Search Results for '403'

What’s that url you are getting a 403 for. I’m not seeing that.

Guess what…. It’s the TAGDiv Speed Booster that’s giving that error. It was 2.1, I went and updated it to 2.5 and the error is still there.

I deactivated it and the error is gone.

Hello Lucian,

Sorry but once more I’m not explaining myself properly. If you check this post out you will be able to see at the end of each paragraph a comment bubble. When I use text padding in an article those bubbles are not showing up like in this post .

I asked the guys at livefyre adn their response was: “it appears Sidenotes is working just fine on that site as far as we can see. As I suspected, it looks to be an issue with your styling. The engineer I spoke with suggested you try adjusting your DOM selectors for full-width pages and fixing the CSS that is drawing a border around our editor textarea.”

Is there a way we can fix the styling in the theme so sidenotes can work well when padding for the text is used?

Kind regards,

Daniel

OKAY!!!!!!!!!!!!!!!!!

Definitive update on this topic!

Since I have brand new blog (2 posts!) which I setup this weekend, as a migration of an old static section of business website, to a new folder using WP and Newspaper, I was also having issue with Google+ not grabbing photo+summary, and instead only grabbing my author photo + URL or headline.

So, here’s what I did.

I switched from the full width giant photo (style 4), to style 2, with featured image shown; still same problem.

I switched “show featured image off” and *ALSO* switched off the lightbox feature since I don’t use that — remember Google doesn’t like images which are links as they by default presume them to be ads not featured photos when scraping — and then placed my featured image into both of my new posts, and resaved both.

Viola. Went to share both on Google+ and both of my posts from new blog setup dropped in instantly into G+.

example… works!

https://plus.google.com/102627062589158403110/posts/a39F9Lrpa8t

I am not sure whether it’s the featured images outside of post, since I don’t have problem with that on another site with Newspaper; but I am guessing it’s the lightbox under the post settings being on by default that may be the culprit. So try that FIRST (click to off), and see what happens with your G+ shares.

• This reply was modified 11 years by simchris.

Ok FYI if interested, I reinstalled again yesterday because of the things Steven told me.

Well Chris- I still use the W3 Cache (page only) and wrote the rest of .htaccess by myself, like u posted in another thread. (little bit proud on myself that it did not crash 😀 )
Is everything ok with that or have any other suggestion?

See my current htaccess here:

# BEGIN W3TC Page Cache core
<IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteBase /
    RewriteCond %{HTTPS} =on
    RewriteRule .* - [E=W3TC_SSL:_ssl]
    RewriteCond %{SERVER_PORT} =443
    RewriteRule .* - [E=W3TC_SSL:_ssl]
    RewriteCond %{HTTP:Accept-Encoding} gzip
    RewriteRule .* - [E=W3TC_ENC:_gzip]
    RewriteCond %{HTTP_COOKIE} w3tc_preview [NC]
    RewriteRule .* - [E=W3TC_PREVIEW:_preview]
    RewriteCond %{REQUEST_METHOD} !=POST
    RewriteCond %{QUERY_STRING} =""
    RewriteCond %{HTTP_COOKIE} !(comment_author|wp\-postpass|w3tc_logged_out|wptouch_switch_toggle) [NC]
    RewriteCond "%{DOCUMENT_ROOT}/wp-content/cache/page_enhanced/%{HTTP_HOST}/%{REQUEST_URI}/_index%{ENV:W3TC_SSL}%{ENV:W3TC_PREVIEW}.html%{ENV:W3TC_ENC}" -f
    RewriteRule .* "/wp-content/cache/page_enhanced/%{HTTP_HOST}/%{REQUEST_URI}/_index%{ENV:W3TC_SSL}%{ENV:W3TC_PREVIEW}.html%{ENV:W3TC_ENC}" [L]
</IfModule>
# END W3TC Page Cache core
# BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>
# END WordPress
AddType text/javascript .js

