WP Super Cache should be safe to use and has been re-enabled. There was a bug that might have allowed the creation of directories outside the supercache directory but nothing more. That bug has been fixed. See Donncha’s official statement and Chris’s account of the bug and debugging process in more detail. Thanks, Donncha, for the speedy resolution of this issue!
I’m now testing the development version of WP Super Cache to help iron out the bugs. Pardon the dust. 
If you liked this post, please subscribe to my feed. Thanks for visiting!
I just came across disturbing “reports” of WP Super Cache being vulnerable to cross-site scripting code injection attacks. Just to be safe, I’ve disabled WP Super Cache and reverted to WP Cache v2.1.2 until the issue is resolved. Donncha is very responsive so I’m sure this scare will be behind us very soon.
Sources:
Donncha’s Thursday Links
wp-super-cache cached too far for me (and others)
wp-super-cache vulnerable to PHP Injection?
The code changes here have been incorporated into WP Super Cache. Simply install the latest version, no modifications necessary.
For users who have written comments or are logged in, WP Super Cache serves up the traditional WP-Cache cached pages instead of static pages (or rather, the web server doesn’t direct logged in users the static pages). In other words, anonymous visitors get the compressed or uncompressed Super Cache pages, but logged in users only get uncompressed pages served by WP-Cache. I merged in the code I posted previously to make WP-Cache properly gzip compress cached pages once per page, so that logged in users can enjoy gzipped pages too (stored on disk and served by WP-Cache, not recompressed for each request). Very interested in what Donncha thinks about this. Also included Reiner Saddey’s fix to prevent WP-Cache from changing the content type of feeds to “text/html”.
Downloads:
WP Super Cache gzip enhanced - modified files
WP Super Cache gzip enhanced - diffs
Credit: Nick Georgakis and Reiner Saddey
A successor to WP-Cache has emerged. Donncha O Caoimh has just released the first public version of WP Super Cache. WP Super Cache is based on WP-Cache but is superior in many ways. With no further development of WP-Cache, Donncha’s WP Super Cache is likely to become the defacto caching and anti-Digg/Slashdot solution for WordPress. Read on for details.
Continue reading ‘WP Super Cache: truly sensible caching with compressed and static pages’
