Use of TimeThumb Script?

[loudcow]

Hi there,

I’ve installed the Sucuri plugin on a site using Akita. One of the “one-click hardening’ functions says:

“This option blocks direct PHP access to any file inside wp-content. Warn: Do not use it if your site uses timthumb or similar (insecure) scripts. If something breaks, just remove the .htaccess from wp-content.”

So here just to double check before I hit the green go button.

Cheers:)

Topic

[Jason Bobich]

Hello,

Nope, none of our themes have TimThumb in them. Our themes only use WordPress built-in cropping and image size management.

[loudcow]

Awesome thanks!

You must not sleep. What a speedy reply.

[loudcow]

Dang – Jason – This has occurred before for me. I just used Sucuri’s wp-content hardening option as advised above and now the visual editor has disappeared. Refer to screen shot. Other than clearing from HTaccess any suggestions here.

[loudcow]

Opps – LInk to screen shot – http://tinypic.com/r/2ajyz4y/6

[loudcow]

Hi – I just deleted the .htaccess file that Sucuri’s plugin generated/added to the wp_content folder and all back to normal.

[Author]

Replies