Message being displayed in Hepsia CP

[doneritehosting]

My bad clivejo, I was reading your "fix" code LMAO!!!!! not the cp message code you posted..... had me all confused lol!

[clivejo]

What I'm saying is that the code given in the CP Message wouldn't work properly. It would deny all with NO exceptions, therefore blocking the allowed IP address too.

[clivejo]

This is what it should be, to perform the correct action. This code is saying "Deny from all, but allow from x.x.x.x" which is what you want, to protect your wp-admin folder. You replace the x.x.x.x with your static ISP IP address therefore only that IP has access to the folder.

[doneritehosting]

Ok continuing class then what is the reason

# Block access to wp-admin.
order deny,allow
allow from x.x.x.x
deny from all

will not work?

[clivejo]

It will allow all. Try it!

The line "order deny,allow" is determining the order so in simple English this code is "Denying all, but then overriding that command by allowing all"

[doneritehosting]

I would say deny because your order is deny first then your closing rule is deny all, the rules conflict in order of execution...

[clivejo]

Consider the following

order deny,allow
allow from all
deny from all

Will it deny all or allow all?

[doneritehosting]

Got ya...... so "order allow,deny" would be the proper syntax then correct?

[clivejo]

It depends on the statement "order allow,deny" or "order deny,allow" which is performed first.

Reading the code they give in the CP message, I dont think its going to work.

[doneritehosting]

"allow from x.x.x.x" would be an exception to the "deny from all" statement wouldn't it clivejo?

[clivejo]

When I log in I’m seeing the above message. This is great information but if I'm reading the code right, this would block all access including the allowed IP!!

Let me explain

 order allow,deny

This code "executes" the statements in this order. So this line is saying "Allow from x.x.x.x, then deny from all" this is wrong. You want it in reverse. "Deny from all, then allow from x.x.x.x"

The correct code should be

# Block access to wp-admin.
order deny,allow
allow from x.x.x.x
deny from all