Fantastic idea, but technical flaw - [Internet Archive Wayback Machine Link Fixer] Review | WordPress.org

fraencko
(@fraencko)

4 months, 1 week ago

I love the idea of the plugin, but it has a major technical flaw. When activated, the blog’s frontend tries to load scripts and/or resources from the wp-admin directory, and I think this is something a plugin shouldn’t do.

I protect wp-admin via htaccess as an additional measure against hackers, so my frontend threw some errors for ordinary users. I suggest fixing the plugin by moving frontend resources to wp-content. Otherwise a great project. Thank you Archive.org people for doing great work!

Viewing 1 replies (of 1 total)

Plugin Contributor Glynn Quelch
(@glynnquelch)

4 months, 1 week ago

Hey Fraencko

While protecting the wp-admin area with .htaccess can add an extra layer of security, it can also introduce issues if it is not configured carefully. Many plugins and themes rely on admin-ajax.php to handle AJAX requests, including this plugin.

At a minimum, admin-ajax.php should be excluded from the protection rules. Even with that exclusion in place, some plugins may still experience unexpected behaviour depending on how they interact with WordPress.

Further reading:
https://secupress.me/blog/dont-use-password-protection-wp-admin-folder/
https://www.wordfence.com/blog/2014/05/please-stop-password-protecting-your-wp-admin-folder-because-it-breaks-public-ajax-for-wordpress

Related support threads:
https://wordpress.org/support/topic/admin-ajax-blocked-3/
https://wordpress.org/support/topic/wordpress-hardening-securing-wp-includes-wp-admin/

If admin-ajax.php is already excluded, we would need the site URL to investigate further.

Thanks
Glynn

Viewing 1 replies (of 1 total)

You must be logged in to reply to this review.

1 reply
2 participants
Last reply from: Glynn Quelch
Last activity: 4 months, 1 week ago