 |
-
|
| 386 |
-
|
| 387 |
-
|
| 388 |
-
|
| 389 |
-
</p>
|
| 390 |
-
|
| 391 |
-
|
| 392 |
-
|
| 393 |
-
|
| 394 |
-
|
| 395 |
-
|
| 396 |
-
|
| 397 |
-
|
| 398 |
-
|
| 399 |
-
|
| 400 |
-
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 401 |
</script>
|
| 402 |
|
| 1 |
+
<?php
|
| 2 |
+
$w = new wfConfig();
|
| 3 |
?>
|
| 4 |
<script type="text/javascript">
|
| 5 |
+
var WFSLevels = <?php echo json_encode(wfConfig::$securityLevels); ?>;
|
| 6 |
</script>
|
| 7 |
<div class="wordfenceModeElem" id="wordfenceMode_options"></div>
|
| 8 |
<div class="wrap">
|
| 9 |
+
<?php require( 'menuHeader.php' ); ?>
|
| 10 |
+
<?php $helpLink = "http://docs.wordfence.com/en/Wordfence_options";
|
| 11 |
+
$helpLabel = "Learn more about Wordfence Options";
|
| 12 |
+
$pageTitle = "Wordfence Options";
|
| 13 |
+
include( 'pageTitle.php' ); ?>
|
| 14 |
<div class="wordfenceLive">
|
| 15 |
<table border="0" cellpadding="0" cellspacing="0">
|
| 16 |
+
<tr>
|
| 17 |
+
<td><h2>Wordfence Live Activity:</h2></td>
|
| 18 |
+
<td id="wfLiveStatus"></td>
|
| 19 |
+
</tr>
|
| 20 |
</table>
|
| 21 |
</div>
|
| 22 |
|
| 23 |
<form id="wfConfigForm">
|
| 24 |
+
<table class="wfConfigForm">
|
| 25 |
+
<tr>
|
| 26 |
+
<td colspan="2"><h2>License</h2></td>
|
| 27 |
+
</tr>
|
| 28 |
+
|
| 29 |
+
<tr>
|
| 30 |
+
<th>Your Wordfence API Key:<a href="http://docs.wordfence.com/en/Wordfence_options#Wordfence_API_Key"
|
| 31 |
+
target="_blank" class="wfhelp"></a></th>
|
| 32 |
+
<td><input type="text" id="apiKey" name="apiKey" value="<?php $w->f( 'apiKey' ); ?>" size="80"/></td>
|
| 33 |
+
</tr>
|
| 34 |
+
<tr>
|
| 35 |
+
<th>Key type currently active:</th>
|
| 36 |
+
<td>
|
| 37 |
+
<?php if (wfConfig::get( 'isPaid' )){ ?>
|
| 38 |
+
The currently active API Key is a Premium Key. <span style="font-weight: bold; color: #0A0;">Premium scanning enabled!</span>
|
| 39 |
+
<?php } else { ?>
|
| 40 |
+
The currently active API Key is a <span style="color: #F00; font-weight: bold;">Free Key</span>. <a
|
| 41 |
+
href="https://www.wordfence.com/wordfence-signup/" target="_blank">Click Here to Upgrade to
|
| 42 |
+
Wordfence Premium now.</a>
|
| 43 |
+
<?php } ?>
|
| 44 |
+
</td>
|
| 45 |
+
</tr>
|
| 46 |
+
<tr>
|
| 47 |
+
<td colspan="2">
|
| 48 |
+
<?php if ( wfConfig::get( 'isPaid' ) ) { ?>
|
| 49 |
+
<table border="0">
|
| 50 |
+
<tr>
|
| 51 |
+
<td><a href="https://www.wordfence.com/manage-wordfence-api-keys/"
|
| 52 |
+
target="_blank"><input type="button" value="Renew your premium license"/></a>
|
| 53 |
+
</td>
|
| 54 |
+
<td> </td>
|
| 55 |
+
<td><input type="button" value="Downgrade to a free license"
|
| 56 |
+
onclick="WFAD.downgradeLicense();"/></td>
|
| 57 |
+
</tr>
|
| 58 |
+
</table>
|
| 59 |
+
<?php } ?>
|
| 60 |
+
|
| 61 |
+
|
| 62 |
+
<tr>
|
| 63 |
+
<td colspan="2"><h2>Basic Options<a href="http://docs.wordfence.com/en/Wordfence_options#Basic_Options"
|
| 64 |
+
target="_blank" class="wfhelp"></a></h2></td>
|
| 65 |
+
</tr>
|
| 66 |
+
<tr>
|
| 67 |
+
<th class="wfConfigEnable">Enable firewall<a
|
| 68 |
+
href="http://docs.wordfence.com/en/Wordfence_options#Enable_Firewall" target="_blank"
|
| 69 |
+
class="wfhelp"></a></th>
|
| 70 |
+
<td><input type="checkbox" id="firewallEnabled" class="wfConfigElem" name="firewallEnabled"
|
| 71 |
+
value="1" <?php $w->cb( 'firewallEnabled' ); ?> /> <span
|
| 72 |
+
style="color: #F00;">NOTE:</span> This checkbox enables ALL firewall functions including IP,
|
| 73 |
+
country and advanced blocking and the "Firewall Rules" below.
|
| 74 |
+
</td>
|
| 75 |
+
</tr>
|
| 76 |
+
<tr>
|
| 77 |
+
<td colspan="2"> </td>
|
| 78 |
+
</tr>
|
| 79 |
+
<tr>
|
| 80 |
+
<th class="wfConfigEnable">Enable login security<a
|
| 81 |
+
href="http://docs.wordfence.com/en/Wordfence_options#Enable_login_security" target="_blank"
|
| 82 |
+
class="wfhelp"></a></th>
|
| 83 |
+
<td><input type="checkbox" id="loginSecurityEnabled" class="wfConfigElem" name="loginSecurityEnabled"
|
| 84 |
+
value="1" <?php $w->cb( 'loginSecurityEnabled' ); ?> /> This option enables all "Login
|
| 85 |
+
Security" options. You can modify individual options further down this page.
|
| 86 |
+
</td>
|
| 87 |
+
</tr>
|
| 88 |
+
<tr>
|
| 89 |
+
<td colspan="2"> </td>
|
| 90 |
+
</tr>
|
| 91 |
+
<tr>
|
| 92 |
+
<th class="wfConfigEnable">Enable Live Traffic View<a
|
| 93 |
+
href="http://docs.wordfence.com/en/Wordfence_options#Enable_Live_Traffic_View" target="_blank"
|
| 94 |
+
class="wfhelp"></a></th>
|
| 95 |
+
<td><input type="checkbox" id="liveTrafficEnabled" class="wfConfigElem" name="liveTrafficEnabled"
|
| 96 |
+
value="1" <?php $w->cb( 'liveTrafficEnabled' ); ?>
|
| 97 |
+
onclick="WFAD.reloadConfigPage = true; return true;"/> This option enables live traffic
|
| 98 |
+
logging.
|
| 99 |
+
</td>
|
| 100 |
+
</tr>
|
| 101 |
+
<tr>
|
| 102 |
+
<td colspan="2"> </td>
|
| 103 |
+
</tr>
|
| 104 |
+
<tr>
|
| 105 |
+
<th class="wfConfigEnable">Advanced Comment Spam Filter<a
|
| 106 |
+
href="http://docs.wordfence.com/en/Wordfence_options#Advanced_Comment_Spam_Filter"
|
| 107 |
+
target="_blank" class="wfhelp"></a></th>
|
| 108 |
+
<td><input type="checkbox" id="advancedCommentScanning" class="wfConfigElem"
|
| 109 |
+
name="advancedCommentScanning" value="1" <?php $w->cbp( 'advancedCommentScanning' );
|
| 110 |
+
if ( ! wfConfig::get( 'isPaid' )){ ?>onclick="alert('This is a paid feature because it places significant additional load on our servers.'); jQuery('#advancedCommentScanning').attr('checked', false); return false;" <?php } ?> /> <span
|
| 111 |
+
style="color: #F00;">Premium Feature</span> In addition to free comment filtering (see below)
|
| 112 |
+
this option filters comments against several additional real-time lists of known spammers and
|
| 113 |
+
infected hosts.
