Perishable Press

1 • February 11, 2008 at 2:42 pm — Ibnu Asad says:

Hi,

I just wanted to tell you that when I submitted a comment at this post, a download window appeared and I could download the wp-comments php file.

2 • February 11, 2008 at 5:16 pm — Perishable says:

Hi Ibnu,

Sorry for the weird behavior.. Things have been utter chaos around here for the past week or so. The good news is that server performance finally seems to be improving. I see that your comment did go through on the “Blacklist Candidate” post.. hopefully the contents of the wp-comments.php were not included with the file!!

3 • February 11, 2008 at 5:22 pm — Ibnu Asad says:

Well, I did not download the file so I don’t know whether the actual php code is included in the file.

But if it were to be downloaded by someone else, I doubt that downloading the wp-comments.php will allow someone to exploit your site…unless they can get the wp-config.php!

4 • February 11, 2008 at 5:35 pm — Perishable says:

Downloading PHP files upon leaving a comment is one of the symptoms of the myriad server issues that we have been trying to fix. Apparently, when the server’s PHP memory runs low, certain pages are downloaded instead of processed. It’s a long story, trust me. The good news is that the downloaded PHP files appear to contain consistently blank contents (whew!). As far as know, it is not possible to download the wp-config.php — that would definitely suck! In any case, I appreciate the heads up.. please let me know if you continue to experience any problematic site behavior.