Wordfence 无权限操作.user.ini文件

To make your site as secure as possible, the Wordfence Web Application Firewall is designed to run via a PHP setting called auto_prepend_file, which ensures it runs before any potentially vulnerable code runs.

NOTE: If you have separate WordPress installations with Wordfence installed within a subdirectory of this site, it is recommended that you perform the Firewall installation procedure on those sites before this one.

We've preselected your server configuration based on our tests, but if you know your web server's configuration, please select it now. You can also choose "Manual Configuration" for alternate installation details.

Apache + mod_php
Apache + suPHP
Apache + CGI/FastCGI
LiteSpeed/lsapi
NGINX (recommended based on our tests)
Windows (IIS)
Manual Configuration
NGINX (recommended based on our tests)
Part of the Firewall configuration procedure for NGINX depends on creating a .user.ini file in the root of your WordPress installation. This file can contain sensitive information and public access to it should be restricted. We have instructions on our documentation site on what directives to put in your nginx.conf to fix this.

Please download a backup of the following files before we make the necessary changes:

DOWNLOAD .USER.INI

Once you have downloaded the files, click Continue to complete the setup.

CONTINUE

Wordfence是一款Wordpress网站安全防护插件，它的核心功能是运行所有php文件前经过该系统扫描，但是开启该功能需要在.user.ini文件中写入一段代码。