|
| 114 |
+
</td>
|
| 115 |
+
</tr>
|
| 116 |
+
<tr>
|
| 117 |
+
<th class="wfConfigEnable">Check if this website is being "Spamvertised"<a
|
| 118 |
+
href="http://docs.wordfence.com/en/Wordfence_options#Check_if_this_website_is_being_.22Spamvertized.22"
|
| 119 |
+
target="_blank" class="wfhelp"></a></th>
|
| 120 |
+
<td><input type="checkbox" id="spamvertizeCheck" class="wfConfigElem" name="spamvertizeCheck" value="1"
|
| 121 |
+
<?php $w->cbp( 'spamvertizeCheck' );
|
| 122 |
+
if ( ! wfConfig::get( 'isPaid' )){ ?>onclick="alert('This is a paid feature because it places significant additional load on our servers.'); jQuery('#spamvertizeCheck').attr('checked', false); return false;" <?php } ?> /> <span
|
| 123 |
+
style="color: #F00;">Premium Feature</span> When doing a scan, Wordfence will check with spam
|
| 124 |
+
services if your site domain name is appearing as a link in spam emails.
|
| 125 |
+
</td>
|
| 126 |
+
</tr>
|
| 127 |
+
<tr>
|
| 128 |
+
<th class="wfConfigEnable">Check if this website IP is generating spam<a
|
| 129 |
+
href="http://docs.wordfence.com/en/Wordfence_options#Check_if_this_website_IP_is_generating_spam"
|
| 130 |
+
target="_blank" class="wfhelp"></a></th>
|
| 131 |
+
<td><input type="checkbox" id="checkSpamIP" class="wfConfigElem" name="checkSpamIP" value="1"
|
| 132 |
+
<?php $w->cbp( 'checkSpamIP' );
|
| 133 |
+
if ( ! wfConfig::get( 'isPaid' )){ ?>onclick="alert('This is a paid feature because it places significant additional load on our servers.'); jQuery('#checkSpamIP').attr('checked', false); return false;" <?php } ?> /> <span
|
| 134 |
+
style="color: #F00;">Premium Feature</span> When doing a scan, Wordfence will check with spam
|
| 135 |
+
services if your website IP address is listed as a known source of spam email.
|
| 136 |
+
</td>
|
| 137 |
+
</tr>
|
| 138 |
+
<tr>
|
| 139 |
+
<td colspan="2"> </td>
|
| 140 |
+
</tr>
|
| 141 |
+
<?php /* <tr><th class="wfConfigEnable">Enable Performance Monitoring</th><td><input type="checkbox" id="perfLoggingEnabled" class="wfConfigElem" name="perfLoggingEnabled" value="1" <?php $w->cb('perfLoggingEnabled'); ?> onclick="WFAD.reloadConfigPage = true; return true;" /> This option enables performance monitoring.</td></tr> */ ?>
|
| 142 |
+
<tr>
|
| 143 |
+
<td colspan="2"> </td>
|
| 144 |
+
</tr>
|
| 145 |
+
<tr>
|
| 146 |
+
<th class="wfConfigEnable">Enable automatic scheduled scans<a
|
| 147 |
+
href="http://docs.wordfence.com/en/Wordfence_options#Enable_automatic_scheduled_scans"
|
| 148 |
+
target="_blank" class="wfhelp"></a></th>
|
| 149 |
+
<td><input type="checkbox" id="scheduledScansEnabled" class="wfConfigElem" name="scheduledScansEnabled"
|
| 150 |
+
value="1" <?php $w->cb( 'scheduledScansEnabled' ); ?> /> Regular scans ensure your site
|
| 151 |
+
stays secure.
|
| 152 |
+
</td>
|
| 153 |
+
</tr>
|
| 154 |
+
<tr>
|
| 155 |
+
<td colspan="2"> </td>
|
| 156 |
+
</tr>
|
| 157 |
+
<tr>
|
| 158 |
+
<th class="wfConfigEnable">Update Wordfence automatically when a new version is released?<a
|
| 159 |
+
href="http://docs.wordfence.com/en/Wordfence_options#Update_Wordfence_Automatically_when_a_new_version_is_released"
|
| 160 |
+
target="_blank" class="wfhelp"></a></th>
|
| 161 |
+
<td><input type="checkbox" id="autoUpdate" class="wfConfigElem" name="autoUpdate"
|
| 162 |
+
value="1" <?php $w->cb( 'autoUpdate' ); ?> /> Automatically updates Wordfence to the
|
| 163 |
+
newest version within 24 hours of a new release.<br/>
|
| 164 |
+
<?php if (getenv( 'noabort' ) != '1' && stristr( $_SERVER['SERVER_SOFTWARE'], 'litespeed' ) !== false){ ?>
|
| 165 |
+
<span style="color: #F00;">Warning: </span>You are running LiteSpeed web server and you don't have
|
| 166 |
+
the "noabort" variable set in your .htaccess.<br/>
|
| 167 |
+
<a href="https://support.wordfence.com/solution/articles/1000129050-running-wordfence-under-litespeed-web-server-and-preventing-process-killing-or"
|
| 168 |
+
target="_blank">Please read this article in our FAQ to make an important change that will ensure
|
| 169 |
+
your site stability during an update.<br/>
|
| 170 |
+
<?php } ?>
|
| 171 |
+
</td>
|
| 172 |
+
</tr>
|
| 173 |
+
<tr>
|
| 174 |
+
<td colspan="2"> </td>
|
| 175 |
+
</tr>
|
| 176 |
+
|
| 177 |
+
<tr>
|
| 178 |
+
<th>Where to email alerts:<a href="http://docs.wordfence.com/en/Wordfence_options#Where_to_email_alerts"
|
| 179 |
+
target="_blank" class="wfhelp"></a></th>
|
| 180 |
+
<td><input type="text" id="alertEmails" name="alertEmails" value="<?php $w->f( 'alertEmails' ); ?>"
|
| 181 |
+
size="50"/> <span class="wfTipText">Separate multiple emails with commas</span></td>
|
| 182 |
+
</tr>
|
| 183 |
+
<tr>
|
| 184 |
+
<th colspan="2"> </th>
|
| 185 |
+
</tr>
|
| 186 |
+
<tr>
|
| 187 |
+
<th>Security Level:<a href="http://docs.wordfence.com/en/Wordfence_options#Security_Level"
|
| 188 |
+
target="_blank" class="wfhelp"></a></th>
|
| 189 |
+
<td>
|
| 190 |
+
<select id="securityLevel" name="securityLevel" onchange="WFAD.changeSecurityLevel(); return true;">
|
| 191 |
+
<option value="0"<?php $w->sel( 'securityLevel', '0' ); ?>>Level 0: Disable all Wordfence
|
| 192 |
+
security measures
|
| 193 |
+
</option>
|
| 194 |
+
<option value="1"<?php $w->sel( 'securityLevel', '1' ); ?>>Level 1: Light protection. Just the
|
| 195 |
+
basics
|
| 196 |
+
</option>
|
| 197 |
+
<option value="2"<?php $w->sel( 'securityLevel', '2' ); ?>>Level 2: Medium protection. Suitable
|
| 198 |
+
for most sites
|
| 199 |
+
</option>
|
| 200 |
+
<option value="3"<?php $w->sel( 'securityLevel', '3' ); ?>>Level 3: High security. Use this when
|
| 201 |
+
an attack is imminent
|
| 202 |
+
</option>
|
| 203 |
+
<option value="4"<?php $w->sel( 'securityLevel', '4' ); ?>>Level 4: Lockdown. Protect the site
|
| 204 |
+
against an attack in progress at the cost of inconveniencing some users
|
| 205 |
+
</option>
|
| 206 |
+
<option value="CUSTOM"<?php $w->sel( 'securityLevel', 'CUSTOM' ); ?>>Custom settings</option>
|
| 207 |
+
</select>
|
| 208 |
+
</td>
|
| 209 |
+
</tr>
|
| 210 |
+
<tr>
|
| 211 |
+
<th>How does Wordfence get IPs:<a
|
| 212 |
+
href="http://docs.wordfence.com/en/Wordfence_options#How_does_Wordfence_get_IPs" target="_blank"
|
| 213 |
+
class="wfhelp"></a></th>
|
| 214 |
+
<td>
|
| 215 |
+
<select id="howGetIPs" name="howGetIPs">
|
| 216 |
+
<option value="">Let Wordfence use the most secure method to get visitor IP addresses. Prevents
|
| 217 |
+
spoofing and works with most sites.
|
| 218 |
+
</option>
|
| 219 |
+
<option value="REMOTE_ADDR"<?php $w->sel( 'howGetIPs', 'REMOTE_ADDR' ); ?>>Use PHP's built in
|
| 220 |
+
REMOTE_ADDR and don't use anything else. Very secure if this is compatible with your site.
