http://builtwith.com/ still can see I am using WordPress?

[Hassan]

Found the problem!

For an unknown reason HMWP replaces source code in WP ADMIN which is undesired. This probably happens because some plugins changed WP filters in a nonstandard way.

See these HMWP lines in your Nginx file:

rewrite ^/storage/(.*) /https:/cdn.cakobox.com/$1?IM_kunci_lang=Tz8YBO7t5BRy3ujt last;
rewrite ^/template/ext/9a7cc091/(.*) /template/ext/a3-lazy-load/$1?IM_kunci_lang=Tz8YBO7t5BRy3ujt last;
...

First there is a conflict with your current CDN plugin. HMWP provides its own CDN feature. If you’re satisfied with current service please leave New File Path empty. Otherwise disable that plugin and use CDN path in HMWP then update this line to:
rewrite ^/storage/(.*) /https:/cdn.cakobox.com/$1?IM_kunci_lang=Tz8YBO7t5BRy3ujt last;
to
rewrite ^/storage/(.*) /wp-content/uploads/$1?IM_kunci_lang=Tz8YBO7t5BRy3ujt last;

Second problem is plugins paths. You need to change all plugins lines. For example change this:
rewrite ^/template/ext/9a7cc091/(.*) /template/ext/a3-lazy-load/$1?IM_kunci_lang=Tz8YBO7t5BRy3ujt last;
to this
rewrite ^/template/ext/9a7cc091/(.*) /wp-content/plugins/a3-lazy-load/$1?IM_kunci_lang=Tz8YBO7t5BRy3ujt last;

(Notice the second part.)

PS:
You use High privacy mode, this means you may expect small conflicts with other plugins. If you face with such problems change HMWP to medium privacy mode. You may need to modify HMWP lines again!

[risecakoplusplus]

This reply has been marked as private.

[risecakoplusplus]

This reply has been marked as private.

[risecakoplusplus]

This reply has been marked as private.

[risecakoplusplus]

This reply has been marked as private.

[Hassan]

You can not enable it for certain plugins and disable for others because you usually can’t find out which feature cause the problem.

If HMWP cause the problem just back up and reset its settings. You don’t need to remove Nginx lines. Nginx lines usually do not cause any issue as long as plugin is disabled or not configured. I’ll take a look in next 2 hours so please add NGINX lines again.

[risecakoplusplus]

This reply has been marked as private.

[risecakoplusplus]

This reply has been marked as private.

[Hassan]

Thanks,

Make sure you have these lines in your nginx config:

rewrite ^/template_main/style.css /?parent_wrapper=1&IM_kunci_lang=Tz8YBO7t5BRy3ujt last;
rewrite ^/template_main/(.*) /wp-content/themes/pinshop/$1 last;

If they are not it means you configured Nginx wrongly or changed settings without configuring Nginx. If they are there replace them with these lines:

rewrite ^/template_main/style.css /?parent_wrapper=1&IM_kunci_lang=Tz8YBO7t5BRy3ujt last;
rewrite ^/template_main/(.*) /wp-content/themes/pinshop/$1?IM_kunci_lang=Tz8YBO7t5BRy3ujt last;

Doesn’t help? attach Nginx config file for more investigation.

[risecakoplusplus]

This reply has been marked as private.

[Hassan]

Are you changing anything? I couldn’t login anymore. (I disabled HMWP still no success)

Furthermore, /etc/nginx/sites-available is empty. Please let me know where exactly nginx config file for the site is?

PS:
I see your environment is over optimized/configured. I mean you use several different tools to do the same thing at the same time. This not only may affect performance but causes headache in future!

[risecakoplusplus]

This reply has been marked as private.

[risecakoplusplus]

This reply has been marked as private.

[Hassan]

As an example for over-optimization, you hided wp-login both by HMWP and iThemeSecurity. which doesn’t make your site safer.

Cloudflare, Wt3T, AutoOptimize and HMWP all can minify CSS/HTML/JS files but with different settings and features. You used 2 or 3 of them at the same time! Does it make your site faster? No, it just complicate your setup and generate bugs.

I spent several hours to find popup problem: enabled and disabled all features one by one but no success. Finally, disabled AutoOptimize and that solve the problem.

What reason was behind search box problem? I already said it’s better to use medium settings. I used that and that fixed the problem. Anyway, I used your provided settings but change several features: increased IDS thresholds, remove new search queries and disabled clean up posts and avoid direct access.

I spent several hours to solve those two little problems. As a security man here is my final words: instead of wasting time and money to make the safest and fastest website focus on your business and generate money. Good luck!

[risecakoplusplus]

This reply has been marked as private.

[Author]

Posts