fosstodon.org is one of the many independent Mastodon servers you can use to participate in the fediverse.
Fosstodon is an invite only Mastodon instance that is open to those who are interested in technology; particularly free & open source software. If you wish to join, contact us for an invite.

Administered by:

Server stats:

8.6K
active users

#w3totalcache

0 posts0 participants0 posts today
Marcel SIneM(S)US<p><a href="https://social.tchncs.de/tags/WordPress" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>WordPress</span></a>-Plug-in <a href="https://social.tchncs.de/tags/W3TotalCache" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>W3TotalCache</span></a>: Potenziell 1 Millionen Websites attackierbar | Security <a href="https://www.heise.de/news/WordPress-Plug-in-W3-Total-Cache-Potenziell-1-Millionen-Websites-attackierbar-10246228.html" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://www.</span><span class="ellipsis">heise.de/news/WordPress-Plug-i</span><span class="invisible">n-W3-Total-Cache-Potenziell-1-Millionen-Websites-attackierbar-10246228.html</span></a> <a href="https://social.tchncs.de/tags/WordPressPlugin" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>WordPressPlugin</span></a> <a href="https://social.tchncs.de/tags/CMS" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>CMS</span></a> <a href="https://social.tchncs.de/tags/ContentManagementSystem" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>ContentManagementSystem</span></a> <a href="https://social.tchncs.de/tags/Patchday" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Patchday</span></a></p>
Teddy / Domingo (🇨🇵/🇬🇧)<p>Encore une <a href="https://framapiaf.org/tags/faille" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>faille</span></a> dans un plugin <a href="https://framapiaf.org/tags/WordPress" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>WordPress</span></a> : 1 million de sites exposés à des fuites de données.<br>Une <a href="https://framapiaf.org/tags/vuln%C3%A9rabilit%C3%A9" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>vulnérabilité</span></a> importante a été découverte dans le plugin <a href="https://framapiaf.org/tags/W3TotalCache" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>W3TotalCache</span></a>, module très utilisé par les abonnés <a href="https://framapiaf.org/tags/WP" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>WP</span></a> pour améliorer les performances de leurs <a href="https://framapiaf.org/tags/sitesweb" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>sitesweb</span></a>.<br><a href="https://www.clubic.com/actualite-550556-encore-une-faille-dans-un-plugin-wordpress-1-million-de-sites-exposes-a-des-fuites-de-donnees.html" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://www.</span><span class="ellipsis">clubic.com/actualite-550556-en</span><span class="invisible">core-une-faille-dans-un-plugin-wordpress-1-million-de-sites-exposes-a-des-fuites-de-donnees.html</span></a></p>
Fish in the Percolator<p>The results of a deep dive, spending probably way too much time in this, but that&#39;s what we do when the stakes are low: <a href="https://fosstodon.org/tags/WordPress" class="mention hashtag" rel="tag">#<span>WordPress</span></a> <a href="https://fosstodon.org/tags/ActivityPub" class="mention hashtag" rel="tag">#<span>ActivityPub</span></a> and <a href="https://fosstodon.org/tags/caching" class="mention hashtag" rel="tag">#<span>caching</span></a>, in particular <a href="https://fosstodon.org/tags/W3TotalCache" class="mention hashtag" rel="tag">#<span>W3TotalCache</span></a>. <a href="https://gergely.imreh.net/blog/2023/02/when-wordpress-caching-is-not-what-it-seems/" target="_blank" rel="nofollow noopener" translate="no"><span class="invisible">https://</span><span class="ellipsis">gergely.imreh.net/blog/2023/02</span><span class="invisible">/when-wordpress-caching-is-not-what-it-seems/</span></a></p>
Fish in the Percolator<p>Plot thickens with <a href="https://fosstodon.org/tags/WordPress" class="mention hashtag" rel="tag">#<span>WordPress</span></a> <a href="https://fosstodon.org/tags/ActivityPub" class="mention hashtag" rel="tag">#<span>ActivityPub</span></a> and <a href="https://fosstodon.org/tags/W3TotalCache" class="mention hashtag" rel="tag">#<span>W3TotalCache</span></a> <a href="https://fosstodon.org/tags/W3TC" class="mention hashtag" rel="tag">#<span>W3TC</span></a> plugins interactions. Seems like W3TC&#39;s <a href="https://fosstodon.org/tags/nginx" class="mention hashtag" rel="tag">#<span>nginx</span></a> config is subtly wrong for me multiple ways so it didn&#39;t actually direct caching (and it was red herring to modify it, wasting me a an hour or two), but W3TC&#39;s internal code redirects to the right generated on-disk file after all (so that&#39;s why the &quot;caching&quot; seemed to have worked even with emptied nginx config).</p>