|
| 221 |
+
</option>
|
| 222 |
+
<option value="HTTP_X_FORWARDED_FOR"<?php $w->sel( 'howGetIPs', 'HTTP_X_FORWARDED_FOR' ); ?>>Use
|
| 223 |
+
the X-Forwarded-For HTTP header. Only use if you have a front-end proxy or spoofing may
|
| 224 |
+
result.
|
| 225 |
+
</option>
|
| 226 |
+
<option value="HTTP_X_REAL_IP"<?php $w->sel( 'howGetIPs', 'HTTP_X_REAL_IP' ); ?>>Use the
|
| 227 |
+
X-Real-IP HTTP header. Only use if you have a front-end proxy or spoofing may result.
|
| 228 |
+
</option>
|
| 229 |
+
<option value="HTTP_CF_CONNECTING_IP"<?php $w->sel( 'howGetIPs', 'HTTP_CF_CONNECTING_IP' ); ?>>
|
| 230 |
+
Use the Cloudflare "CF-Connecting-IP" HTTP header to get a visitor IP. Only use if you're
|
| 231 |
+
using Cloudflare.
|
| 232 |
+
</option>
|
| 233 |
+
</select>
|
| 234 |
+
</td>
|
| 235 |
+
</tr>
|
| 236 |
+
</table>
|
| 237 |
+
<p>
|
| 238 |
+
<table border="0" cellpadding="0" cellspacing="0">
|
| 239 |
+
<tr>
|
| 240 |
+
<td><input type="button" id="button1" name="button1" class="button-primary" value="Save Changes"
|
| 241 |
+
onclick="WFAD.saveConfig();"/></td>
|
| 242 |
+
<td style="height: 24px;">
|
| 243 |
+
<div class="wfAjax24"></div>
|
| 244 |
+
<span class="wfSavedMsg"> Your changes have been saved!</span></td>
|
| 245 |
+
</tr>
|
| 246 |
+
</table>
|
| 247 |
</p>
|
| 248 |
+
<div class="wfMarker" id="wfMarkerBasicOptions"></div>
|
| 249 |
+
<div style="margin-top: 25px;">
|
| 250 |
+
<h2>Advanced Options:<a href="http://docs.wordfence.com/en/Wordfence_options#Advanced_Options"
|
| 251 |
+
target="_blank" class="wfhelp"></a></h2>
|
| 252 |
+
|
| 253 |
+
<p style="width: 600px;">
|
| 254 |
+
Wordfence works great out of the box for most websites. Simply install Wordfence and your site and
|
| 255 |
+
content is protected. For finer granularity of control, we have provided advanced options.
|
| 256 |
+
</p>
|
| 257 |
+
</div>
|
| 258 |
+
<div id="wfConfigAdvanced">
|
| 259 |
+
<table class="wfConfigForm">
|
| 260 |
+
<tr>
|
| 261 |
+
<td colspan="2"><h3 class="wfConfigHeading">Alerts<a
|
| 262 |
+
href="http://docs.wordfence.com/en/Wordfence_options#Alerts" target="_blank"
|
| 263 |
+
class="wfhelp"></a></h3></td>
|
| 264 |
+
</tr>
|
| 265 |
+
<?php
|
| 266 |
+
$emails = wfConfig::getAlertEmails();
|
| 267 |
+
if ( sizeof( $emails ) < 1 ) {
|
| 268 |
+
echo "<tr><th colspan=\"2\" style=\"color: #F00;\">You have not configured an email to receive alerts yet. Set this up under \"Basic Options\" above.</th></tr>\n";
|
| 269 |
+
}
|
| 270 |
+
?>
|
| 271 |
+
<tr>
|
| 272 |
+
<th>Email me when Wordfence is automatically updated</th>
|
| 273 |
+
<td><input type="checkbox" id="alertOn_update" class="wfConfigElem" name="alertOn_update"
|
| 274 |
+
value="1" <?php $w->cb( 'alertOn_update' ); ?>/> If you have automatic updates
|
| 275 |
+
enabled (see above), you'll get an email when an update occurs.
|
| 276 |
+
</td>
|
| 277 |
+
</tr>
|
| 278 |
+
<tr>
|
| 279 |
+
<th>Alert on critical problems</th>
|
| 280 |
+
<td><input type="checkbox" id="alertOn_critical" class="wfConfigElem" name="alertOn_critical"
|
| 281 |
+
value="1" <?php $w->cb( 'alertOn_critical' ); ?>/></td>
|
| 282 |
+
</tr>
|
| 283 |
+
<tr>
|
| 284 |
+
<th>Alert on warnings</th>
|
| 285 |
+
<td><input type="checkbox" id="alertOn_warnings" class="wfConfigElem" name="alertOn_warnings"
|
| 286 |
+
value="1" <?php $w->cb( 'alertOn_warnings' ); ?>/></td>
|
| 287 |
+
</tr>
|
| 288 |
+
<tr>
|
| 289 |
+
<th>Alert when an IP address is blocked</th>
|
| 290 |
+
<td><input type="checkbox" id="alertOn_block" class="wfConfigElem" name="alertOn_block"
|
| 291 |
+
value="1" <?php $w->cb( 'alertOn_block' ); ?>/></td>
|
| 292 |
+
</tr>
|
| 293 |
+
<tr>
|
| 294 |
+
<th>Alert when someone is locked out from login</th>
|
| 295 |
+
<td><input type="checkbox" id="alertOn_loginLockout" class="wfConfigElem"
|
| 296 |
+
name="alertOn_loginLockout" value="1" <?php $w->cb( 'alertOn_loginLockout' ); ?>/></td>
|
| 297 |
+
</tr>
|
| 298 |
+
<tr>
|
| 299 |
+
<th>Alert when the "lost password" form is used for a valid user</th>
|
| 300 |
+
<td><input type="checkbox" id="alertOn_lostPasswdForm" class="wfConfigElem"
|
| 301 |
+
name="alertOn_lostPasswdForm" value="1" <?php $w->cb( 'alertOn_lostPasswdForm' ); ?>/>
|
| 302 |
+
</td>
|
| 303 |
+
</tr>
|
| 304 |
+
<tr>
|
| 305 |
+
<th>Alert me when someone with administrator access signs in</th>
|
| 306 |
+
<td><input type="checkbox" id="alertOn_adminLogin" class="wfConfigElem" name="alertOn_adminLogin"
|
| 307 |
+
value="1" <?php $w->cb( 'alertOn_adminLogin' ); ?>/></td>
|
| 308 |
+
</tr>
|
| 309 |
+
<tr>
|
| 310 |
+
<th>Alert me when a non-admin user signs in</th>
|
| 311 |
+
<td><input type="checkbox" id="alertOn_nonAdminLogin" class="wfConfigElem"
|
| 312 |
+
name="alertOn_nonAdminLogin" value="1" <?php $w->cb( 'alertOn_nonAdminLogin' ); ?>/></td>
|
| 313 |
+
</tr>
|
| 314 |
+
<tr>
|
| 315 |
+
<th>Maximum email alerts to send per hour</th>
|
| 316 |
+
<td> <input type="text" id="alert_maxHourly" name="alert_maxHourly"
|
| 317 |
+
value="<?php $w->f( 'alert_maxHourly' ); ?>" size="4"/>0 or empty means unlimited
|
| 318 |
+
alerts will be sent.
