Viewing 5 replies - 1 through 5 (of 5 total)
  • Plugin Author tokkonopapa

    (@tokkonopapa)

    Hi ac1643,

    Caching has no problem with this plugin unless you cache admin page. Basically, this plugin doesn’t affect your public facing page (except some kind of ajax). I’m a user of WP Super Cache (and of course IP Geo Block) in my site.

    Thanks for your asking.

    Thread Starter ac1643

    (@ac1643)

    Hi, thanks for answering this.

    One follow on question. Does it matter that the public page can be seen? Does that expose the site to any vulnerablities, and are you planning to make it possible to block the public page in the future?

    Thanks,
    Adam

    Plugin Author tokkonopapa

    (@tokkonopapa)

    Hi ac1643,

    The short answer is NO. Because the HTTP request against the WordPress site to just show the page won’t harm the site. WP core analyze such a request according to the format of the permalink, and respond the page if the request is valid. Otherwise, 404 page will be shown.

    But there’s some PHP files that will do something important other than just respond the page. For examle, wp-login.php, xmlrpc.php, admin-ajax.php and so on. Most of the plugins also do something, and some of the themes include such PHP files.

    So IMO, especially in case of WordPress, validation of every request is almost no use but just waste the resource of the server. Of course, the core have had a lot of vulnerabilities. But these are not simple enough to validate the pattern of SQLi, CSRF and so on. So I should find the way of protecting the sites against these vulnerabilities.

    So the long answer is YES.

    Plugin Author tokkonopapa

    (@tokkonopapa)

    Now I started to consider to validate the requests on public facing pages.

    Related issue: https://ww.wp.xz.cn/support/topic/feature-suggestion-redirection-for-certain-pagesposts-etc

    Thread Starter ac1643

    (@ac1643)

    Thanks for keeping me up to date, your communication is excellent!

Viewing 5 replies - 1 through 5 (of 5 total)

The topic ‘Works with caching plugins?’ is closed to new replies.