Reply To: Plugin Firewall Exclusion for a file outside Plugins Folder

The Plugin Firewall is a True IP based firewall for the /plugins folder that protects all plugins/plugin files.  Anything outside the /plugins folder would be protected by other BPS Pro security measures.  In this case you have a .js file in your uploads folder that is being blocked by UAEG – the Uploads Anti-Exploit Guard .htaccess file.  You can either whitelist all .js files (not recommended) in the uploads folder or whitelist only this file (recommended).

To edit your Uploads Anti-Exploit Guard .htaccess file go to the B-Core htaccess File Editor tab page and click on the “Your Current Uploads htaccess File” tab.

Whitelist all .js files by removing js from the security filter (not recommended)
Delete the file extension that you want to allow and click the Update File button to save your changes. In this case delete js as shown below.

# FORBID THESE FILE EXTENSIONS FROM BEING ACCESSED OR EXECUTED REMOTELY
<FilesMatch "\.(7z|as|bat|bin|cgi|chm|chml|class|cmd|com|command|dat|db|db2|db3|dba|dll|DS_Store|exe|gz|hta|htaccess|htc|htm|html|html5|htx|idc|ini|ins|isp|jar|jav|java|jse|jsfl|json|jsp|jsx|lib|lnk|out|php|phps|php5|php4|php3|phtml|phpt|pl|py|pyd|pyc|pyo|rar|shtm|shtml|sql|swf|sys|tar|taz|tgz|tpl|vb|vbe|vbs|war|ws|wsf|xhtml|xml|z)$">
Order Deny,Allow
Deny from all
</FilesMatch>

Whitelist only a specific file or files by using a SetEnvIf whitelist rule (recommended)
Add a SetEnvIf whitelist rule above the FilesMatch section of code as shown below. Add Allow from env=whitelist in the FilesMatch section of code as shown below and click the Update File button to save your changes.

SetEnvIf Request_URI "avada.js$" whitelist

# FORBID THESE FILE EXTENSIONS FROM BEING ACCESSED OR EXECUTED REMOTELY
<FilesMatch "\.(7z|as|bat|bin|cgi|chm|chml|class|cmd|com|command|dat|db|db2|db3|dba|dll|DS_Store|exe|gz|hta|htaccess|htc|htm|html|html5|htx|idc|ini|ins|isp|jar|jav|java|js|jse|jsfl|json|jsp|jsx|lib|lnk|out|php|phps|php5|php4|php3|phtml|phpt|pl|py|pyd|pyc|pyo|rar|shtm|shtml|sql|swf|sys|tar|taz|tgz|tpl|vb|vbe|vbs|war|ws|wsf|xhtml|xml|z)$">
Order Deny,Allow
Allow from env=whitelist
Deny from all
</FilesMatch>

• This reply was modified 14 hours, 9 minutes ago by  AITpro Admin.
• This reply was modified 13 hours, 57 minutes ago by  AITpro Admin.