Fish in the Percolator<p><span class="h-card" translate="no"><a href="https://home.social/@arnandegans" class="u-url mention">@<span>arnandegans</span></a></span> so the plugin would need to tell somehow the whole <a href="https://fosstodon.org/tags/WordPress" class="mention hashtag" rel="tag">#<span>WordPress</span></a> instance (or just <a href="https://fosstodon.org/tags/W3TotalCache" class="mention hashtag" rel="tag">#<span>W3TotalCache</span></a>?) not to cache the authors&#39; about page. (when it receives a regular query, return the HTML version, if &quot;application/activity+json&quot; type the the plugin take care of it.</p><p>It&#39;s an interesting proposition whether that plugin could set up that behaviour. I wonder if it&#39;s something down this line: <a href="https://wordpress.org/support/topic/disable-caching-for-a-specific-page/" target="_blank" rel="nofollow noopener" translate="no"><span class="invisible">https://</span><span class="ellipsis">wordpress.org/support/topic/di</span><span class="invisible">sable-caching-for-a-specific-page/</span></a> (and thanks for the hint, it seems promising!)</p>
Fish in the Percolator<p><span class="h-card" translate="no"><a href="https://mastodon.nzoss.nz/@evantd" class="u-url mention">@<span>evantd</span></a></span> what sort of settings change this would be? I&#39;m using <a href="https://fosstodon.org/tags/nginx" class="mention hashtag" rel="tag">#<span>nginx</span></a> and <a href="https://fosstodon.org/tags/W3TotalCache" class="mention hashtag" rel="tag">#<span>W3TotalCache</span></a> adds its own config to it (as a generated file that is imported by the main nginx setup). Looking at it, no headers or accepted file types related logic in there.<br />Any other hints about what do you mean?</p>
Fish in the Percolator<p>Using <a href="https://fosstodon.org/tags/WordPress" class="mention hashtag" rel="tag">#<span>WordPress</span></a> with the <a href="https://fosstodon.org/tags/ActivityPub" class="mention hashtag" rel="tag">#<span>ActivityPub</span></a> plugin and seems like it&#39;s not playing well with <a href="https://fosstodon.org/tags/W3TotalCache" class="mention hashtag" rel="tag">#<span>W3TotalCache</span></a>, as the author page that should return an ActivityPub author JSON for an author page, just being cached (not bothering about the &quot;Accept&quot; header).</p><p>Solved it by just exempting the `/author/.+` paths from caching, but it is not satisfying, the cache plugin should be able to handle these things.</p><p>Also, I have no clue whether it will make any difference for <span class="h-card" translate="no"><a href="https://gergely.imreh.net/blog/author/gergely/" class="u-url mention">@<span>gergely</span></a></span> at all :P</p>
Gidi KroonI finally succeeded in putting the Wordpress media files on S3 and served by cdn, on a test site. This should not have stumped me this much, there's a plugin for it to help and I managed to configure it on Pleroma and PeerTube without the help of a plugin. Maybe these have better instructions...<br><br>One of the issues was that the instructions of <em>W3 Total Cache</em> said to give minimal S3 access permissions to the access key but doesn't say what that is, so I did <code>GetObject</code>, <code>PutObject</code> and <code>DeleteObject</code> but that doesn't work. Blog posts acknowledge this and say to just give full permissions. Fortunately AWS had a list and it also needs <code>ListBucket</code>, <code>GetObjectAcl</code> and <code>PutObjectAcl</code>. Even if Acl's are disabled. Just ignore that the test upload doesn't work. Also ignore people who say that the S3 bucket needs to be open to the public.<br><a href="https://friendica.gidikroon.eu/search?tag=Wordpress" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Wordpress</span></a> <a href="https://friendica.gidikroon.eu/search?tag=W3TotalCache" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>W3TotalCache</span></a>
Erik L. Arneson :emacs:<p>This weird <a href="https://fosstodon.org/tags/W3TotalCache" class="mention hashtag" rel="tag">#<span>W3TotalCache</span></a> <a href="https://fosstodon.org/tags/WordPress" class="mention hashtag" rel="tag">#<span>WordPress</span></a> bug cropped up again on another new post. <a href="https://arnesonium.com/2022/09/wordpress-returning-404-errors" target="_blank" rel="nofollow noopener" translate="no"><span class="invisible">https://</span><span class="ellipsis">arnesonium.com/2022/09/wordpre</span><span class="invisible">ss-returning-404-errors</span></a></p>