|
| 319 |
+
</td>
|
| 320 |
+
</tr>
|
| 321 |
+
<tr>
|
| 322 |
+
<td colspan="2">
|
| 323 |
+
<div class="wfMarker" id="wfMarkerLiveTrafficOptions"></div>
|
| 324 |
+
<h3 class="wfConfigHeading">Live Traffic View<a
|
| 325 |
+
href="http://docs.wordfence.com/en/Wordfence_options#Live_Traffic_View" target="_blank"
|
| 326 |
+
class="wfhelp"></a></h3>
|
| 327 |
+
</td>
|
| 328 |
+
</tr>
|
| 329 |
+
<tr>
|
| 330 |
+
<th>Don't log signed-in users with publishing access:</th>
|
| 331 |
+
<td><input type="checkbox" id="liveTraf_ignorePublishers" name="liveTraf_ignorePublishers"
|
| 332 |
+
value="1" <?php $w->cb( 'liveTraf_ignorePublishers' ); ?> /></td>
|
| 333 |
+
</tr>
|
| 334 |
+
<tr>
|
| 335 |
+
<th>List of comma separated usernames to ignore:</th>
|
| 336 |
+
<td><input type="text" name="liveTraf_ignoreUsers" id="liveTraf_ignoreUsers"
|
| 337 |
+
value="<?php echo $w->getHTML( 'liveTraf_ignoreUsers' ); ?>"/></td>
|
| 338 |
+
</tr>
|
| 339 |
+
<tr>
|
| 340 |
+
<th>List of comma separated IP addresses to ignore:</th>
|
| 341 |
+
<td><input type="text" name="liveTraf_ignoreIPs" id="liveTraf_ignoreIPs"
|
| 342 |
+
value="<?php echo $w->getHTML( 'liveTraf_ignoreIPs' ); ?>"/></td>
|
| 343 |
+
</tr>
|
| 344 |
+
<tr>
|
| 345 |
+
<th>Browser user-agent to ignore:</th>
|
| 346 |
+
<td><input type="text" name="liveTraf_ignoreUA" id="liveTraf_ignoreUA"
|
| 347 |
+
value="<?php echo $w->getHTML( 'liveTraf_ignoreUA' ); ?>"/></td>
|
| 348 |
+
</tr>
|
| 349 |
+
<tr>
|
| 350 |
+
<td colspan="2">
|
| 351 |
+
<div class="wfMarker" id="wfMarkerScansToInclude"></div>
|
| 352 |
+
<h3 class="wfConfigHeading">Scans to include<a
|
| 353 |
+
href="http://docs.wordfence.com/en/Wordfence_options#Scans_to_Include" target="_blank"
|
| 354 |
+
class="wfhelp"></a></h3></td>
|
| 355 |
+
</tr>
|
| 356 |
+
<?php if ( wfConfig::get( 'isPaid' ) ) { ?>
|
| 357 |
+
<tr>
|
| 358 |
+
<th>Scan public facing site for vulnerabilities?<a
|
| 359 |
+
href="http://docs.wordfence.com/en/Wordfence_options#Scan_public_facing_site"
|
| 360 |
+
target="_blank" class="wfhelp"></a></th>
|
| 361 |
+
<td><input type="checkbox" id="scansEnabled_public" class="wfConfigElem"
|
| 362 |
+
name="scansEnabled_public" value="1" <?php $w->cb( 'scansEnabled_public' ); ?></td>
|
| 363 |
+
</tr>
|
| 364 |
+
<?php } else { ?>
|
| 365 |
+
<tr>
|
| 366 |
+
<th style="color: #F00;">Scan public facing site for vulnerabilities?<a
|
| 367 |
+
href="http://docs.wordfence.com/en/Wordfence_options#Scan_public_facing_site"
|
| 368 |
+
target="_blank" class="wfhelp"></a>(<a
|
| 369 |
+
href="https://www.wordfence.com/wordfence-signup/" target="_blank">Paid members only</a>)
|
| 370 |
+
</th>
|
| 371 |
+
<td><input type="checkbox" id="scansEnabled_public" class="wfConfigElem"
|
| 372 |
+
name="scansEnabled_public" value="1" DISABLED /></td>
|
| 373 |
+
</tr>
|
| 374 |
+
<?php } ?>
|
| 375 |
+
<tr>
|
| 376 |
+
<th>Scan for the HeartBleed vulnerability?<a
|
| 377 |
+
href="http://docs.wordfence.com/en/Wordfence_options#Scan_for_the_HeartBleed_vulnerability"
|
| 378 |
+
target="_blank" class="wfhelp"></a></th>
|
| 379 |
+
<td><input type="checkbox" id="scansEnabled_heartbleed" class="wfConfigElem"
|
| 380 |
+
name="scansEnabled_heartbleed" value="1" <?php $w->cb( 'scansEnabled_heartbleed' ); ?>
|
| 381 |
+
</td>
|
| 382 |
+
</tr>
|
| 383 |
+
<tr>
|
| 384 |
+
<th>Scan core files against repository versions for changes<a
|
| 385 |
+
href="http://docs.wordfence.com/en/Wordfence_options#Scan_core_files_against_repository_version_for_changes"
|
| 386 |
+
target="_blank" class="wfhelp"></a></th>
|
| 387 |
+
<td><input type="checkbox" id="scansEnabled_core" class="wfConfigElem" name="scansEnabled_core"
|
| 388 |
+
value="1" <?php $w->cb( 'scansEnabled_core' ); ?>/></td>
|
| 389 |
+
</tr>
|
| 390 |
+
|
| 391 |
+
<tr>
|
| 392 |
+
<th>Scan theme files against repository versions for changes<a
|
| 393 |
+
href="http://docs.wordfence.com/en/Wordfence_options#Scan_theme_files_against_repository_versions_for_changes"
|
| 394 |
+
target="_blank" class="wfhelp"></a></th>
|
| 395 |
+
<td><input type="checkbox" id="scansEnabled_themes" class="wfConfigElem" name="scansEnabled_themes"
|
| 396 |
+
value="1" <?php $w->cb( 'scansEnabled_themes' ); ?>/></td>
|
| 397 |
+
</tr>
|
| 398 |
+
<tr>
|
| 399 |
+
<th>Scan plugin files against repository versions for changes<a
|
| 400 |
+
href="http://docs.wordfence.com/en/Wordfence_options#Scan_plugin_files_against_repository_versions_for_changes"
|
| 401 |
+
target="_blank" class="wfhelp"></a></th>
|
| 402 |
+
<td><input type="checkbox" id="scansEnabled_plugins" class="wfConfigElem"
|
| 403 |
+
name="scansEnabled_plugins" value="1" <?php $w->cb( 'scansEnabled_plugins' ); ?>/></td>
|
| 404 |
+
</tr>
|
| 405 |
+
<tr>
|
| 406 |
+
<th>Scan for signatures of known malicious files<a
|
| 407 |
+
href="http://docs.wordfence.com/en/Wordfence_options#Scan_for_signatures_of_known_malicious_files"
|
| 408 |
+
target="_blank" class="wfhelp"></a></th>
|
| 409 |
+
<td><input type="checkbox" id="scansEnabled_malware" class="wfConfigElem"
|
| 410 |
+
name="scansEnabled_malware" value="1" <?php $w->cb( 'scansEnabled_malware' ); ?>/></td>
|
| 411 |
+
</tr>
|
| 412 |
+
<tr>
|
| 413 |
+
<th>Scan file contents for backdoors, trojans and suspicious code<a
|
| 414 |
+
href="http://docs.wordfence.com/en/Wordfence_options#Scan_file_contents_for_backdoors.2C_trojans_and_suspicious_code"
|
| 415 |
+
target="_blank" class="wfhelp"></a></th>
|
| 416 |
+
<td><input type="checkbox" id="scansEnabled_fileContents" class="wfConfigElem"
|
| 417 |
+
name="scansEnabled_fileContents"
|
| 418 |
+
value="1" <?php $w->cb( 'scansEnabled_fileContents' ); ?>/></td>
|
| 419 |
+
</tr>
|
| 420 |
+
<tr>
|
| 421 |
+
<th>Scan posts for known dangerous URLs and suspicious content<a
|
| 422 |
+
href="http://docs.wordfence.com/en/Wordfence_options#Scan_posts_for_known_dangerous_URLs_and_suspicious_content"
|
| 423 |
+
target="_blank" class="wfhelp"></a></th>
|
| 424 |
+
<td><input type="checkbox" id="scansEnabled_posts" class="wfConfigElem" name="scansEnabled_posts"
|
| 425 |
+
value="1" <?php $w->cb( 'scansEnabled_posts' ); ?>/></td>
|
| 426 |
+
</tr>
|
| 427 |
+
<tr>
|
| 428 |
+