# BEGIN Expire headers
<IfModule mod_expires.c>
ExpiresActive On
ExpiresDefault "access plus 5 seconds"
ExpiresByType image/x-icon "access plus 2500000 seconds"
ExpiresByType image/jpeg "access plus 2500000 seconds"
ExpiresByType image/png "access plus 2500000 seconds"
ExpiresByType image/gif "access plus 2500000 seconds"
ExpiresByType application/x-shockwave-flash "access plus 2500000 seconds"
ExpiresByType text/css "access plus 700000 seconds"
ExpiresByType text/javascript "access plus 700000 seconds"
ExpiresByType application/javascript "access plus 700000 seconds"
ExpiresByType application/x-javascript "access plus 700000 seconds"
ExpiresByType text/html "access plus 600 seconds"
ExpiresByType application/xhtml+xml "access plus 600 seconds"
</IfModule>
# END Expire headers

# BEGIN Cache-Control Headers
<IfModule mod_headers.c>
<filesMatch "\.(ico|jpe?g|png|gif|swf)$">
Header set Cache-Control "public"
</filesMatch>
<filesMatch "\.(css)$">
Header set Cache-Control "public"
</filesMatch>
<filesMatch "\.(js)$">
Header set Cache-Control "private"
</filesMatch>
<filesMatch "\.(x?html?|php)$">
Header set Cache-Control "private, must-revalidate"
</filesMatch>
</IfModule>
# END Cache-Control Headers

<IfModule mod_headers.c>
    Header unset ETag
</IfModule>
<IfModule mod_alias.c>
RedirectMatch 403 /xmlrpc.php
</IfModule>

# pass the default character set
AddDefaultCharset utf-8
# BEGIN Keep-Alive
<ifModule mod_headers.c>
Header set Connection keep-alive
</ifModule>
# END Keep-Alive

#BEGIN GZIP 
<IfModule mod_deflate.c>
<filesMatch "\.(js|css|html|php)$">
SetOutputFilter DEFLATE
</filesMatch>
</IfModule>
#END GZIP

#BEGIN CF ALLOW
Allow from 2400:cb00::/32
Allow from 2606:4700::/32
Allow from 2803:f800::/32
Allow from 2405:b500::/32
Allow from 2405:8100::/32
#END CF ALLOW

As you can see I had to add the keep-alive code and other stuff like gzip- because otherwise GTMetrix would complain about that.

http://gtmetrix.com/reports/cherrykoks.de/4DKTK3Af I guess I can not influence the the both points about cloudflare?

The only thing I’m little bit confused about, is the fact that the mentioned code

 foreach ($this->styles_for_footer as $style_id => $style_src) {
            echo "<link rel='stylesheet' id='" . $style_id . "-css'  href='" . $style_src . "?ver=" . $current_theme_version . "' type='text/css' media='all' />\n";

in the booster plugin causes my strings. Can I change that?

And:

in the Pagespeed guide from tagdiv I read this:

The plugin will move the theme and recommended plugins js and css at the page bottom. If you have other plugins installed you have to modify the Speed Booster plugin file so it will also move those files at end of the page. In the next section you will learn how to accomplish this.
4.2 To get the list of registered css and js add the following code at the end of the functions.php file:
function td_inspect_scripts() {
global $wp_scripts, $wp_styles;
echo ‘registered scripts<br>’;
foreach ($wp_scripts->queue as $handle) {
echo $handle . ‘ | ‘ . $wp_scripts->registered[$handle]->src . ‘<br>’;
}
echo ‘registered styles<br>’;
foreach ($wp_styles->queue as $handle) {
echo $handle . ‘ | ‘ . $wp_styles->registered[$handle]->src . ‘<br>’;
}
}
add_action( ‘wp_print_scripts’, ‘td_inspect_scripts’ );

SpeedBooster plugin ist runnin as you know, do I have to change that as advised?

The sentence with “If you have other plugins installed you have to modify plugin so it will also move those files”

Other plugins means = every plugin I’m using? No problem to add this code to functions.php – just wanna make sure if this is right.

• This reply was modified 11 years by Cherry.
• This reply was modified 11 years by Cherry.

