Cikakken Koyarwar Magance Matsaloli ga Rashin Ikon WordPress na Wordfence na Ƙirƙirar wordfence-waf.php

Wani ya ambaci cewa bayan ya shigar da Wordfence a shafinsa na yanar gizo, yana ci gaba da samun kurakurai yana cewa ba zai iya ƙirƙirar fayil ɗin wordfence-waf.php a cikin babban fayil ɗin tushen ba. Na roƙe shi ya aiko min da hoton allo; saƙon kuskuren layi ɗaya ne kawai, yana cewa matsalar izinin fayil ce.

Na yi tunani a kai na ɗan lokaci, sai na fahimci cewa na taɓa fuskantar wannan a da. Na shafe shekaru ina ƙoƙarin gano hakan, kusan ina tunanin mai ba da sabis ɗin yana da wani abu. Ya zama kamar batun izini da mallakar kamfani ne, amma tunanin kwamitin kula da masaukin zai iya zama da rikitarwa.

Bari in fara fayyace menene wannan wordfence-waf.php.

A zahiri fayil ɗin kariya ne na Wordfence Firewall, wanda dole ne a rubuta shi a cikin babban fayil ɗin gidan yanar gizon, a matakin wp-config.php.

Ba tare da wannan fayil ɗin ba, firewall ɗin ba zai iya farawa ba; kamar kun sanya makulli ne amma ba za a iya saka maɓallin ba.

Zaɓi na 1: Gyara izinin dannawa ɗaya ta hanyar kwamitin sarrafawa (BT Panel/)HestiaCP/cPanel)

Idan kana amfani da BT Panel, a zahiri shine mafi sauƙi. Je zuwa gidan yanar gizonka, nemo shafin da ya dace, danna Saituna, sannan ka je zuwa Izinin Directory. Canza izinin tushen kundin adireshi na gidan yanar gizo zuwa 755 da duk izinin fayiloli zuwa 644. Sannan ka duba ko mai amfani da ke gudana shine "www"; idan ba haka ba, canza shi. Danna maɓallin "Gyara Izini", jira har sai ya ƙare, sabunta Wordfence, sannan ka sake gwadawa.

Don HestiaCP, je zuwa shafin gyara gidan yanar gizo kuma kunna zaɓin da ake kira "Ba da izinin rubuta damar shiga tushen yanar gizo". Sannan gudanar da wasu umarni na SSH don haɗa mai shi da izini na kundin gidan yanar gizon.

chown -R admin:www-data /home/admin/web/你的域名/public_html
chmod -R 755 /home/admin/web/你的域名/public_html
find /home/admin/web/你的域名/public_html -type f -print0 | xargs -0 chmod 644

cPanel ya fi sauƙi. Buɗe mai sarrafa fayil, kunna "Nuna fayilolin ɓoye" a kusurwar sama ta dama, danna dama akan kundin adireshi kuma canza izini zuwa 755, canza izinin fayil zuwa 644, kuma akwai aikin gyara mai fayil ɗin a cikin zaɓuɓɓukan ci gaba.

Zaɓi na 2: Canza izini da hannu ta hanyar SSH (na gabaɗaya)Linux)

Idan kwamitin sarrafawa ba zai iya sarrafa shi ba, yi amfani da SSH da hannu. Da zarar an haɗa shi da sabar, fara haɗa ikon mallakar. A cikin yanayin LNMP/LEMP, rukunin lokacin gudu na yanar gizo yawanci shine www-data ko www.

chown -R 你的面板用户:www-data /网站根目录完全路径

Sannan saita izinin babban fayil zuwa 755 da izinin fayil zuwa 644.

find /网站根目录 -type d -print0 | xargs -0 chmod 755
find /网站根目录 -type f -print0 | xargs -0 chmod 644

Bayan an kammala aikin, koma zuwa ga WP backend kuma sake kunna firewall; yakamata ya magance matsalar.

Zaɓi na 3: Ƙirƙiri wordfence-waf.php da hannu (mafita mai kyau idan an kulle izini)

Idan ba za ka iya canza komai ta hanyar SSH panel ba, yi shi da hannu. Ƙirƙiri fayil mai suna wordfence-waf.php a cikin tushen directory sannan ka liƙa lambar da ke ƙasa a ciki.

