WP SEC Test Firewall

gistfile1.txt

#!/bin/bash

DOMAIN="https://khodam.me/"

echo "=== Testing Cloudflare WAF Rules ==="
echo ""

echo "Test 1: PHP in uploads (should block)"
curl -s -o /dev/null -w "Status: %{http_code}\n" $DOMAIN/wp-content/uploads/test.php

echo "Test 2: wp-config.php (should block)"
curl -s -o /dev/null -w "Status: %{http_code}\n" $DOMAIN/wp-config.php

echo "Test 3: .env file (should block)"
curl -s -o /dev/null -w "Status: %{http_code}\n" $DOMAIN/.env

echo "Test 4: SQL backup (should block)"
curl -s -o /dev/null -w "Status: %{http_code}\n" $DOMAIN/wp-content/backup.sql

echo "Test 5: Empty user-agent (should block)"
curl -s -o /dev/null -w "Status: %{http_code}\n" -A "" $DOMAIN/

echo "Test 6: Normal access (should allow)"
curl -s -o /dev/null -w "Status: %{http_code}\n" -A "Mozilla/5.0" $DOMAIN/

echo ""
echo "=== Testing Complete ==="