Theme causing Mod Security

Daylon Deon
asked 10 years ago

The server that I’m on has security built into it to where it’ll block IPs that it seems are doing suspicious things. A lot of my friends have had their IP blocked because the theme for some reason causes (mod_security) mod_security at odd times. I don’t know what it does that triggers mod security.
None of the other themes do this. But every so often when doing a normal action like checking a post, uploading an image the theme will hang up and at that point seem like it times out but it’s actually triggering mod security on the server and the IP is being blocked.
What could the theme be executing or what particular action is it calling to trigger mod security?

Daylon Deon
replied 10 years ago

Here’s a log entry on one of the IP blocks the theme caused ..

82.31.142.137 # lfd: (mod_security) mod_security (id:1234123404) triggered by 82.31.142.137 (GB/United Kingdom/cpc3-stkp9-2-0-cust648.10-2.cable.virginm.net): 5 in the last 3600 secs – Sun May 4 07:04:32 2014

3 Answers

well wisher
answered 10 years ago

I want to know if you have other themes installed in the theme directory,if yes then delete all of them if they are not in use cos its the security hole may be one of them could have been injected my malware or something like that,what security plugins do you use to protect your website and set some firewalls if none then i highly recommend you try few of these wordfence,bulletproof security,wp security. If you have installed wordfence as suggested above just do a quick scan of your whole worpress installation including files,plugins themes if you find some changes that were not made by you the Just do yourself a favor and install a fresh copy of dw gamez theme and all your plugins after deleting them once ,i recommend you to delete and never keep any of your plugins or themes in wordpress which are not being used or are simply inactive.Always try and keep your wordpress updated to the latest version
Thanks

Kido D
answered 10 years ago

Hi there,
It seems to be hosting issue not theme issue. There is an article about this issue you may want to have a look:
http://forums.cpanel.net/f185/mod_security-broke-my-wordpress-383861.html
Also, can you try to disable all your plugins first and check again?
Kind Regards.

Daylon Deon
answered 10 years ago

Thanks guys. I’m looking into it and using the suggestions. 🙂