• Hello, I need help with a part of the configuration, exactly with the Cache Location part, a route appears automatically assigned to me but it tells me this in point 5…

    The plugin has detected a naked directory index on the cache directory, which would allow visitors to view the cache files directly and could expose private posts. Index.html files have been added in home directories, but unless directory indexes are disabled, it is probably best to cache files outside of the web root of /xxxxx/xxxxxxxxx/domains/indieloopers.com/public_html/

    I suppose this is bad, what you tell me for security issues, right? Could you help me?

Viewing 5 replies - 1 through 5 (of 5 total)
  • This is very bad. If you can’t disable that yourself you should contact your hosting support who can help you disable it.

    Thread Starter nanomania

    (@nanomania)

    Hello, I already contacted my hosting and they changed the route and they told me that it is already protected, but the message keeps appearing, is it a warning that always comes out or should it disappear? is this what i mean …

    1. You must enter the full path to the directory.
    2. If the directory does not exist, it will be created. Please make sure that your server user has write permission to the parent directory. The parent directory must exist.
    3. If the new cache directory does not exist, it will be created and the contents of the old cache directory will be moved there. Otherwise, the old cache directory will be left where it is.
    4. Submit a blank entry to be set to the default directory, WP_CONTENT_DIR. /cache/.
    5. The plugin has detected a bare directory index on the cache directory, which would allow visitors to view the cache files directly and could expose private posts. Index.html files have been added to main directories, but unless directory indexes are disabled, it is probably best to cache files outside of the /xxxxx/xxxxxxxx/domains/indieloopers.com/public_html/

    As long as you’re not seeing the “Your server is configured to show files and directories, which may expose sensitive data such as login cookies…” notice I think you can ignore that, especially if your hosting provider has moved the cache directory somewhere else. Maybe there’s a bug I haven’t come across before there.

    Thread Starter nanomania

    (@nanomania)

    I am having problems with an acquaintance who is dedicating himself to hacking the web, I have put security and I have put several plugins to change the access of the url, even so this guy is dedicated to sending me messages by writing me the access url that I have changed, as if saying That he is very clever and even if I change it, he finds out, could it be because of that cache failure? is that as the message indicates that anyone can see the files, I have believed that it could be the fault I have, I have already tried several plugins for it and in both I find the access url that changes.

    • This reply was modified 4 years, 1 month ago by nanomania.

    If you’re having problems like that I don’t think this plugin can help you. I don’t understand what your access url is. Maybe this person has hacked your computer and sees everything you type so they can get this access url that way? Maybe they brute force your website, trying all sorts of URLs. Maybe they have an account on the website so they can see everything that goes on there?

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘Help with cache location’ is closed to new replies.