activated but not seeing results in test

  • We have w3Total cache and I have seen some questions about whether or not this will work with that. However, even when W3 is deactivated and the .htaccess is cleaned of the w3, it still does not pick up the changes in https://securityheaders.com/. I have another site that I added this to and it worked perfectly but there was not W3 installed. Both have a firewall at Sucuri so the only difference is W3. Could it be there is something happening even if W3 is deactivated? I also tried just adding code to the .htaccess for strict transport and referrer policy but that isn’t getting picked up by that scan either. I can see the headers when inspected in Chrome. Is there any other way to test to makes sure the headers are actually there and working? Just weird that one site there are no issues and it is working perfectly and the other it just doesn’t. Any insight on that?
    thank you

    The page I need help with: [log in to see the link]

Viewing 5 replies - 1 through 5 (of 5 total)
  • Plugin Author SimonRWaters

    (@simonrwaters)

    See the discussion under “caching plugin”.

    https://www.ads-software.com/support/topic/caching-plugin-7/

    But when I looked at closer at caching plugins they either didn’t cache headers or you typically had to nominate headers to cache. So caching plugins may be an issue.

    What you describe also sounds like a caching issue, is it possible there is a layer of caching you aren’t allowing for?

    I ran a scan and you get a B, and the headers were showing.

    https://securityheaders.com/?q=https%3A%2F%2Fwww.myadapco.com%2F&followRedirects=on

    Thread Starter kabney

    (@kabney)

    Yes, I added the strict transport in Sucuri as they have the option to add it there but nothing I add to the site directly is working for this one in particular.
    I can get the other site to an A, the only difference is the W3 plugin. But as I said, even when it is not activated, it still doesn’t work right. How would you nominate headers to cache?

    I appreciate the quick response. Thank you so much

    Plugin Author SimonRWaters

    (@simonrwaters)

    One of the plugins had a textbox where you listed HTTP headers to cache.

    Anything in the error log?

    Does it work if you delete the caching plugin?

    I’m afraid that I’m fairly cynical of the caching plugins, feels like a lot of complexity and PHP to do what plenty of software already does well (Apache, Nginx, Varnish, Squid, CDN providers etc), I appreciate there can sometimes be optimisations at a slightly higher level in the stack with the plugins. But then maybe having been a DBA in the past I’m too ready to sort the software, rather than just live with the ugliest bits.

    Hi There,

    After installed the http headers plugin, all images and themse layouts are gone. Please help and advise?

    I have uninstalled and deleted the plugin folder.

    Plugin Author SimonRWaters

    (@simonrwaters)

    You seem to have posted this on someone else’s ticket. Please open your own.

    Please also check you have the right plugin (Security Headers not HTTP Headers).

    The Security Headers plugins does everything in one PHP file, if you are missing items after uninstalling I can only think you’ve served the strict transport security header and are not serving those components over HTTPS, but even this seems unlikely since the header only caches in browsers after a valid HTTPS connection is made. Easily checked by viewing the site in a different web browser that didn’t visit the site whilst the header was used. If it’s that just reinstall and serve the header with a max-age of “0” to remove it from affected browsers.

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘activated but not seeing results in test’ is closed to new replies.