Incorrect paths for image files

(@garrigan)

I encountered references to files that do not exist in the respective paths. This occurred while configuring the plugin.

Wordfence Security – Anti-virus, Firewall and Malware Scan

Version 8.0.5 | By Wordfence | View details


GET /wp-content/plugins/wordfence/modules/login-security/css/images/ui-icons_444444_256x240.png HTTP/1.1,
GET /wp-content/plugins/wordfence/modules/login-security/css/images/ui-icons_555555_256x240.png HTTP/1.1,
GET /wp-content/plugins/wordfence/modules/login-security/css/images/ui-icons_777620_256x240.png HTTP/1.1,
GET /wp-content/plugins/wordfence/modules/login-security/css/images/ui-icons_777777_256x240.png HTTP/1.1,
GET /wp-content/plugins/wordfence/modules/login-security/css/images/ui-icons_cc0000_256x240.png HTTP/1.1,
GET /wp-content/plugins/wordfence/modules/login-security/css/images/ui-icons_ffffff_256x240.png HTTP/1.1,
GET /wp-content/plugins/wordfence/modules/login-security/img/checkbox.png HTTP/1.1,
GET /wp-content/plugins/wordfence/modules/login-security/img/icons/ajax24.gif HTTP/1.1,
GET /wp-content/plugins/wordfence/modules/login-security/img/icons/ajax3.gif HTTP/1.1,
GET /wp-content/plugins/wordfence/modules/login-security/img/icons/ajaxWhite32x32.gif HTTP/1.1,
GET /wp-content/plugins/wordfence/modules/login-security/img/icons/bullet_yellow.png HTTP/1.1,
GET /wp-content/plugins/wordfence/modules/login-security/img/icons/working-indicator.gif HTTP/1.1,

This topic was modified 1 year, 1 month ago by Jim Garrigan.

Viewing 9 replies - 1 through 9 (of 9 total)

Plugin Support wfpeter
(@wfpeter)

1 year, 1 month ago

Hi there @garrigan,

This is interesting as any CSS classes referencing the paths shown above aren’t currently in-use. The files above aren’t missing from your version in error, they shouldn’t be present in 8.0.5, but we’re not seeing any errors related to them across our test sites or with other customers.

What browser are you using, and what browser extensions? Are you using a tool or plugin that is intended to validate or preload files referenced in CSS files?

Thanks,
Peter.

Thread Starter Jim Garrigan
(@garrigan)

1 year, 1 month ago

Hi Peter, I use Firefox in private browsing mode to manage the site. I did not add browser extensions. I am not using a tool or plugin that is intended to validate or preload files referenced in CSS files.

I always find interesting issues because I check the log files every day.

Plugin Support wfpeter
(@wfpeter)

1 year, 1 month ago

Thanks for letting us know @garrigan.

We’ll look at removing the unused paths in an future release, but let us know if you saw any broken images in the browser when this happened.

Feel free to show us if you have web server logs that show more detail and let us know if the visits were shown coming from your own IP, the server’s IP, or any other address. It could be a caching/CDN plugin trying to prefetch assets that are used in CSS files.

Thanks,
Peter.

Thread Starter Jim Garrigan
(@garrigan)

1 year, 1 month ago

I will check for you.

Thread Starter Jim Garrigan
(@garrigan)

1 year, 1 month ago

I can provide the raw logs, but obviously I don’t want to post the data in a public forum. Do you have an upload location or something similar please?

downloads.tar.gz 1.36 MB

Plugin Support wfpeter
(@wfpeter)

1 year, 1 month ago

Hi @garrigan, thanks for getting those.

We can accept those to wftest @ wordfence . com, but please make sure your forum username is included in the subject so that we can find it. Also drop us a post here once you’ve sent it over and I’ll forward it to our QA team.

Thanks,
Peter.

Thread Starter Jim Garrigan
(@garrigan)

1 year, 1 month ago

Sent!

Plugin Support wfpeter
(@wfpeter)

1 year, 1 month ago

Thanks for sending those over @garrigan!

The paths you’re seeing in the logs appear to be caused by mod_pagespeed, an Apache module using the user-agent Serf/1.3.9 (mod_pagespeed/1.15.0.0-8917) in the logs. It looks like the IP hitting them is the server’s own address. That module is likely fetching images referenced in CSS to get them pre-cached, even if those classes aren’t used. You may be able to take action yourself if you no longer wish that to be active on your server.

The team is discussing cleaning up any unused paths in a future update, although we can’t discuss timescales or issue progress reports here on the forums. Topics like this may become “Resolved”, but it is now an open case internally until changes appear in our changelog.

We really appreciate the assistance you’ve given us,
Peter.

Thread Starter Jim Garrigan
(@garrigan)

1 year, 1 month ago

Hi Peter,

Sharing: To the best of my knowledge mod_pagespeed AKA ngx_pagespeed (I am using NGINX.) does not pre-cache data.

I was not able to recreate the issue. I reverted to the relevant snapshot. I am not inclined to worry about it.

Thank you

Viewing 9 replies - 1 through 9 (of 9 total)

The topic ‘Incorrect paths for image files’ is closed to new replies.