New to the community? Start here

Cannot connect to Managed WP

Using Defender Pro in many websites, and all these sites can not connect to ManageWP regularly, despite the fact that I put all there IP addresses in Whitelist.

Please advise what could be done to correct this.

Wed, 31 Oct 2018 7:49:00
More Defender Pro discussions
Defender Pro
  • Nithin Ramdas
    • Support Wizard

    Hey GTrick,

    Please do let us know whether updating the .htaccess file with the mentioned rules given during live chat helps, or not. If you still notice anomalies, please do follow up in here, so that we could bring this into our developers attention.

    Have a great day head. :slight_smile:

    Best Regards,

    Nithin

  • Patrick CSM
    • Code Source Marketing

    Hi!

    Here’s all the connection requests made by ManageWP. I asked them to send them to me today. I hope it can help you find a solution. Thanks.

    —

    Standard ManageWP Headers. None of the values are fixed, as all are dynamic depending on the variables

    MWP-Action – Depends on the set of N actions. Actions are added as the tools are added

    MWP-Message-ID – _random_

    MWP-Signature – random value based on the whole content

    MWP-Protocol – Numerical value, currently it’s 1, but can change in the future

    MWP headers we use during the website adding:

    MWP-Key-Name

    MWP-Service-Signature

    MWP-Communication-Key

    Query parametars:

    mwprid – we use this on every requests

    HTTP headers:

    Accept: text/html,text/plain,application/json,multipart/mixed or text/html,text/plain,application/json,application/ldjson

    Referer: origin site

    We always try to reach annd hit wp-load.php, i.e wp-load.php?mwprid=_random_

    If we do not succeed in hitting wp-load.php then we try reaching / (Homepage URL)

    Durinng the Add site process we try reaching wp-admin/ if the user chooses username/password method instead of the connection key. Then we try reaching wp-admin/plugin-install.php and try doing the Worker installation. if it’s a multisite, then we reach /network/plugin-install.php

    If the Worker plugin already exists, but with the older version, we do the upgrade of it. For that we reach update.php?action=upgrade-plugin and plugins.php to activate the Worker plugin.

    We do not use xmlrpc.php in any case. This is because we have the crawler in place which does the same thing.

    For all communication with the website (except for the Worker installation) we use the POST method. GET method is used in extraordinary cases.

  • Nithin Ramdas
    • Support Wizard

    Hi GTrick,

    Thanks for sharing the above information. I’m passing these requests to our developer, so that they could give a closer look, and help get this issue sorted asap.

    Will keep you posted once we get more updates from the developer regrading this. Have a great day ahead. :slight_smile:

    Regards,

    Nithin

  • Kasia Swiderska
    • Support nomad

    Hello GTrick,

    Our developers are still working on this issue – problem is that during their tests they are not able to replicate the problem when the site is disconnected.

    Can you enable support access to your site? I need to check and compare settings to see if there is anything that we’ve missed and would allow replicating this issue.

    To enable support access you can follow this guide here:

    https://wpmudev.com/docs/getting-started/getting-support/#chapter-5

    Please respond in this ticket once access is granted.

    kind regards,

    Kasia

  • Nithin Ramdas
    • Support Wizard

    Hi GTrick,

    Thanks for enabling access. We have configured websites similar to your mentioned 3 sites, and are waiting for the results, on how that goes with Managed WP. As the disconnection doesn’t happen instantly, I’m waiting for 24 hours to see how it goes.

    We’ll keep you updated once we have tested this further out. Please do keep the support access active, in case we have to go through your website later.

    Regards,

    Nithin

  • Patrick CSM
    • Code Source Marketing

    Hi. It does not progress so fast. I have deactivated and replaced by iThemes Security all the Defender Pro plugins installed on the websites of my clients. Let me know when you have found a solution. I’ll see if I’ll put Defender back in place. Thank you.