simple-cache icon indicating copy to clipboard operation
simple-cache copied to clipboard
verified publisher icon tlovett1

wp-config.php folder being created inside cache

Open banago opened this issue 9 years ago • 5 comments

Hi @tlovett1

I've got this strange case where the plugin creates this chache file:

wp-content/cache/simple-cache/mydomaincom/..-/wp-config.php/index.html

Any idea why this is happening?

banago avatar Aug 23 '16 09:08 banago

Still waiting on this. Is his an issue or not?

banago avatar Sep 30 '16 10:09 banago

Who is your host?

tlovett1 avatar Oct 01 '16 16:10 tlovett1

This used to happen on Site5 Managed VPS.

banago avatar Oct 01 '16 21:10 banago

Did you figure this out?

tlovett1 avatar Jan 08 '17 20:01 tlovett1

Hi,

This strange cache file is probably a result of someone's attempts to get to wp-config.php file via: http://mydomaincom/..-/wp-config.php/

If this strange request doesn't result in 404 page for whatever reason, it gets cached.

I think the way $_SERVER['REQUEST_URI'] is used to get cache file path (without any sanitization) is quite insecure, but I don't want to post my objections here.

@tlovett1 Can I get in touch via email?

chesio avatar Mar 31 '17 11:03 chesio