addressalign-toparrow-leftarrow-rightbackbellblockcalendarcameraccwchatcheckchevron-downchevron-leftchevron-rightchevron-small-downchevron-small-leftchevron-small-rightchevron-small-upchevron-upcircle-with-checkcircle-with-crosscircle-with-pluscrossdots-three-verticaleditemptyheartexporteye-with-lineeyefacebookfolderfullheartglobegmailgoogleimageimagesinstagramlinklocation-pinmagnifying-glassmailminusmoremuplabelShape 3 + Rectangle 1outlookpersonplusprice-ribbonImported LayersImported LayersImported Layersshieldstartickettrashtriangle-downtriangle-uptwitteruseryahoo

Re: [wordpress-195] W3 Total Cache Plugin

From: chris
Sent on: Thursday, December 27, 2012 4:44 PM
hey,

It seems like Options -Indexes might be a better option in .htaccess .... and actually, it would be better to add this to the top level .htaccess as it's not generally a good practice to allow directory listing anywhere.

open your root directory/.htaccess
add

Options -Indexes

to the top of the file (it doesn't really matter where you put it, as long as it's not inside another directive)


If you use deny all, the plugin can't read itself and will return a permissions issue which effectively brings the site down.  
E.G,

Forbidden

You don't have permission to access /wp-content/w3tc/pgcache///_index.html_gzip on this server.

---

The thread on http://seclists.org/fulldisclosure/2012/Dec/242 says that the w3cache developer is working on a fix right now.  It may be better to disable database caching until the fix is released (don't forget to empty the db cache).  

If you have a VPS, maybe install opcode (APC or XCache) so you're not using disk cache - it sounds like this only affects disk cache.

thanks for sending that out! I haven't kept up with my rss feeds the past few days!

hth
chris

Our Sponsors

  • Page.ly

    Pagely provides hosting for our new EastBayWP.com site

  • Tech Liminal

    TechLiminal provides our awesome meeting space

  • O'Reilly Media

    Discount codes for O'Reilly books, e-books, training.

  • A2 Hosting

    A2 Hosting has kindly offered to pay for our pizza on an ongoing basis.

  • WP Shout

    October 2015 giveaway of Up and Running with WP, plus discount codes.

  • Wheepl

    Wheepl is sponsoring the November 2015 Meetup

  • Beaver Builder

    December 2015 license giveaway and swag.

  • Modern Tribe

    Modern Tribe is providing pizza and swag for the July 2015 Meetup.

People in this
Meetup are also in:

Sign up

Meetup members, Log in

By clicking "Sign up" or "Sign up using Facebook", you confirm that you accept our Terms of Service & Privacy Policy