Re: [wordpress-195] W3 Total Cache Plugin

From: chris
Sent on: Thursday, December 27, 2012 4:44 PM
hey,

It seems like Options -Indexes might be a better option in .htaccess .... and actually, it would be better to add this to the top level .htaccess as it's not generally a good practice to allow directory listing anywhere.

open your root directory/.htaccess
add

Options -Indexes

to the top of the file (it doesn't really matter where you put it, as long as it's not inside another directive)


If you use deny all, the plugin can't read itself and will return a permissions issue which effectively brings the site down.  
E.G,

Forbidden

You don't have permission to access /wp-content/w3tc/pgcache///_index.html_gzip on this server.

---

The thread on http://seclists.org/fulldisclosure/2012/Dec/242 says that the w3cache developer is working on a fix right now.  It may be better to disable database caching until the fix is released (don't forget to empty the db cache).  

If you have a VPS, maybe install opcode (APC or XCache) so you're not using disk cache - it sounds like this only affects disk cache.

thanks for sending that out! I haven't kept up with my rss feeds the past few days!

hth
chris

Our Sponsors

  • Page.ly

    Pagely provides hosting for our new EastBayWP.com site

  • TechLiminal

    TechLiminal provides our awesome meeting space

  • Modern Tribe

    Modern Tribe is providing pizza and swag for the July 2015 Meetup.

  • JetBrains

    License to PhpStorm (raffle), June 2013 Meetup

  • AtContent

    March 2013 Sponsor: Lunch!

  • WP Engine

    Provided pizza and swag for February 2013 Meetup

  • WooThemes

    Pizza and Coupon Codes for November 2012

  • DISQUS

    DISQUS provided pizza at the July Meetup

  • PageLines

    Pizza for the Jan 2012 Meetup

  • Event Espresso

    ...donated us a copy of their premium plugin with all the goodies.

People in this
Meetup are also in:

Sign up

Meetup members, Log in

By clicking "Sign up" or "Sign up using Facebook", you confirm that you accept our Terms of Service & Privacy Policy