<th>Scan comments for known dangerous URLs and suspicious content<a
|
| 429 |
+
href="http://docs.wordfence.com/en/Wordfence_options#Scan_comments_for_known_dangerous_URLs_and_suspicious_content"
|
| 430 |
+
target="_blank" class="wfhelp"></a></th>
|
| 431 |
+
<td><input type="checkbox" id="scansEnabled_comments" class="wfConfigElem"
|
| 432 |
+
name="scansEnabled_comments" value="1" <?php $w->cb( 'scansEnabled_comments' ); ?>/></td>
|
| 433 |
+
</tr>
|
| 434 |
+
<tr>
|
| 435 |
+
<th>Scan for out of date plugins, themes and WordPress versions<a
|
| 436 |
+
href="http://docs.wordfence.com/en/Wordfence_options#Scan_for_out_of_date_plugins.2C_themes_and_WordPress_versions"
|
| 437 |
+
target="_blank" class="wfhelp"></a></th>
|
| 438 |
+
<td><input type="checkbox" id="scansEnabled_oldVersions" class="wfConfigElem"
|
| 439 |
+
name="scansEnabled_oldVersions"
|
| 440 |
+
value="1" <?php $w->cb( 'scansEnabled_oldVersions' ); ?>/></td>
|
| 441 |
+
</tr>
|
| 442 |
+
<tr>
|
| 443 |
+
<th>Check the strength of passwords<a
|
| 444 |
+
href="http://docs.wordfence.com/en/Wordfence_options#Check_the_strength_of_passwords"
|
| 445 |
+
target="_blank" class="wfhelp"></a></th>
|
| 446 |
+
<td><input type="checkbox" id="scansEnabled_passwds" class="wfConfigElem"
|
| 447 |
+
name="scansEnabled_passwds" value="1" <?php $w->cb( 'scansEnabled_passwds' ); ?>/></td>
|
| 448 |
+
</tr>
|
| 449 |
+
<tr>
|
| 450 |
+
<th>Scan options table<a href="http://docs.wordfence.com/en/Wordfence_options#Scan_options_table"
|
| 451 |
+
target="_blank" class="wfhelp"></a></th>
|
| 452 |
+
<td><input type="checkbox" id="scansEnabled_options" class="wfConfigElem"
|
| 453 |
+
name="scansEnabled_options" value="1" <?php $w->cb( 'scansEnabled_options' ); ?>/></td>
|
| 454 |
+
</tr>
|
| 455 |
+
<tr>
|
| 456 |
+
<th>Monitor disk space<a href="http://docs.wordfence.com/en/Wordfence_options#Monitor_disk_space"
|
| 457 |
+
target="_blank" class="wfhelp"></a></th>
|
| 458 |
+
<td><input type="checkbox" id="scansEnabled_diskSpace" class="wfConfigElem"
|
| 459 |
+
name="scansEnabled_diskSpace" value="1" <?php $w->cb( 'scansEnabled_diskSpace' ); ?>/>
|
| 460 |
+
</td>
|
| 461 |
+
</tr>
|
| 462 |
+
<tr>
|
| 463 |
+
<th>Scan for unauthorized DNS changes<a
|
| 464 |
+
href="http://docs.wordfence.com/en/Wordfence_options#Scan_for_unauthorized_DNS_changes"
|
| 465 |
+
target="_blank" class="wfhelp"></a></th>
|
| 466 |
+
<td><input type="checkbox" id="scansEnabled_dns" class="wfConfigElem" name="scansEnabled_dns"
|
| 467 |
+
value="1" <?php $w->cb( 'scansEnabled_dns' ); ?>/></td>
|
| 468 |
+
</tr>
|
| 469 |
+
<tr>
|
| 470 |
+
<th>Scan files outside your WordPress installation<a
|
| 471 |
+
href="http://docs.wordfence.com/en/Wordfence_options#Scan_files_outside_your_WordPress_installation"
|
| 472 |
+
target="_blank" class="wfhelp"></a></th>
|
| 473 |
+
<td><input type="checkbox" id="other_scanOutside" class="wfConfigElem" name="other_scanOutside"
|
| 474 |
+
value="1" <?php $w->cb( 'other_scanOutside' ); ?> /></td>
|
| 475 |
+
</tr>
|
| 476 |
+
<tr>
|
| 477 |
+
<th>Scan image files as if they were executable<a
|
| 478 |
+
href="http://docs.wordfence.com/en/Wordfence_options#Scan_image_files_as_if_they_were_executable"
|
| 479 |
+
target="_blank" class="wfhelp"></a></th>
|
| 480 |
+
<td><input type="checkbox" id="scansEnabled_scanImages" class="wfConfigElem"
|
| 481 |
+
name="scansEnabled_scanImages" value="1" <?php $w->cb( 'scansEnabled_scanImages' ); ?> />
|
| 482 |
+
</td>
|
| 483 |
+
</tr>
|
| 484 |
+
<tr>
|
| 485 |
+
<th>Enable HIGH SENSITIVITY scanning. May give false positives.<a
|
| 486 |
+
href="http://docs.wordfence.com/en/Wordfence_options#Enable_HIGH_SENSITIVITY_scanning"
|
| 487 |
+
target="_blank" class="wfhelp"></a></th>
|
| 488 |
+
<td><input type="checkbox" id="scansEnabled_highSense" class="wfConfigElem"
|
| 489 |
+
name="scansEnabled_highSense" value="1" <?php $w->cb( 'scansEnabled_highSense' ); ?> />
|
| 490 |
+
</td>
|
| 491 |
+
</tr>
|
| 492 |
+
<tr>
|
| 493 |
+
<th>Exclude files from scan that match these wildcard patterns. Comma separated.<a
|
| 494 |
+
href="http://docs.wordfence.com/en/Wordfence_options#Exclude_files_from_scan_that_match_these_wildcard_patterns."
|
| 495 |
+
target="_blank" class="wfhelp"></a></th>
|
| 496 |
+
<td><input type="text" id="scan_exclude" class="wfConfigElem" name="scan_exclude" size="20"
|
| 497 |
+
value="<?php echo $w->getHTML( 'scan_exclude' ); ?>"/>e.g. *.sql,*.tar,backup*.zip
|
| 498 |
+
</td>
|
| 499 |
+
</tr>
|
| 500 |
+
<tr>
|
| 501 |
+
<td colspan="2">
|
| 502 |
+
<div class="wfMarker" id="wfMarkerFirewallRules"></div>
|
| 503 |
+
<h3 class="wfConfigHeading">Firewall Rules<a
|
| 504 |
+
href="http://docs.wordfence.com/en/Wordfence_options#Firewall_Rules" target="_blank"
|
| 505 |
+
class="wfhelp"></a></h3>
|
| 506 |
+
</td>
|
| 507 |
+
</tr>
|
| 508 |
+
<tr>
|
| 509 |
+
<th>Immediately block fake Google crawlers:<a
|
| 510 |
+
href="http://docs.wordfence.com/en/Wordfence_options#Immediately_block_fake_Google_crawlers:"
|
| 511 |
+
target="_blank" class="wfhelp"></a></th>
|
| 512 |
+
<td><input type="checkbox" id="blockFakeBots" class="wfConfigElem" name="blockFakeBots"
|
| 513 |
+
value="1" <?php $w->cb( 'blockFakeBots' ); ?>/></td>
|
| 514 |
+
</tr>
|
| 515 |
+
<tr>
|
| 516 |
+
<th>How should we treat Google's crawlers<a
|
| 517 |
+
href="http://docs.wordfence.com/en/Wordfence_options#How_should_we_treat_Google.27s_crawlers"
|
| 518 |
+
target="_blank" class="wfhelp"></a></th>
|
| 519 |
+
<td>
|
| 520 |
+
<select id="neverBlockBG" class="wfConfigElem" name="neverBlockBG">
|
| 521 |
+
<option value="neverBlockVerified"<?php $w->sel( 'neverBlockBG', 'neverBlockVerified' ); ?>>
|
| 522 |
+
Verified Google crawlers have unlimited access to this site
|
| 523 |
+
</option>
|
| 524 |
+
<option value="neverBlockUA"<?php $w->sel( 'neverBlockBG', 'neverBlockUA' ); ?>>Anyone
|
| 525 |
+
claiming to be Google has unlimited access
|
| 526 |
+
</option>
|
| 527 |
+
<option
|
| 528 |
+
value="treatAsOtherCrawlers"<?php $w->sel( 'neverBlockBG', 'treatAsOtherCrawlers' ); ?>>
|
| 529 |
+
Treat Google like any other Crawler
|
| 530 |
+
</option>
|
| 531 |
+
</select></td>
|
| 532 |
+
</tr>
|
| 533 |
+
<tr>
|
| 534 |
+
