Recursion error?

  • Resolved citywanderer

    (@citywanderer)


    9 years, 11 months ago

    Hey guys,

    I love your lazy load plugin — I tried out a bunch and this one is my favorite, with great controls and UI, the best ratings, and the most recently updated: you have everything I’m looking for. Thank you!!!

    I just ran a security scan of my server to find any risks, and for all the sites that I have your plugin installed, it returned the same warning:

    Files under mydomainname that had full write permissions:
    /home/mydomainname/mydomainname.com/wp-content/uploads/sass/a3_lazy_load.less/home/mydomainname/mydomainname.com/wp-content/uploads/sass/a3_lazy_load.css/home/mydomainname/mydomainname.com/wp-content/uploads/sass/a3_lazy_load.min.css/home/mydomainname/mydomainname.com/wp-content/uploads/sass/a3_lazy_load_mixins.less

    (Me again.) Yes–it’s weird that this directly has full write permission but even weirder is that, in your /uploads/sass/a3_lazy_load.less/ directory, it keeps on looking for the whole root directory address, then again, then again, then again for a total of four times.

    I think this might be a bug. Any what I could do to fix it?

    Thank you!
    morgan

    https://www.ads-software.com/plugins/a3-lazy-load/

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Contributor Nguyen Tuan

    (@nguyencongtuan)

    Hi Morgan

    I’m lead developer @a3rev
    Actual then the full permission on the dynamic styles from uploads folder is not issue. They are style and .less file are generate by plugins when you have change any settings from plugin panel.

    But for security, we have update them to 644 yesterday, you should see new version of plugin and upgrade it.

    See Changelog:

    = 1.2.0 – 2015/05/18 =
    * Feature – Added new extend script to support event when click or tap on tab to load images without having to scroll to initiate load.
    * Tweak – Tested and Tweaked for full compatibility with WordPress Version 4.2.2
    * Tweak – Changed Permission 777 to 755 for style folder inside the uploads folder
    * Tweak – Chmod 644 for dynamic style and .less files from uploads folder

    Thanks – Nguyen

    Plugin Author Steve Truman

    (@a3rev)

    Hello @citywanderer

    We have released a new version that will completely resolve that issue – this was 2 days ago and today we have release a new * Feature Version. The version that will resolve the issue for you is V 1.2.2 – here is the changelog

    = 1.2.2 – 2015/06/03 =
    * Tweak – Security Hardening. Removed all php file_put_contents functions in the plugin framework and replace with the WP_Filesystem API
    * Tweak – Security Hardening. Removed all php file_get_contents functions in the plugin framework and replace with the WP_Filesystem API

    Could you please run the upgrade (if you have not already) then run your server security scan again to see if it is resolved for you.

    Once you have done that can you let me know if it is OK for you – and then we can change your topic status to [ Resolved ]

    Regards – Steve

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Recursion error?’ is closed to new replies.