Elxis CMS Forum

Support => Security => Topic started by: oisy on May 28, 2016, 11:16:08

Title: Request dropped! Reference code: SEC-DEFG-0031 [SOLVED]
Post by: oisy on May 28, 2016, 11:16:08

Hi, I just update to 4.4 and get thiss message:

SECURITY ALERT

Request dropped!
Common CMS scan

Reference code: SEC-DEFG-0031
Sorry for the inconvenience.

I can't acces to the site. I try to delete data in defender_ban.php, but it dosen't work. What should I do?

Title: Re: Request dropped! Reference code: SEC-DEFG-0031
Post by: webgift on May 30, 2016, 11:56:25

Hello @oisy,
Do you use 'administrator' name for your back-end access? If yes, then change that name to
anything else and clean your IP from defender_ban log file. Have we succeeded our purpose?

Title: Re: Request dropped! Reference code: SEC-DEFG-0031
Post by: datahell on May 30, 2016, 14:38:24

You didn't specified what you do when you get banned. You get banned in any URL or when you do something specific?
Maybe there is something dangerous in your browser, or you try to access Elxis backend the old way using /administrator/ in the URL.

Clear defender bans. Then:

1. Try with a different browser.

2. Still get banned? Copy-paste here the exact URL you get banned.

3. Disable Elxis defender (open configuration.php and set private $DEFENDER = '';)

Title: Re: Request dropped! Reference code: SEC-DEFG-0031
Post by: oisy on May 31, 2016, 13:47:37

Hi. Thanks for the answers.

I try to change the administrator beck-end access but it did not work.
I try with different browser - the result was the same.

When I disable Elxis defender it work now everything is OK.

Title: Re: Request dropped! Reference code: SEC-DEFG-0031
Post by: datahell on May 31, 2016, 17:10:45

I am 10000% sure that the problem can be solved without disabling defender.

Title: Re: Request dropped! Reference code: SEC-DEFG-0031
Post by: webgift on June 01, 2016, 10:01:39

In case that you are interested @oisy, please send me an FTP and back-end access of your
website using Private Message feature. I will check this out and i'll fix that for you.