<th>If anyone's requests exceed:<a
|
| 535 |
+
href="http://docs.wordfence.com/en/Wordfence_options#If_anyone.27s_requests_exceed:"
|
| 536 |
+
target="_blank" class="wfhelp"></a></th>
|
| 537 |
+
<td><?php $rateName = 'maxGlobalRequests';
|
| 538 |
+
require( 'wfRate.php' ); ?> then <?php $throtName = 'maxGlobalRequests_action';
|
| 539 |
+
require( 'wfAction.php' ); ?></td>
|
| 540 |
+
</tr>
|
| 541 |
+
<tr>
|
| 542 |
+
<th>If a crawler's page views exceed:<a
|
| 543 |
+
href="http://docs.wordfence.com/en/Wordfence_options#If_a_crawler.27s_page_views_exceed"
|
| 544 |
+
target="_blank" class="wfhelp"></a></th>
|
| 545 |
+
<td><?php $rateName = 'maxRequestsCrawlers';
|
| 546 |
+
require( 'wfRate.php' ); ?> then <?php $throtName = 'maxRequestsCrawlers_action';
|
| 547 |
+
require( 'wfAction.php' ); ?></td>
|
| 548 |
+
</tr>
|
| 549 |
+
<tr>
|
| 550 |
+
<th>If a crawler's pages not found (404s) exceed:<a
|
| 551 |
+
href="http://docs.wordfence.com/en/Wordfence_options#If_a_crawler.27s_pages_not_found_.28404s.29_exceed"
|
| 552 |
+
target="_blank" class="wfhelp"></a></th>
|
| 553 |
+
<td><?php $rateName = 'max404Crawlers';
|
| 554 |
+
require( 'wfRate.php' ); ?> then <?php $throtName = 'max404Crawlers_action';
|
| 555 |
+
require( 'wfAction.php' ); ?></td>
|
| 556 |
+
</tr>
|
| 557 |
+
<tr>
|
| 558 |
+
<th>If a human's page views exceed:<a
|
| 559 |
+
href="http://docs.wordfence.com/en/Wordfence_options#If_a_human.27s_page_views_exceed"
|
| 560 |
+
target="_blank" class="wfhelp"></a></th>
|
| 561 |
+
<td><?php $rateName = 'maxRequestsHumans';
|
| 562 |
+
require( 'wfRate.php' ); ?> then <?php $throtName = 'maxRequestsHumans_action';
|
| 563 |
+
require( 'wfAction.php' ); ?></td>
|
| 564 |
+
</tr>
|
| 565 |
+
<tr>
|
| 566 |
+
<th>If a human's pages not found (404s) exceed:<a
|
| 567 |
+
href="http://docs.wordfence.com/en/Wordfence_options#If_a_human.27s_pages_not_found_.28404s.29_exceed"
|
| 568 |
+
target="_blank" class="wfhelp"></a></th>
|
| 569 |
+
<td><?php $rateName = 'max404Humans';
|
| 570 |
+
require( 'wfRate.php' ); ?> then <?php $throtName = 'max404Humans_action';
|
| 571 |
+
require( 'wfAction.php' ); ?></td>
|
| 572 |
+
</tr>
|
| 573 |
+
<tr>
|
| 574 |
+
<th>If 404's for known vulnerable URL's exceed:<a
|
| 575 |
+
href="http://docs.wordfence.com/en/Wordfence_options#If_404.27s_for_known_vulnerable_URL.27s_exceed"
|
| 576 |
+
target="_blank" class="wfhelp"></a></th>
|
| 577 |
+
<td><?php $rateName = 'maxScanHits';
|
| 578 |
+
require( 'wfRate.php' ); ?> then <?php $throtName = 'maxScanHits_action';
|
| 579 |
+
require( 'wfAction.php' ); ?></td>
|
| 580 |
+
</tr>
|
| 581 |
+
<tr>
|
| 582 |
+
<th>How long is an IP address blocked when it breaks a rule:<a
|
| 583 |
+
href="http://docs.wordfence.com/en/Wordfence_options#How_long_is_an_IP_address_blocked_when_it_breaks_a_rule"
|
| 584 |
+
target="_blank" class="wfhelp"></a></th>
|
| 585 |
+
<td>
|
| 586 |
+
<select id="blockedTime" class="wfConfigElem" name="blockedTime">
|
| 587 |
+
<option value="60"<?php $w->sel( 'blockedTime', '60' ); ?>>1 minute</option>
|
| 588 |
+
<option value="300"<?php $w->sel( 'blockedTime', '300' ); ?>>5 minutes</option>
|
| 589 |
+
<option value="1800"<?php $w->sel( 'blockedTime', '1800' ); ?>>30 minutes</option>
|
| 590 |
+
<option value="3600"<?php $w->sel( 'blockedTime', '3600' ); ?>>1 hour</option>
|
| 591 |
+
<option value="7200"<?php $w->sel( 'blockedTime', '7200' ); ?>>2 hours</option>
|
| 592 |
+
<option value="21600"<?php $w->sel( 'blockedTime', '21600' ); ?>>6 hours</option>
|
| 593 |
+
<option value="43200"<?php $w->sel( 'blockedTime', '43200' ); ?>>12 hours</option>
|
| 594 |
+
<option value="86400"<?php $w->sel( 'blockedTime', '86400' ); ?>>1 day</option>
|
| 595 |
+
<option value="172800"<?php $w->sel( 'blockedTime', '172800' ); ?>>2 days</option>
|
| 596 |
+
<option value="432000"<?php $w->sel( 'blockedTime', '432000' ); ?>>5 days</option>
|
| 597 |
+
<option value="864000"<?php $w->sel( 'blockedTime', '864000' ); ?>>10 days</option>
|
| 598 |
+
<option value="2592000"<?php $w->sel( 'blockedTime', '2592000' ); ?>>1 month</option>
|
| 599 |
+
</select></td>
|
| 600 |
+
</tr>
|
| 601 |
+
|
| 602 |
+
<tr>
|
| 603 |
+
<td colspan="2">
|
| 604 |
+
<div class="wfMarker" id="wfMarkerLoginSecurity"></div>
|
| 605 |
+
<h3 class="wfConfigHeading">Login Security Options<a
|
| 606 |
+
href="http://docs.wordfence.com/en/Wordfence_options#Login_Security_Options"
|
| 607 |
+
target="_blank" class="wfhelp"></a></h3>
|
| 608 |
+
</td>
|
| 609 |
+
</tr>
|
| 610 |
+
<tr>
|
| 611 |
+
<th>Enforce strong passwords?<a
|
| 612 |
+
href="http://docs.wordfence.com/en/Wordfence_options#Enforce_strong_passwords.3F"
|
| 613 |
+
target="_blank" class="wfhelp"></a></th>
|
| 614 |
+
<td>
|
| 615 |
+
<select class="wfConfigElem" id="loginSec_strongPasswds" name="loginSec_strongPasswds">
|
| 616 |
+
<option value="">Do not force users to use strong passwords</option>
|
| 617 |
+
<option value="pubs"<?php $w->sel( 'loginSec_strongPasswds', 'pubs' ); ?>>Force admins and
|
| 618 |
+
publishers to use strong passwords (recommended)
|
| 619 |
+
</option>
|
| 620 |
+
<option value="all"<?php $w->sel( 'loginSec_strongPasswds', 'all' ); ?>>Force all members to
|
| 621 |
+
use strong passwords
|
| 622 |
+
</option>
|
| 623 |
+
</select>
|
| 624 |
+
<tr>
|
| 625 |
+
<th>Lock out after how many login failures<a
|
| 626 |
+
href="http://docs.wordfence.com/en/Wordfence_options#Lock_out_after_how_many_login_failures"
|
| 627 |
+
target="_blank" class="wfhelp"></a></th>
|
| 628 |
+
<td>
|
| 629 |
+
<select id="loginSec_maxFailures" class="wfConfigElem" name="loginSec_maxFailures">
|
| 630 |
+
<option value="1"<?php $w->sel( 'loginSec_maxFailures', '1' ); ?>>1</option>
|
| 631 |
+
<option value="2"<?php $w->sel( 'loginSec_maxFailures', '2' ); ?>>2</option>
|
| 632 |
+
<option value="3"<?php $w->sel( 'loginSec_maxFailures', '3' ); ?>>3</option>
|
| 633 |
+
<option value="4"<?php $w->sel( 'loginSec_maxFailures', '4' ); ?>>4</option>
|
| 634 |
+
<option value="5"<?php $w->sel( 'loginSec_maxFailures', '5' ); ?>>5</option>
|
| 635 |
+
<option value="6"<?php $w->sel( 'loginSec_maxFailures', '6' ); ?>>6</option>
|
| 636 |
+
