Hassan

[Hassan]

I mean I can’t even open plugins page to activate it. Here is what I see when HMWP is inactive.

Could you see plugins page? If yes, what exactly happen when you enable HMWP. For example can you see other WP ADMIN pages? If yes, go to HMWP settings page and click reset settings to default.

Attachments:

You must be logged in to view attached files.

[Hassan]

Strange, still have problem. It can open few pages but when I want to go plugins page to activate HMWP it doesn’t work. After that other pages can’t be open,too.

If you don’t have such a problem activate HMWP but do not enable anything.

[Hassan]

The noticeable point is page size. 300KB vs 1MB which is not usual because HMWP do not add any single byte to total page size. It seems the same broken layout issue.

I could login once but it takes forever to open admin pages. I assume it as a network issue and will try again later.

[Hassan]

You’re absolutely right about the delay and I apology for that but regarding the problem:

Security by nature is complex. You already used software who require you to first disable firewall or antivirus and then you them. This doesn’t mean those security software are buggy. You also see other WP security plugin which under some fields mentioned this feature may break your site. This is called false positives which is a known and accepted issue in security softwares. Of course, we try to minimize these kind of problems but there is technical limitation.

Here we have a file which pretends something which is not. They use their own AJAX file instead of standard file provided by WP (admin-ajax.php). This doesn’t mean they do it wrong but strange and this is enough to break the process.

Finding this kind of problems is hard. Honestly. this means hours of going up and down in code written by others and you have no idea about it. At its best your plugin became compatible for additional %0.01 of users.

Anyway, here is our latest beta version which added that file as a whitelist. Not the best way but it should work.

Attachments:

You must be logged in to view attached files.

[Hassan]

Sorry for delay,

I found the problem. It was caused by Tevolution which is used by the theme.

They do not use standard WP AJAX and create a their own Ajax wrapper. This wrapper pretends itself as a wp-admin file but you already hided wp-admin files by HMWP!

The easiest way to solve the problem is disabling hide wp-admin in HMWP. I can also edit Tevolution to stop pretending as a wp-admin file but it may cause other problems.

I also enabled Trust network it’s very simple yet powerful.

[Hassan]

Sorry for delay,

It’s hard and sometime impossible to find the problem without access backend configuration. (e.g htaccess).

Anyway, I added this today, which may be helpful.

You can request refund from Envato panel.

[Hassan]

Hi-

Yes, in fact it’s a blacklist. Your IP was there and I removed it. So IP change should does not affect your site (as long as it’s not in our blocklist).

[Hassan]

Hello there,

I can’t see wp-admin. Please make Simon a trusted user or disable HMWP so I can go to wp-admin.

[Hassan]

Sorry for delay,

The IP added to whitelist! It will solve the issue but it may take up to 3 days to see changes.

We suggest to scan 104.168.167.213’s machine for malware, out of dated or vulnerable plugins.

[Hassan]

Sorry, I know it’s too late but I found an easy way to solve this problem.

Just copy HMWP rules inside those blocks. For example:

location ~ \.(asf|asx|wax|wmv|wmx|avi|bmp|class|divx|doc|docx|eot|exe|gif|gz|gzip|ico|jpg|jpeg|jpe|json|mdb|mid|midi|mov|qt|mp3|m4a|mp4|m4v|mpeg|mpg|mpe|mpp|otf|odb|odc|odf|odg|odp|ods|odt|ogg|pdf|png|pot|pps|ppt|pptx|ra|ram|svg|svgz|swf|tar|tif|tiff|ttf|ttc|wav|wma|wri|woff|xla|xls|xlsx|xlt|xlw|zip)$ {

#Another Copy of HMWP RULES HERE

    expires 31536000s;
    add_header Pragma "public";
    add_header Cache-Control "max-age=31536000, public";
}

In fact, you need three copy of HMWP rules. A sample file for those specific problems has been attached.

Attachments:

You must be logged in to view attached files.

[Hassan]

Actually, I did my best but Thanks for words.

The complex nature of security makes it hard to guarantee compatibility with any other software. It doesn’t limit to WP but anti-viruses, firewalls, fraud detection systems, etc. all have similar problems.

Anyway, I’ll try again, but before it, it would be nice to get a backup from current settings. Specially database.

[Hassan]

This reply has been marked as private.

[Hassan]

I worked on it again and again. Unfortunately, I couldn’t understand the issue.

The problem is not related to new WP_ADMIN itself but it’s an incompatibility with other plugin (probably related to cookies or other security plugins).

Please request a refund. You still may use it for other websites and receive automatic update.

[Hassan]

Hi-

Here is a fixed version. Please try it and let us know if it solve the problem.

Attachments:

You must be logged in to view attached files.

[Hassan]

It was not an issue. You need to revert admin panel. I did it for you.

You can easily request refund from Envato panel. Note that refunded customers no longer get support.

[Author]

Posts