WordPress.org

Ready to get started?Download WordPress

Forums

[resolved] Security Alert. Theme file showing FULL server path (10 posts)

  1. BeautyPirate
    Member
    Posted 2 years ago #

    Uhm... I need some help please.

    The index.php file from my theme (Twentyten child theme) somehow
    exposes the full server path to the public. That can´t be good, right?

    WordPress internal path: /is/htdocs/wpXXXXXXXX_XXXXXXXX/www/wp-content/themes/mytwentyten/index.php

    Why does it do that and how do I prevent it?

    Index file is unchanged but it seems to include the info?

  2. esmi
    Forum Moderator
    Posted 2 years ago #

    Unless you provide a link to a page demonstrating the problem, no one will be able to offer much in the way of assistance.

  3. BeautyPirate
    Member
    Posted 2 years ago #

    Oh sorry, I forgot: XXX

    However there is no problem when you watch the site,
    the alert only shows up on the security scanner.

    Edit: Link removed due to 113 malicious code upload attempts
    in the last hour. Folks... this is a help forum, go play somewhere else.

  4. BeautyPirate
    Member
    Posted 2 years ago #

    http://sucuri.net/wordpress-internal-path-warning

    That´s it but I have no access to php.ini I think.

    Any .htaccess rule that applies?

  5. esmi
    Forum Moderator
    Posted 2 years ago #

    I meant the page on your site that demonstrates this "problem"...

  6. esmi
    Forum Moderator
    Posted 2 years ago #

    There are no server path references on your site's home page.

  7. BeautyPirate
    Member
    Posted 2 years ago #

    http://sitecheck.sucuri.net

    And then how is that possible? Click website details

    Thanks for your time

    Edit: Link removed due to 113 malicious code upload attempts
    in the last hour. Folks... this is a help forum, go play somewhere else.

  8. esmi
    Forum Moderator
    Posted 2 years ago #

    There's nothing wrong with your site. Check out the source of your pages yourself.

  9. BeautyPirate
    Member
    Posted 2 years ago #

    In fact, there is something wrong, there´s the solution if anyone
    has the same problem one day:

    http://zeo.my/hide-php-errors-using-htaccess/

  10. egyptianweb
    Member
    Posted 1 year ago #

    has the same problem
    How to resolve this problem

    thanks

Topic Closed

This topic has been closed to new replies.

About this Topic