vB Optimise v2.6.0 Beta 4

Integration With Other DBTech Products

• Support for caching of the [DBTech] vBAnswers "Latest X" (Landing Page) (Requires [DBTech] vBAnswers v2.0.0 - not yet released)

Fillip

While doing a quick security audit on an inherited installation of vBulletin, we were looking for recently modified .php files in the application folder and noticed that there is a file in the dbtech/vboptimise/filecache/ directory with a .php extension. (Specifically, the filename is what appears to be hexidecimal hash of some sort, followed by that .php ending.) The file appears to have no actual PHP logic in it, simply exiting from PHP and outputting a JSON object via normal text. (Object parts include what appear to be a "time" and a "value.") The file was modified today and is owned by the user that our webserver runs as.

In the interest of establishing a baseline against which we can do future audits: Is the creation of a .php file in the cache directory a normal behavior for this plugin?

If you are using file system cache (datastore) (vs Memory such as memcached, xcache etc.) then this will be normal as it writes a file to store the cached data and it will vary as the cache changes.

The component doing the writing of this file is ./upload/dbtech/vboptimise/includes/operators/filecache.php:

Thanks! That's very good to know.

To elaborate; the reason why the files are .php as opposed to blank extension or some such, is because .php files can be cached by opcode cachers :)

The filenames are MD5 hashes, btw :)


Fillip

Update

Hotfix: PHP 5.4 Compatibility fixes


This does not guarantee the mod is error free on PHP 5.4, but it will take care of the reported errors. Thank you all for your reports :)



Fillip

I'm still having problems with xcache setting. When i change the opcache operator to xcache and turning on xcache authentication i'm start getting white pages. I've added my xcache username and password into cache.php

Are you sure you put your xcache password in plaintext in the config.php file for vB Optimise, and not the md5 hash?

Fillip

Back in post #178 I was wondering if you ever found a solution to as why the Resource Stats weren't showing except on the forum home. I have the same issue. Everything seems to be working fine - just doesn't report the savings (although the total savings increases every minutes on the What's Going On/forum home).

Thanks. I really like this new version and will be getting the pro version - the guest cache seems like a winner.

Unfortunately not, would you be willing to share your FTP / AdminCP details for me to look into this? Remember to link back to this post to remind me of the issue :)


Fillip