Folder named ‘php’ is blacklisted throws 500 internal server error

  • janintia

    (@janintia)


    7 years, 4 months ago

    I have Autoptimize 2.4.4 on a production website. I noticed on the back-end that this resource:
    /wp-content/plugins/autoptimize/classes/external/php/persist-admin-notices-dismissal/dismiss-notice.js
    produces a 500 internal server error.

    I suspect that my server is blacklisting the “php” folder directory. The server might be thinking that we are accessing a php file directly, thus, blocking access. So, what I did was change the folder into “p”, resulting into this:
    /wp-content/plugins/autoptimize/classes/external/p/persist-admin-notices-dismissal/dismiss-notice.js
    and the js script file is now accessible and the error disappeared.

    I reverted back the name into ‘php’ and the issue shows again.

    So, I’m thinking some folks with the same setup as my server might be experiencing the same issue.

    • This topic was modified 7 years, 4 months ago by janintia.
    • This topic was modified 7 years, 4 months ago by janintia.
    • This topic was modified 7 years, 4 months ago by janintia.
    • This topic was modified 7 years, 4 months ago by janintia.
    • This topic was modified 7 years, 4 months ago by janintia.
Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author Optimizing Matters

    (@optimizingmatters)

    7 years, 4 months ago

    interesting janintia, looks like a error in the blacklisting-logic …

    some questions;
    * do you use a security plugin?
    * can you check (or share e.g. on pastebin.com or gists.github.com) your .htaccess file for any relevant directives?
    * can you ask your hoster if they’re enforcing this rule?

    frank

    Thread Starter janintia

    (@janintia)

    7 years, 4 months ago

    Hi Frank,

    1. Yes, I do use a security plugin: Wordfence
    2. Sorry, I don’t have an htaccess file. My server runs on nginx. Here’s the .conf file configuration: https://pastebin.com/HGM8emv4
    3. Gotcha, I’ll get back to you once I have an answer to my hoster.

    Thanks a lot,
    Jan

    Plugin Author Optimizing Matters

    (@optimizingmatters)

    7 years, 4 months ago

    my money is on wordfence, maybe check settings/ ask their support if/ why they would block a .js file even when in a /php/ folder? 🙂

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘Folder named ‘php’ is blacklisted throws 500 internal server error’ is closed to new replies.