Sucuri on Windows – Executing PHP in wp-content folders

  • Resolved jungalist

    (@jungalist)


    9 years, 10 months ago

    I have just started trying out Sucuri on a few different sites. The ones that reside on a Linux server received a notification under the Hardening tab regarding various folders under wp-content allowing (or not allowing) PHP to be executed. However when I installed it on a site which lives on a Windows machine those few sections were not even showing on the page. Is this a cause for concern?

    https://www.ads-software.com/plugins/sucuri-scanner/

Viewing 1 replies (of 1 total)

  • Do not worry about it (for now), these sections are hidden in servers that do not have Apache installed, as I understand most Windows servers comes with IIS as the default web server software, and the hardening that you can apply to Apache to prevent the execution of PHP files do not work in IIS, that is why the plugin hides those sections.

    I say “do not worry for now” because I have the intention to provide alternative hardening options for IIS and also Nginx (which also has a different configuration) but this may take a while. If you go here you will find a list of the major/popular web servers available in the market [1] I do not have the time nor the resources to provide support for every web server out there, for now I just hide the options that are not cross compatible among different web servers, at least until I have time to implement the alternatives.

    [1] https://en.wikipedia.org/wiki/Comparison_of_web_server_software

Viewing 1 replies (of 1 total)
  • The topic ‘Sucuri on Windows – Executing PHP in wp-content folders’ is closed to new replies.

Tags