Redirection

  • Resolved mkovcu

    (@mkovcu)


    4 years, 4 months ago

    Hello,

    On version 4.1.1 problem with webpc-passthru.php and redirection is still there.
    eg site.com/wp-content/webpc-passthru.php?src=https://ww.wp.xz.cn will redirect to ww.wp.xz.cn.

Viewing 6 replies - 1 through 6 (of 6 total)
  • Plugin Author Mateusz Gbiorczyk

    (@mateuszgbiorczyk)

    4 years, 4 months ago

    Hello @mkovcu,

    Thanks for your message.

    This change was necessary for security reasons. You cannot load files from another domain on your website. In this situation, I recommend using the via .htaccess mode.

    Best,
    Mateusz

    Thread Starter mkovcu

    (@mkovcu)

    4 years, 4 months ago

    Hello,

    Thank you for your answer. I just didn’t get what you mean by ‘I recommend using the via .htaccess mode.’? File /wp-content/plugins/webp-converter-for-media/includes/passthru.php will still be there, and there is opened redirection.

    Plugin Author Mateusz Gbiorczyk

    (@mateuszgbiorczyk)

    4 years, 4 months ago

    @mkovcu The link to this file will not be used anywhere. Why do you think this is a problem?

    Thread Starter mkovcu

    (@mkovcu)

    4 years, 4 months ago

    Hello,

    Thank you for your answer.
    There are many things that can go wrong with redirections like this.
    Example – someone sees ad with link to your shop, it doesn’t look suspicious because link starts with yourshop.com, and when he clicks – he gets redirected to scam site that looks exactly like yourshop.com…
    If you don’t see this as problem, fine with me – I just wont use your plugin.

    https://wpscan.com/vulnerability/f3c0a155-9563-4533-97d4-03b9bac83164

    Plugin Author Mateusz Gbiorczyk

    (@mateuszgbiorczyk)

    4 years, 4 months ago

    @mkovcu I understand you, thank you for the clarification. The issue has been fixed in version 4.1.2. Please download it and everything will be safe for your website.

    Thread Starter mkovcu

    (@mkovcu)

    4 years, 4 months ago

    Hi @mateuszgbiorczyk,

    Thank you for your quick reaction and understanding.

    Best regards

Viewing 6 replies - 1 through 6 (of 6 total)

The topic ‘Redirection’ is closed to new replies.