• Resolved mrppp

    (@mrppp)


    still can’t work out why after implimenting BPS on two sites using same htaccess, when testing on Google PageSpeed Insights, one gets message in ORANGE saying”Setting an expiry date or a maximum age in the HTTP headers for static resources instructs the browser to load previously downloaded resources from local disk rather than over the network.”

    But the other site passes with green?

    Yet both htaccess the same? any ideas

    https://www.ads-software.com/plugins/bulletproof-security/

Viewing 15 replies - 1 through 15 (of 22 total)
  • Plugin Author AITpro

    (@aitpro)

    Most likely the difference is that the site that is getting the green ok from Google does not have any or a significant number of external links loading on that site and the site that is getting the orange warning is loading a significant number of external scripts/links.

    You can cache internal scripts/links, but cannot do anything about external scripts/links because they are being called from an external source and not loading internally on your website. Compare the sites by looking at the number of external scripts/links loading on each of them. You can do this with Firefox and installing the Firebug and Firephp add-ons.

    Plugin Author AITpro

    (@aitpro)

    You could always grab the external script/library from the source link and minify it and add it to your website, but if a plugin or theme is adding the link to the external script/library then you would have to modify the code in that plugin or theme that is calling that external script/library. Or you could always contact the plugin or theme author and ask them to do this in their next version of the plugin or theme. If the external links are Ad links then you cannot do anything about these types of external links. I think this is also true with external Social Media links.

    The big picture is this: If your site is performing well then do not put too much importance on getting a green status indicator. The bottom line is: is your website actually performing well. The grade you get for your website performance is really not that important and is more for checking for areas where you can make improvements.

    Thread Starter mrppp

    (@mrppp)

    Ok thanks, was just curious but that makes sense as the orange one does have more plugins. Will concentrate on SEO rather than googles ideal world lol

    Plugin Author AITpro

    (@aitpro)

    Yep, all online website performance tools/checkers evaluate website performance based on basic general factors. It would be really tough if not impossible to design online website performance tools/checkers to factor in every single unique or individual factors used on each website.

    Thread Starter mrppp

    (@mrppp)

    so as not to start another thread, i,m wanting to install jetpack, will this be ok with alterations to htaccess as wanting to use the mobile application.
    Uses
    https://plugins.trac.www.ads-software.com/browser/jetpack/trunk/class.jetpack-user-agent.php
    and
    https://plugins.trac.www.ads-software.com/browser/jetpack/trunk/modules/minileven/minileven.php#L30

    Plugin Author AITpro

    (@aitpro)

    We are not aware of any issues/problems or conflicts with BPS and Jetpack. If something in Jetpack is being blocked by BPS then an error will be logged in the BPS Security log file. You would then post that error and we will provide a whitelist/skip/bypass rule to whitelist whatever is being blocked. The BPS Pro Plugin Firewall does require whitelist rules for Jetpack, but BPS does not have/include the Plugin Firewall.

    Thread Starter mrppp

    (@mrppp)

    i get this

    >>>>>>>>>>> 403 GET or Other Request Error Logged - August 10, 2013 - 2:11 am <<<<<<<<<<<
    REMOTE_ADDR: 66.209.184.121
    Host Name: kelowna-gw.proceranetworks.com
    SERVER_PROTOCOL: HTTP/1.1
    HTTP_CLIENT_IP:
    HTTP_FORWARDED:
    HTTP_X_FORWARDED_FOR:
    HTTP_X_CLUSTER_CLIENT_IP:
    REQUEST_METHOD: GET
    HTTP_REFERER:
    REQUEST_URI: /
    QUERY_STRING:
    HTTP_USER_AGENT:

    edit is that ok?

    Plugin Author AITpro

    (@aitpro)

    Edit after your edit: This is shady activity since the User Agent is blank.

    The User Agent is blank. This means shady activity. If this was from a mobile device then the User agent would say “Android” or whichever mobile device Browser that this request was made from. All legitimate requests will have a User Agent.

    IP: 66.209.184.121
    server location: Kelowna in Canada
    ISP: Canhost

    Thread Starter mrppp

    (@mrppp)

    odd that is me accessing with my phone
    could it be the activation in jetpack?
    does mobile access open up other security issues? as it works like a dream

    um actually look at date
    03 GET or Other Request Error Logged – August 10, 2013 –

    maybe there before ??
    will try on site i have just checked with no errors
    edit
    https://bannasties.com/BanNastiesScripts/ShowDetailsHosts.php?Host=kelowna-gw.proceranetworks.com

    So does that mean BP has blocked a nasty?

    Plugin Author AITpro

    (@aitpro)

    These are automatically shady/bad activity.
    A blank User Agent = Shady Activity/Something bad that should be blocked.
    SERVER_PROTOCOL: HTTP/1.0 = Shady Activity/Something bad that should be blocked.

    Thread Starter mrppp

    (@mrppp)

    so were they blocked, is that what the report is telling me?

    Plugin Author AITpro

    (@aitpro)

    Yep

    >>>>>>>>>>> 403 GET or Other Request Error Logged – August 10, 2013 – 2:11 am <<<<<<<<<<<

    A 403 HTTP Response Status code means: 403 Forbidden
    The request was a valid request, but the server is refusing to respond to it.

    Thread Starter mrppp

    (@mrppp)

    Cool so thanks to you i blocked a bad one ;-))) Moby site looks good so with the date August 10, 2013 i guess nothing to do with Jetpack as only installed it 10 mins ago.
    Cheers!!!!

    Get sites running i,ll upgrade to pro!!

    Plugin Author AITpro

    (@aitpro)

    You will see lots and lots of Security Log entries. We get around 300,000 per month. ?? Of course our sites get extra special attention from hackers so the normal/typical site would of course log significantly less hacking attempts, spammers, scrapers and other deviants.

    Thread Starter mrppp

    (@mrppp)

    you wouldn’t mind if they clicked an adsense while visiting lol

Viewing 15 replies - 1 through 15 (of 22 total)
  • The topic ‘Setting an expiry date’ is closed to new replies.