Security Issues display

Resolved KTS915
(@kts915)

12 years ago

On the dashboard is a Security Issues display. On each site I have connected, this suggests that I need to “Prevent listing wp-content, wp-content/plugins, wp-content/themes, wp-content/uploads”

The problem with this is that my host has already done this. Anyone without FTP access who tries to find any of these folders is simply presented with a blank screen.

So I’m not really sure what this message is suggesting.

https://wordpress.org/plugins/mainwp/

Viewing 7 replies - 1 through 7 (of 7 total)

Plugin Author mainwp
(@mainwp)

12 years ago

The security check is looking for an index.php page in the directory so that folder contents are not listed. Clicking fix will simply add an empty index.php page or you can ignore the warning if you feel comfortable that your host has already corrected the issue.

Thanks

Thread Starter KTS915
(@kts915)

12 years ago

OK. What about these? One site with the same host produces these additional warnings:

Remove wp-version
Remove Really Simple Discovery meta tag
Remove Windows Live Writer meta tag
Remove version information for scripts/stylesheets

I am using the bones theme, and it specifically includes functions that already do that. So what do these warnings mean?

Plugin Author mainwp
(@mainwp)

12 years ago

The best thing to do is check this Doc page for more information What does the Security Issues page fix?

Once again you can ignore the warning if you feel comfortable that your theme has already corrected the issue.

Thread Starter KTS915
(@kts915)

12 years ago

Thanks, but that just re-states what the plugin claims to be doing.

My point is that I know my theme is doing these things already, so the report in MainWP is erroneous. Now I could just turn it off, as you say, but I’d expect you at least to be sufficiently interested to investigate the cause of the issue.

The problem is that, if I can’t trust MainWP to give me an accurate report about this, and you aren’t going to investigate, then it’s difficult to know whether I should trust other things that MainWP says.

Plugin Author mainwp
(@mainwp)

12 years ago

We would be happy to investigate your situation to see exactly where the issue is.

We have no other reports on the Support forum of this so it will be very helpful to trouble shoot with your hosting setup and Theme if you don’t mind.

I notice someone with your username is already signed up for the Members area and I assume it is you (if not please signup and select Free)

Log into the MainWP Members Area and select Help Desk Ticket.

Reference this post and we’ll get someone from the Dev team to work specifically with you and your setup.

Thanks

Thread Starter KTS915
(@kts915)

12 years ago

Yes, that would be me! I will do that. Thanks!

Thread Starter KTS915
(@kts915)

12 years ago

This is just to report that the issues were caused by:

1. A missing blank index.php file in wp-content/uploads; and
2. The fact that my theme (bones) removes all the security issues with functions in a file other than functions.php (which is where MainWP currently looks).

MainWP investigated, talked to my host, and diagnosed the issues. They are now also thinking about how to look for functions in files other than functions.php. You can’t ask for better service than that.

So, in answer to my own point above, I now have considerable trust in what the MainWP dashboard tells me.

Viewing 7 replies - 1 through 7 (of 7 total)

The topic ‘Security Issues display’ is closed to new replies.