<?php
if (!defined('WFWAF_VERSION')) {
    define('WFWAF_VERSION', '7.11.0');
}
$wafConfig = array(
    'wafAutoPrepend' => true,
    'wafFile' => __FILE__,
    'wpContentDir' => dirname(__FILE__) . '/wp-content',
    'wpPluginsDir' => dirname(__FILE__) . '/wp-content/plugins',
    'wafLogDir' => dirname(__FILE__) . '/wp-content/wflogs',
);
require_once $wafConfig['wpPluginsDir'] . '/wordfence/lib/waf/waf.php';

Ka tuna ka maye gurbin sigar 7.11.0 da sigar Wordfence ɗinka ta yanzu. Saita izinin fayil zuwa 644, kuma mai shi ya kamata ya dace da gidan yanar gizon. Sannan ka gyara wp-config.php sannan ka ƙara layin da ke ƙasa a saman fayil ɗin.

require_once 'wordfence-waf.php';

Ajiye kuma ka sabunta Wordfence. Wutar lantarki za ta gane ta atomatik kuma ba za ta sake bayar da rahoton kurakurai ba.

Zaɓi na 4: Duba ƙa'idodin da ke hana damar rubutu shiga.

Wani lokaci ba batun izini ba ne, amma fayil ɗin tsari ne ke toshe shi. Buɗe fayil ɗin .htaccess ɗinku kuma ku share duk ƙa'idodi da ke hana shiga rubuta fayil ko hana ƙirƙirar fayil ɗin PHP. Ga Nginx, duba tsarin rukunin yanar gizonku don ƙuntatawa kamar karanta hanyar tushe kawai ko kashe create_file, kuma cire su.

Wani yanayi kuma shi ne cewa mai masaukin yanar gizo ko kuma mai masaukin yanar gizo mai sauƙi yana iyakance ƙirƙirar fayilolin PHP a cikin babban fayil ɗin tushen. A wannan yanayin, kuna buƙatar tuntuɓar mai ba da sabis ɗin ku don cire ƙuntatawa, ko canza yanayin kariya na Wordfence. Je zuwa menu na Wordfence, Duk Zaɓuɓɓuka, WAF, kuma canza yanayin injin kariya zuwa Tsawaita Kariya don kauce wa ƙirƙirar fayil ɗin tushen.

Magani na 5: Rikice-rikicen plugins da ke haifar da toshewa

Wasu plugins na caching ko tsaro na iya toshe wannan aikin. Kashe plugins na caching na ɗan lokaci kamar WP Rocket, W3 Total Cache, da LiteSpeed ​​​​Cache, da kuma plugins na tsaro kamar Sucuri da iThemes Security. Sannan share cache na sabar da opcache, sannan sake kunna sabis ɗin PHP.

systemctl restart php8.3-fpm

Tsarin gyara matsala cikin sauri (ana ba da shawarar a bi matakan da aka tsara)

Ina ba da shawarar ku bi wannan umarni don guje wa yin kuskure. Da farko, haɗa izini da mallakar; wannan yana da mafi girman yuwuwar magance matsalar. Idan hakan bai yi aiki ba, sake kunna PHP-FPM kuma sabunta ƙarshen baya. Idan har yanzu hakan bai yi aiki ba, ƙirƙiri sabon fayil da hannu kuma gyara wp-config. Sannan duba idan tsarin Nginx ko Apache ɗinku yana toshe ƙirƙirar sabbin fayilolin PHP a cikin babban fayil ɗin tushe. A ƙarshe, yi la'akari da canza yanayin firewall.

Abu ɗaya da dole ne in tunatar da ku shi ne kada ku taɓa saita izini zuwa 777. Izinin fayil ya kamata ya zama 755 kuma izinin fayil 644; wannan shine ma'aunin. Saita izini zuwa 777 zai fallasa gidan yanar gizon ku kai tsaye, yana haifar da babban haɗarin tsaro. Idan aka yi muku kutse, zai yi latti a yi nadama.

Gaskiya dai, ban tabbata ko waɗannan mafita za su yi aiki da yanayinka ba, amma na raba muku tarko da na fuskanta da kuma hanyoyin da na gano. Idan kun sami wasu saƙonnin kuskure, ku ɗauki hoton allo ku aiko min da su, zan sake duba su.

Tunda ka karanta wannan labarin, idan ka ga yana da amfani, don Allah ka yi like sannan ka raba shi. Idan kana son samun sabbin bayanai da farko, za ka iya bi na!

Na gode da karanta labarina. Sai mun haɗu a karo na gaba.