Wordpress tools security problem

[fd_paz]

Hi,
I have Plesk Onyx Version 17.8.11 Update #37 with WordPress Toolkit Version: 3.5.5-1377.

Two days ago I clicked on "Secure" button to solve security problems of my website. Since I did this, my site backend and even frontend do not display properly, especially the images are not displayed and Media Library does not work properly.
I checked the permissions, and all the folders are 755 and the files 644. I also did "Revert" security (all fields available), but the site does not work.
I cloned the same content and the same db on another domain and everything worked.
I would like to know what the problem is and how can I fix it?

Thank you

 

[Brujo]

just to ensure have you also revert the hotlink?
see also Issue - Wordpress Toolkit image hotlinking protection causes issues

 

[fd_paz]

just to ensure have you also revert the hotlink?
see also Issue - Wordpress Toolkit image hotlinking protection causes issues

I tried hotlinking before, but it didn't work.
It is not only images but also the css and styles do not work.

 

[Bitpalast]

Please try to add this line BEFORE the first occurance of a "require_once()" in wp-config.php:

define('CONCATENATE_SCRIPTS', false);

 

[fd_paz]

Please try to add this line BEFORE the first occurance of a "require_once()" in wp-config.php:

define('CONCATENATE_SCRIPTS', false);

Please try to add this line BEFORE the first occurance of a "require_once()" in wp-config.php:

define('CONCATENATE_SCRIPTS', false);

thank you.
adding "define('CONCATENATE_SCRIPTS', false);" doesn't work. But adding "define('CONCATENATE_SCRIPTS', true);" works partially backend. Media Library is not displayed at all and frontend is brocked.

 

[Bitpalast]

This type of issue is normally caused by unsecure or faulty plugins. When you activate all the security settings, they also include things like prohibiting PHP code execution from the wp-content and wp-include directories. When a plugin with malware or simply one that is not properly developed for Wordpress is used, it will discontinue to work, because its code cannot be executed any longer. I think the only way to solve it is to disable all plugins and re-activate them one by one to find out, which one is causing the problem. There is a chance, too, that the theme you are using is causing the issues. Please also see this article on it: WordPress theme customization is shown without CSS