WPF2B_EVENT_WAF_UPDATE_OPTION

Unauthorised call to update_option() detected.

Premium only

syslog

Facility

WP_FAIL2BAN_EX_WAF_LOG

Level

WARNING if enabled, NOTICE if logging only

Example

WAF blocked update_option(marvin-gpp)="happy" on fqdn.example.com from 192.0.42.1

fail2ban

Filter

wordpress-wpf2b-waf.conf

Rule

update_option\(<F-OPTION_NAME>.*?</F-OPTION_NAME>\)="<F-OPTION_VALUE>.*</F-OPTION_VALUE>"<_tail>

<option_name>

Name of the core WordPress option being updated.

<option_value>

The JSON-encoded value being set. The following options are used for encoding:

  • JSON_NUMERIC_CHECK

  • JSON_UNESCAPED_SLASHES

  • JSON_PRESERVE_ZERO_FRACTION

  • JSON_INVALID_UTF8_SUBSTITUTE

History

Changed in version 6.0.0: Added F-OPTION_NAME and F-OPTION_VALUE tags.

Added in version 5.1.0: Experimental.