Solving problem with incorrect IP address detection
It's crucial for WP Cerber to detect all IP addresses correctly.
On some web servers, WP Cerber is not able to detect IP addresses automatically due to a non-standard server configuration. That means WP Cerber is unable to protect your website and can even lock you out of your WordPress dashboard.
First of all, try to enable My site is behind a reverse proxy in the Main Settings of the plugin and check how the plugin detects IP addresses.
Make sure that Cerber detects IP addresses correctly
- Open the What is my IP address page in a browser tab (window) and the Access Lists admin page on your website in another browser tab (window).
- Compare the IP address on the What is my IP address page to the IP address under the Your IP label on the Access Lists admin page.
- You should see two identical IP addresses.
If you are still unable to make WP Cerber detect IP addresses correctly, you have to define a special CERBER_IP_KEY constant in the wp-config.php file. The plugin will use it as a key to obtain IP addresses from the $_SERVER variable. See the instruction below.
What you need to do
- Get your current IP address on the What is my IP address page
- Go to the Tools admin page which is under the WP Cerber admin menu and click the Diagnostic tab
- Scroll down to the Server Environment Variables section
- Find your IP address in one of the rows that are displayed in the section
- In the left part of the row with your IP address, you’ll see a key. On the screenshot below, the key is
- Take that key and add the following line with your key to the beginning of the wp-config.php file (after the line with <?php)
define('CERBER_IP_KEY', 'HTTP_X_REAL_IP' );
Note: The HTTP_X_REAL_IP is shown as an example, you have to find out and use your own key.
Have any questions?
If you have a question regarding WordPress security or WP Cerber, leave them in the comments section below or get them answered here: G2.COM/WPCerber.