Wordpress Autoptimize and default wpsecure include (403)

Today I did a fresh Centminmod install, a new Wordpress site install and installed Autoptimize.

It didn't work at first ending in 403 forbidden errors because Autoptimize uses .php files in "/wp-content/cache/autoptimize/" and I noticed there is not a whitelist exception by default at the "wpsecure" include created by centminmod.

I had to add in "/usr/local/nginx/conf/wpincludes/example.com/wpsecure_example.com.conf" the following:

Code:

# Whitelist Exception for Autoptimize
location ~ ^/wp-content/cache/autoptimize/ {
  include /usr/local/nginx/conf/php.conf;
  include /usr/local/nginx/conf/staticfiles.conf;
}

@eva2000 I suggest to add this by default to the whitelist exceptions.

---

 

Code:

/home/nginx/domains/example.com/public/wp-content/cache/autoptimize/autoptimize_single_ad10cd46a043368685a36a611490d08e.php
/home/nginx/domains/example.com/public/wp-content/cache/autoptimize/autoptimize_single_fdd67d0316e33e8f57f8e3cbeaf5b490.php
/home/nginx/domains/example.com/public/wp-content/cache/autoptimize/autoptimize_single_76591f91de8e1ba757c75f2ed652aa08.php
/home/nginx/domains/example.com/public/wp-content/cache/autoptimize/autoptimize_single_abc35a4bde8dec6c6d73f14209355f11.php
/home/nginx/domains/example.com/public/wp-content/cache/autoptimize/autoptimize_single_f77808009f1eae29a6a8c846052f73c2.php
/home/nginx/domains/example.com/public/wp-content/cache/autoptimize/autoptimize_single_770afd24832e2d0e94a7b9c931f53a74.php
/home/nginx/domains/example.com/public/wp-content/cache/autoptimize/autoptimize_single_fe41a3f2e56f9b6b35fe998980929b3b.php
/home/nginx/domains/example.com/public/wp-content/cache/autoptimize/autoptimize_single_b544a41566826593bf1145e0c4c90d1e.php
/home/nginx/domains/example.com/public/wp-content/cache/autoptimize/autoptimize_single_c0753a18f5f80d711e27e808db6ea442.php
/home/nginx/domains/example.com/public/wp-content/cache/autoptimize/autoptimize_d41d8cd98f00b204e9800998ecf8427e.php
/home/nginx/domains/example.com/public/wp-content/cache/autoptimize/autoptimize_single_16ae5d6ed880d1c6aa79cd4c7b6d7768.php
/home/nginx/domains/example.com/public/wp-content/cache/autoptimize/autoptimize_single_a1ff06e5154f12492f76eed70f673334.php
/home/nginx/domains/example.com/public/wp-content/cache/autoptimize/autoptimize_single_622aff7c3e7445f19bbbeb6374341688.php
/home/nginx/domains/example.com/public/wp-content/cache/autoptimize/autoptimize_single_68825fd7eb65be21b1b63e5599cd6bfa.php
/home/nginx/domains/example.com/public/wp-content/cache/autoptimize/autoptimize_single_2ef91305dc6b3a23de6a67f6bb775e86.php
/home/nginx/domains/example.com/public/wp-content/cache/autoptimize/autoptimize_single_5bf2b216241ab5f72a7c65380b6737a4.php
/home/nginx/domains/example.com/public/wp-content/cache/autoptimize/autoptimize_single_d494c1f56a2d929fa48a6e70b3de5e86.php
/home/nginx/domains/example.com/public/wp-content/cache/autoptimize/autoptimize_single_9e3cabececb991c5a2bb5730f2efa452.php
/home/nginx/domains/example.com/public/wp-content/cache/autoptimize/autoptimize_single_2a7b30a980d688ca833f68bcfe2ddfa9.php
/home/nginx/domains/example.com/public/wp-content/cache/autoptimize/autoptimize_single_731f03c31740ee19500ea4fe74ead6b0.php
/home/nginx/domains/example.com/public/wp-content/cache/autoptimize/autoptimize_single_0159ae675cfa1104544e2a579e024b7b.php

Not whitelisting in wpsecure will result in getting 403 forbidden errors for those files when trying to visit the website and no javascript or styles will be rendered.

 

I actually tried that multiple times for but for some odd reason those files are still requested by the browser even after clearing caches in the site (KeyCDN Cache Enabler) and Cloudflare, even tried in incognito mode and other browsers.

 

Yeah, of course, I tried it and it's still the same.