Isifundo Esiphelele Sokuxazulula Izinkinga Sokungakwazi Kwe-WordPress Wordfence Ukudala i-wordfence-waf.php

Othile ukhulume ukuthi ngemuva kokufaka i-Wordfence kuwebhusayithi yakhe, wayelokhu ethola amaphutha ethi ayikwazi ukudala ifayela le-wordfence-waf.php kufolda yempande. Ngamcela ukuthi angithumelele isithombe-skrini; umlayezo wephutha wawungumugqa owodwa nje, ethi kwakuyinkinga yemvume yefayela.

Ngacabanga ngakho isikhashana, futhi ngaqaphela ukuthi ngangike ngabhekana nalokhu ngaphambili. Ngachitha isikhathi eside ngizama ukukuqonda, cishe ngicabanga ukuthi umhlinzeki we-hosting wayenento ethile. Kwavela ukuthi kwakuyinkinga yezimvume nobunikazi, kodwa ukucabanga kwephaneli yokulawula i-hosting kungadida ngempela.

Ake ngiqale ngicacise ukuthi iyini le wordfence-waf.php.

Empeleni yifayela lokuvikela le-firewall ye-Wordfence, okumele libhalwe kufolda yempande yewebhusayithi, ezingeni elifanayo ne-wp-config.php.

Ngaphandle kwaleli fayela, i-firewall ayikwazi ukuqala; kufana nokuthi ufake ilokhi kodwa ukhiye awukwazi ukufakwa.

Inketho 1: Ukuguqulwa kwemvume ngokuchofoza kanye ngephaneli yokulawula (i-BT Panel/)I-HestiaCP/cPanel)

Uma usebenzisa i-BT Panel, empeleni iyona elula kakhulu. Iya kuwebhusayithi yakho, thola isayithi elihambisanayo, chofoza Izilungiselelo, bese uya ku-Directory Permissions. Shintsha imvume yesizinda sewebhusayithi ibe ngu-755 kanye nemvume yawo wonke amafayela ibe ngu-644. Bese uhlola ukuthi umsebenzisi osebenzayo "uyi-www"; uma kungenjalo, yishintshe. Chofoza inkinobho ethi "Lungisa Izimvume", linda ukuthi iqede, uvuselele i-Wordfence, bese uzama futhi.

Ku-HestiaCP, iya ekhasini lokuhlela iwebhusayithi bese uvumela inketho ebizwa ngokuthi "Vumela ukufinyelela kokubhala kumpande yewebhu". Bese usebenzisa imiyalo embalwa ye-SSH ukuze uhlanganise umnikazi nezimvume zesikhombisi sewebhusayithi.

chown -R admin:www-data /home/admin/web/你的域名/public_html
chmod -R 755 /home/admin/web/你的域名/public_html
find /home/admin/web/你的域名/public_html -type f -print0 | xargs -0 chmod 644

I-cPanel ilula kakhulu. Vula umphathi wefayela, vula okuthi "Bonisa amafayela afihliwe" ekhoneni eliphezulu kwesokudla, chofoza kwesokudla kufolda bese ushintsha izimvume zibe ngu-755, shintsha izimvume zefayela zibe ngu-644, futhi kukhona nomsebenzi wokulungisa umnikazi wefayela ezinkethweni ezithuthukisiwe.

Inketho 2: Shintsha izimvume ngesandla nge-SSH (ejwayelekile)Linux)

Uma iphaneli yokulawula ingakwazi ukuyiphatha, sebenzisa i-SSH ngesandla. Uma usuxhumeke kuseva, hlanganisa ubunikazi kuqala. Endaweni ye-LNMP/LEMP, iqembu lesikhathi sokusebenza kwewebhu ngokuvamile liyi-www-data noma i-www.

chown -R 你的面板用户:www-data /网站根目录完全路径

Bese usetha izimvume zefolda ku-755 kanye nezimvume zefayela ku-644.

find /网站根目录 -type d -print0 | xargs -0 chmod 755
find /网站根目录 -type f -print0 | xargs -0 chmod 644

Ngemva kokuthi inqubo isiqediwe, buyela ku-WP backend bese uvula kabusha i-firewall; cishe kufanele ixazulule inkinga.

Inketho 3: Dala ngesandla i-wordfence-waf.php (isisombululo esingcono kakhulu lapho izimvume zivaliwe)

Uma ungakwazi ukushintsha noma yini ngephaneli ye-SSH, yenze ngesandla. Dala ifayela elibizwa ngokuthi i-wordfence-waf.php kufolda yempande bese unamathisela ikhodi elandelayo kuyo.