<option value="7"<?php $w->sel( 'loginSec_maxFailures', '7' ); ?>>7</option>
|
| 637 |
+
<option value="8"<?php $w->sel( 'loginSec_maxFailures', '8' ); ?>>8</option>
|
| 638 |
+
<option value="9"<?php $w->sel( 'loginSec_maxFailures', '9' ); ?>>9</option>
|
| 639 |
+
<option value="10"<?php $w->sel( 'loginSec_maxFailures', '10' ); ?>>10</option>
|
| 640 |
+
<option value="20"<?php $w->sel( 'loginSec_maxFailures', '20' ); ?>>20</option>
|
| 641 |
+
<option value="30"<?php $w->sel( 'loginSec_maxFailures', '30' ); ?>>30</option>
|
| 642 |
+
<option value="40"<?php $w->sel( 'loginSec_maxFailures', '40' ); ?>>40</option>
|
| 643 |
+
<option value="50"<?php $w->sel( 'loginSec_maxFailures', '50' ); ?>>50</option>
|
| 644 |
+
<option value="100"<?php $w->sel( 'loginSec_maxFailures', '100' ); ?>>100</option>
|
| 645 |
+
<option value="200"<?php $w->sel( 'loginSec_maxFailures', '200' ); ?>>200</option>
|
| 646 |
+
<option value="500"<?php $w->sel( 'loginSec_maxFailures', '500' ); ?>>500</option>
|
| 647 |
+
</select>
|
| 648 |
+
</td>
|
| 649 |
+
</tr>
|
| 650 |
+
<tr>
|
| 651 |
+
<th>Lock out after how many forgot password attempts<a
|
| 652 |
+
href="http://docs.wordfence.com/en/Wordfence_options#Lock_out_after_how_many_forgot_password_attempts"
|
| 653 |
+
target="_blank" class="wfhelp"></a></th>
|
| 654 |
+
<td>
|
| 655 |
+
<select id="loginSec_maxForgotPasswd" class="wfConfigElem" name="loginSec_maxForgotPasswd">
|
| 656 |
+
<option value="1"<?php $w->sel( 'loginSec_maxForgotPasswd', '1' ); ?>>1</option>
|
| 657 |
+
<option value="2"<?php $w->sel( 'loginSec_maxForgotPasswd', '2' ); ?>>2</option>
|
| 658 |
+
<option value="3"<?php $w->sel( 'loginSec_maxForgotPasswd', '3' ); ?>>3</option>
|
| 659 |
+
<option value="4"<?php $w->sel( 'loginSec_maxForgotPasswd', '4' ); ?>>4</option>
|
| 660 |
+
<option value="5"<?php $w->sel( 'loginSec_maxForgotPasswd', '5' ); ?>>5</option>
|
| 661 |
+
<option value="6"<?php $w->sel( 'loginSec_maxForgotPasswd', '6' ); ?>>6</option>
|
| 662 |
+
<option value="7"<?php $w->sel( 'loginSec_maxForgotPasswd', '7' ); ?>>7</option>
|
| 663 |
+
<option value="8"<?php $w->sel( 'loginSec_maxForgotPasswd', '8' ); ?>>8</option>
|
| 664 |
+
<option value="9"<?php $w->sel( 'loginSec_maxForgotPasswd', '9' ); ?>>9</option>
|
| 665 |
+
<option value="10"<?php $w->sel( 'loginSec_maxForgotPasswd', '10' ); ?>>10</option>
|
| 666 |
+
<option value="20"<?php $w->sel( 'loginSec_maxForgotPasswd', '20' ); ?>>20</option>
|
| 667 |
+
<option value="30"<?php $w->sel( 'loginSec_maxForgotPasswd', '30' ); ?>>30</option>
|
| 668 |
+
<option value="40"<?php $w->sel( 'loginSec_maxForgotPasswd', '40' ); ?>>40</option>
|
| 669 |
+
<option value="50"<?php $w->sel( 'loginSec_maxForgotPasswd', '50' ); ?>>50</option>
|
| 670 |
+
<option value="100"<?php $w->sel( 'loginSec_maxForgotPasswd', '100' ); ?>>100</option>
|
| 671 |
+
<option value="200"<?php $w->sel( 'loginSec_maxForgotPasswd', '200' ); ?>>200</option>
|
| 672 |
+
<option value="500"<?php $w->sel( 'loginSec_maxForgotPasswd', '500' ); ?>>500</option>
|
| 673 |
+
</select>
|
| 674 |
+
</td>
|
| 675 |
+
</tr>
|
| 676 |
+
<tr>
|
| 677 |
+
<th>Count failures over what time period<a
|
| 678 |
+
href="http://docs.wordfence.com/en/Wordfence_options#Count_failures_over_what_time_period"
|
| 679 |
+
target="_blank" class="wfhelp"></a></th>
|
| 680 |
+
<td>
|
| 681 |
+
<select id="loginSec_countFailMins" class="wfConfigElem" name="loginSec_countFailMins">
|
| 682 |
+
<option value="5"<?php $w->sel( 'loginSec_countFailMins', '5' ); ?>>5 minutes</option>
|
| 683 |
+
<option value="10"<?php $w->sel( 'loginSec_countFailMins', '10' ); ?>>10 minutes</option>
|
| 684 |
+
<option value="30"<?php $w->sel( 'loginSec_countFailMins', '30' ); ?>>30 minutes</option>
|
| 685 |
+
<option value="60"<?php $w->sel( 'loginSec_countFailMins', '60' ); ?>>1 hour</option>
|
| 686 |
+
<option value="120"<?php $w->sel( 'loginSec_countFailMins', '120' ); ?>>2 hours</option>
|
| 687 |
+
<option value="360"<?php $w->sel( 'loginSec_countFailMins', '360' ); ?>>6 hours</option>
|
| 688 |
+
<option value="720"<?php $w->sel( 'loginSec_countFailMins', '720' ); ?>>12 hours</option>
|
| 689 |
+
<option value="1440"<?php $w->sel( 'loginSec_countFailMins', '1440' ); ?>>1 day</option>
|
| 690 |
+
</select>
|
| 691 |
+
</td>
|
| 692 |
+
</tr>
|
| 693 |
+
<tr>
|
| 694 |
+
<th>Amount of time a user is locked out<a
|
| 695 |
+
href="http://docs.wordfence.com/en/Wordfence_options#Amount_of_time_a_user_is_locked_out"
|
| 696 |
+
target="_blank" class="wfhelp"></a></th>
|
| 697 |
+
<td>
|
| 698 |
+
<select id="loginSec_lockoutMins" class="wfConfigElem" name="loginSec_lockoutMins">
|
| 699 |
+
<option value="5"<?php $w->sel( 'loginSec_lockoutMins', '5' ); ?>>5 minutes</option>
|
| 700 |
+
<option value="10"<?php $w->sel( 'loginSec_lockoutMins', '10' ); ?>>10 minutes</option>
|
| 701 |
+
<option value="30"<?php $w->sel( 'loginSec_lockoutMins', '30' ); ?>>30 minutes</option>
|
| 702 |
+
<option value="60"<?php $w->sel( 'loginSec_lockoutMins', '60' ); ?>>1 hour</option>
|
| 703 |
+
<option value="120"<?php $w->sel( 'loginSec_lockoutMins', '120' ); ?>>2 hours</option>
|
| 704 |
+
<option value="360"<?php $w->sel( 'loginSec_lockoutMins', '360' ); ?>>6 hours</option>
|
| 705 |
+
<option value="720"<?php $w->sel( 'loginSec_lockoutMins', '720' ); ?>>12 hours</option>
|
| 706 |
+
<option value="1440"<?php $w->sel( 'loginSec_lockoutMins', '1440' ); ?>>1 day</option>
|
| 707 |
+
<option value="2880"<?php $w->sel( 'loginSec_lockoutMins', '2880' ); ?>>2 days</option>
|
| 708 |
+
<option value="7200"<?php $w->sel( 'loginSec_lockoutMins', '7200' ); ?>>5 days</option>
|
| 709 |
+
<option value="14400"<?php $w->sel( 'loginSec_lockoutMins', '14400' ); ?>>10 days</option>
|
| 710 |
+
<option value="28800"<?php $w->sel( 'loginSec_lockoutMins', '28800' ); ?>>20 days</option>
|
| 711 |
+
<option value="43200"<?php $w->sel( 'loginSec_lockoutMins', '43200' ); ?>>30 days</option>
|
| 712 |
+
<option value="86400"<?php $w->sel( 'loginSec_lockoutMins', '86400' ); ?>>60 days</option>
|
| 713 |
+
</select>
|
| 714 |
+
</td>
|
| 715 |
+
</tr>
|
| 716 |
+
<tr>
|
| 717 |
+
<th>Immediately lock out invalid usernames<a
|
| 718 |
+
