matomo-org / matomo-org/matomo-for-wordpress

Add the .htaccess files status in the system report

Open
#705 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Enhancement
Dominant language
PHP
Stars
145
Forks
35
Avg merge
2d 2h
Merged PRs (30d)
6

Description

One of our users has been flagged by the Google console because his bots.yml file was accessible from the web.
It means that his .htaccess were not well parsed.

Two possible explanations:
- the .htaccess file is not readable by the webserver user
- the vhost configuration does not allow parsing of .htaccess files

We could add in the system report:
- a control for each .htaccess file if it is readable by the webserver user (https://www.php.net/is_readable)
- detect by an alternate way of AllowOverride is enabled for the plugin folder. Detection methods examples https://stackoverflow.com/questions/7137104/check-allowoverride-value-using-php
- mod_authz_core, mod_version, mod_mime, mod_headers status: https://www.php.net/manual/en/function.apache-get-modules.php

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

No implementation file or test is named; start by locating the WordPress system report and its existing checks. Use the issue's PHP references, is_readable and apache_get_modules, while researching AllowOverride detection, and consider the work complete when the report shows the requested .htaccess, override, and Apache module statuses.

Written by the indexing model from the issue text.

Assessment

Tech stack
apache, php, wordpress
Domain
devops, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.