<?php
if (!defined('WFWAF_VERSION')) {
    define('WFWAF_VERSION', '7.11.0');
}
$wafConfig = array(
    'wafAutoPrepend' => true,
    'wafFile' => __FILE__,
    'wpContentDir' => dirname(__FILE__) . '/wp-content',
    'wpPluginsDir' => dirname(__FILE__) . '/wp-content/plugins',
    'wafLogDir' => dirname(__FILE__) . '/wp-content/wflogs',
);
require_once $wafConfig['wpPluginsDir'] . '/wordfence/lib/waf/waf.php';

Khumbula ukufaka inguqulo yakho yamanje ye-Wordfence esikhundleni senguqulo yakho yamanje ye-Wordfence. Setha izimvume zefayela zibe ngu-644, bese umnikazi kufanele afane newebhusayithi. Bese uhlela i-wp-config.php bese wengeza umugqa olandelayo phezulu kwefayela.

require_once 'wordfence-waf.php';

Londoloza futhi uvuselele i-Wordfence. I-firewall izoyibona ngokuzenzakalelayo futhi ingasabiki amaphutha.

Inketho 4: Hlola imithetho evimbela ukufinyelela kokubhala.

Ngezinye izikhathi akuyona inkinga yezimvume, kodwa ifayela lokucushwa eliyivimbayo. Vula ifayela lakho le-.htaccess bese ususa yonke imithetho evimbela ukufinyelela kokubhala ifayela noma evimbela ukudalwa kwefayela le-PHP. Ku-Nginx, hlola ukucushwa kwesayithi lakho ukuze uthole imikhawulo efana ne-root path read kuphela noma i-create_file icishiwe, bese uyisusa.

Esinye isimo ukuthi i-virtual host noma i-lightweight cloud hosting ngokwayo ivimbela ukukhiqizwa kwamafayela e-PHP kufolda yempande. Kulesi simo, udinga ukuxhumana nomhlinzeki wakho we-hosting ukuze ususe umkhawulo, noma ushintshe imodi yokuvikela ye-Wordfence. Iya kumenyu ye-Wordfence, Zonke Izinketho, i-WAF, bese ushintsha imodi yenjini yokuvikela ibe yi-Extended Protection ukuze udlule ekudalweni kwamafayela empande.

Isixazululo 5: Izingxabano ze-plugin ezibangela ukuvimba

Amanye ama-plugin okugcina isikhashana noma okuphepha angavimba lo msebenzi. Khubaza okwesikhashana ama-plugin okugcina isikhashana njenge-WP Rocket, i-W3 Total Cache, kanye ne-LiteSpeed ​​​​Cache, kanye nama-plugin okuphepha njenge-Sucuri kanye ne-iThemes Security. Bese usula i-server cache kanye ne-opcache, bese uqala kabusha isevisi ye-PHP.

systemctl restart php8.3-fpm

Ukulandelana kokuxazulula izinkinga okusheshayo (kunconywa ukulandela izinyathelo ngokulandelana)

Ngiphakamisa ukuthi ulandele lo myalelo ukuze ugweme ukudlala. Okokuqala, hlanganisa izimvume kanye nobunikazi; lokhu kunethuba eliphezulu lokuxazulula inkinga. Uma lokho kungasebenzi, qala kabusha i-PHP-FPM bese uvuselela i-backend. Uma lokho kungasebenzi, dala ifayela elisha ngesandla bese ulungisa i-wp-config. Bese uhlola ukuthi ukucushwa kwakho kwe-Nginx noma i-Apache kuvimbela ukudalwa kwamafayela amasha e-PHP kufolda yempande. Ekugcineni, cabanga ngokushintsha izindlela zomlilo.

Into eyodwa okumele ngikukhumbuze ngayo ukuthi akufanele neze usethe izimvume ku-777. Izimvume zefolda kufanele zibe ngu-755 kanye nezimvume zefayela zibe ngu-644; yilokho okujwayelekile. Ukusetha izimvume ku-777 kuzodalula iwebhusayithi yakho ngqo, okubeka ingozi enkulu kakhulu yokuphepha. Uma ugetshengwa, kuzobe sekwephuze kakhulu ukuzisola ngakho.

Uma ngikhuluma iqiniso, angiqiniseki ukuthi lezi zixazululo zizosebenza yini esimweni sakho, kodwa ngabelane ngezingibe engihlangabezane nazo kanye nezindlela engizitholile. Uma uthola eminye imiyalezo yamaphutha, thatha isithombe-skrini bese usithumela kimi, bese ngiphinde ngibheke.

Njengoba usufundile kuze kube manje, uma ukuthole kuwusizo, sicela uthande futhi wabelane ngakho. Uma ufuna ukuthola izibuyekezo kuqala, ungangilandela futhi!

Ngiyabonga ngokufunda isihloko sami. Sizobonana ngesikhathi esizayo.