href="http://docs.wordfence.com/en/Wordfence_options#Immediately_lock_out_invalid_usernames"
|
| 719 |
+
target="_blank" class="wfhelp"></a></th>
|
| 720 |
+
<td><input type="checkbox" id="loginSec_lockInvalidUsers" class="wfConfigElem"
|
| 721 |
+
name="loginSec_lockInvalidUsers" <?php $w->cb( 'loginSec_lockInvalidUsers' ); ?> /></td>
|
| 722 |
+
</tr>
|
| 723 |
+
<tr>
|
| 724 |
+
<th>Don't let WordPress reveal valid users in login errors<a
|
| 725 |
+
href="http://docs.wordfence.com/en/Wordfence_options#Don.27t_let_WordPress_reveal_valid_users_in_login_errors"
|
| 726 |
+
target="_blank" class="wfhelp"></a></th>
|
| 727 |
+
<td><input type="checkbox" id="loginSec_maskLoginErrors" class="wfConfigElem"
|
| 728 |
+
name="loginSec_maskLoginErrors" <?php $w->cb( 'loginSec_maskLoginErrors' ); ?> /></td>
|
| 729 |
+
</tr>
|
| 730 |
+
<tr>
|
| 731 |
+
<th>Prevent users registering 'admin' username if it doesn't exist<a
|
| 732 |
+
href="http://docs.wordfence.com/en/Wordfence_options#Prevent_users_registering_.27admin.27_username_if_it_doesn.27t_exist"
|
| 733 |
+
target="_blank" class="wfhelp"></a></th>
|
| 734 |
+
<td><input type="checkbox" id="loginSec_blockAdminReg" class="wfConfigElem"
|
| 735 |
+
name="loginSec_blockAdminReg" <?php $w->cb( 'loginSec_blockAdminReg' ); ?> /></td>
|
| 736 |
+
</tr>
|
| 737 |
+
<tr>
|
| 738 |
+
<th>Prevent discovery of usernames through '?/author=N' scans<a
|
| 739 |
+
href="http://docs.wordfence.com/en/Wordfence_options#Prevent_discovery_of_usernames_through_.27.3F.2Fauthor.3DN.27_scans"
|
| 740 |
+
target="_blank" class="wfhelp"></a></th>
|
| 741 |
+
<td><input type="checkbox" id="loginSec_disableAuthorScan" class="wfConfigElem"
|
| 742 |
+
name="loginSec_disableAuthorScan" <?php $w->cb( 'loginSec_disableAuthorScan' ); ?> />
|
| 743 |
+
</td>
|
| 744 |
+
</tr>
|
| 745 |
+
<tr>
|
| 746 |
+
<th>Immediately block the IP of users who try to sign in as these usernames<a
|
| 747 |
+
href="http://docs.wordfence.com/en/Wordfence_options#Immediately_block_the_IP_of_users_who_try_to_sign_in_as_these_usernames"
|
| 748 |
+
target="_blank" class="wfhelp"></a></th>
|
| 749 |
+
<td><input type="text" name="loginSec_userBlacklist" id="loginSec_userBlacklist"
|
| 750 |
+
value="<?php echo $w->getHTML( 'loginSec_userBlacklist' ); ?>" size="40"/> (Comma
|
| 751 |
+
separated. Existing users won't be blocked.)
|
| 752 |
+
</td>
|
| 753 |
+
</tr>
|
| 754 |
+
<tr>
|
| 755 |
+
<td colspan="2">
|
| 756 |
+
<div class="wfMarker" id="wfMarkerOtherOptions"></div>
|
| 757 |
+
<h3 class="wfConfigHeading">Other Options<a
|
| 758 |
+
href="http://docs.wordfence.com/en/Wordfence_options#Other_Options" target="_blank"
|
| 759 |
+
class="wfhelp"></a></h3>
|
| 760 |
+
</td>
|
| 761 |
+
</tr>
|
| 762 |
+
|
| 763 |
+
<tr>
|
| 764 |
+
<th>Whitelisted IP addresses that bypass all rules:<a
|
| 765 |
+
href="http://docs.wordfence.com/en/Wordfence_options#Whitelisted_IP_addresses_that_bypass_all_rules"
|
| 766 |
+
target="_blank" class="wfhelp"></a></th>
|
| 767 |
+
<td><input type="text" name="whitelisted" id="whitelisted"
|
| 768 |
+
value="<?php echo $w->getHTML( 'whitelisted' ); ?>" size="40"/></td>
|
| 769 |
+
</tr>
|
| 770 |
+
<tr>
|
| 771 |
+
<th colspan="2" style="color: #999;">Whitelisted IP's must be separated by commas. You can specify
|
| 772 |
+
ranges using the following format: 123.23.34.[1-50]<br/>Wordfence automatically whitelists <a
|
| 773 |
+
href="http://en.wikipedia.org/wiki/Private_network" target="_blank">private networks</a>
|
| 774 |
+
because these are not routable on the public Internet.<br/><br/></th>
|
| 775 |
+
</tr>
|
| 776 |
+
|
| 777 |
+
<tr>
|
| 778 |
+
<th>Immediately block IP's that access these URLs:<a
|
| 779 |
+
href="http://docs.wordfence.com/en/Wordfence_options#Immediately_block_IP.27s_that_access_these_URLs"
|
| 780 |
+
target="_blank" class="wfhelp"></a></th>
|
| 781 |
+
<td><input type="text" name="bannedURLs" id="bannedURLs"
|
| 782 |
+
value="<?php echo $w->getHTML( 'bannedURLs' ); ?>" size="40"/></td>
|
| 783 |
+
</tr>
|
| 784 |
+
<tr>
|
| 785 |
+
<th colspan="2" style="color: #999;">Separate multiple URL's with commas. If you see an attacker
|
| 786 |
+
repeatedly probing your site for a known vulnerability you can use this to immediately block
|
| 787 |
+
them.<br/>
|
| 788 |
+
All URL's must start with a '/' without quotes and must be relative. e.g. /badURLone/,
|
| 789 |
+
/bannedPage.html, /dont-access/this/URL/
|
| 790 |
+
<br/><br/></th>
|
| 791 |
+
</tr>
|
| 792 |
+
|
| 793 |
+
<tr>
|
| 794 |
+
<th>Hide WordPress version<a
|
| 795 |
+
href="http://docs.wordfence.com/en/Wordfence_options#Hide_WordPress_version" target="_blank"
|
| 796 |
+
class="wfhelp"></a></th>
|
| 797 |
+
<td><input type="checkbox" id="other_hideWPVersion" class="wfConfigElem" name="other_hideWPVersion"
|
| 798 |
+
value="1" <?php $w->cb( 'other_hideWPVersion' ); ?> /></td>
|
| 799 |
+
</tr>
|
| 800 |
+
<tr>
|
| 801 |
+
<th>Block IP's who send POST requests with blank User-Agent and Referer<a
|
| 802 |
+
href="http://docs.wordfence.com/en/Wordfence_options#Block_IP.27s_who_send_POST_requests_with_blank_User-Agent_and_Referer" target="_blank"
|
| 803 |
+
class="wfhelp"></a></th>
|
| 804 |
+
<td><input type="checkbox" id="other_blockBadPOST" class="wfConfigElem" name="other_blockBadPOST"
|
| 805 |
+
value="1" <?php $w->cb( 'other_blockBadPOST' ); ?> /></td>
|
| 806 |
+
</tr>
|
| 807 |
+
<tr>
|
| 808 |
+
<th>Hold anonymous comments using member emails for moderation<a
|
| 809 |
+
href="http://docs.wordfence.com/en/Wordfence_options#Hold_anonymous_comments_using_member_emails_for_moderation"
|
| 810 |
+
target="_blank" class="wfhelp"></a></th>
|
| 811 |
+
<td><input type="checkbox" id="other_noAnonMemberComments" class="wfConfigElem"
|
| 812 |
+
name="other_noAnonMemberComments"
|
| 813 |
+
value="1" <?php $w->cb( 'other_noAnonMemberComments' ); ?> /></td>
|
| 814 |
+
</tr>
|
| 815 |
+
<tr>
|
| 816 |
+
<th>Filter comments for malware and phishing URL's<a
|
| 817 |
+
href="http://docs.wordfence.com/en/Wordfence_options#Filter_comments_for_malware_and_phishing_URL.27s"
|
| 818 |
+
target="_blank" class="wfhelp"></a></th>
|
| 819 |
+
<td><input type="checkbox" id="other_scanComments" class="wfConfigElem" n |