My .htaccess file on my site…WARNING DON’T USED MINE ARE IT WILL BREAK UR SITE..MINE IS LIKE THIS BECAUSE OF OTHER THINGS THAT I HAVE DONE ON MY SITE for safty…

# BEGIN All In One WP Security
#AIOWPS_BLOCK_WP_FILE_ACCESS_START
<Files license.txt>
order allow,deny
deny from all
</files>
<Files wp-config-sample.php>
order allow,deny
deny from all
</Files>
<Files readme.html>
order allow,deny
deny from all
</Files>
#AIOWPS_BLOCK_WP_FILE_ACCESS_END
#AIOWPS_BASIC_HTACCESS_RULES_START
<Files .htaccess>
order allow,deny
deny from all
</Files>
ServerSignature Off
LimitRequestBody 10240000
<Files wp-config.php>
order allow,deny
deny from all
</Files>
#AIOWPS_BASIC_HTACCESS_RULES_END
#AIOWPS_PINGBACK_HTACCESS_RULES_START
<IfModule mod_alias.c>
RedirectMatch 403 /(.*)/xmlrpc\.php$
</IfModule>
#AIOWPS_PINGBACK_HTACCESS_RULES_END
#AIOWPS_DISABLE_INDEX_VIEWS_START
Options -Indexes
#AIOWPS_DISABLE_INDEX_VIEWS_END
#AIOWPS_DISABLE_TRACE_TRACK_START
RewriteEngine On
RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK)
RewriteRule .* – [F]
#AIOWPS_DISABLE_TRACE_TRACK_END
#AIOWPS_FORBID_PROXY_COMMENTS_START
RewriteCond %{REQUEST_METHOD} =POST
RewriteCond %{HTTP:VIA}%{HTTP:FORWARDED}%{HTTP:USERAGENT_VIA}%{HTTP:X_FORWARDED_FOR}%{HTTP:PROXY_CONNECTION} !^$ [OR]
RewriteCond %{HTTP:XPROXY_CONNECTION}%{HTTP:HTTP_PC_REMOTE_ADDR}%{HTTP:HTTP_CLIENT_IP} !^$
RewriteCond %{REQUEST_URI} !^/(wp-login.php|wp-admin/|wp-content/plugins/|wp-includes/).* [NC]
RewriteRule .* – [F,NS,L]
#AIOWPS_FORBID_PROXY_COMMENTS_END
#AIOWPS_FIVE_G_BLACKLIST_START
# 5G BLACKLIST/FIREWALL (2013)
# @ http://perishablepress.com/5g-blacklist-2013/

# 5G:[QUERY STRINGS]
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteCond %{QUERY_STRING} (\”|%22).*(<|>|%3) [NC,OR]
RewriteCond %{QUERY_STRING} (javascript:).*(\;) [NC,OR]
RewriteCond %{QUERY_STRING} (<|%3C).*script.*(>|%3) [NC,OR]
RewriteCond %{QUERY_STRING} (\\|\.\./|`|=’$|=%27$) [NC,OR]
RewriteCond %{QUERY_STRING} (\;|’|\”|%22).*(union|select|insert|drop|update|md5|benchmark|or|and|if) [NC,OR]
RewriteCond %{QUERY_STRING} (base64_encode|localhost|mosconfig) [NC,OR]
RewriteCond %{QUERY_STRING} (boot\.ini|echo.*kae|etc/passwd) [NC,OR]
RewriteCond %{QUERY_STRING} (GLOBALS|REQUEST)(=|\[|%) [NC]
RewriteRule .* – [F]
</IfModule>

# 5G:[USER AGENTS]
<IfModule mod_setenvif.c>
# SetEnvIfNoCase User-Agent ^$ keep_out
SetEnvIfNoCase User-Agent (binlar|casper|cmsworldmap|comodo|diavol|dotbot|feedfinder|flicky|ia_archiver|jakarta|kmccrew|nutch|planetwork|purebot|pycurl|skygrid|sucker|turnit|vikspider|zmeu) keep_out
<limit GET POST PUT>
Order Allow,Deny
Allow from all
Deny from env=keep_out
</limit>
</IfModule>

# 5G:[REQUEST STRINGS]
<IfModule mod_alias.c>
RedirectMatch 403 (https?|ftp|php)\://
RedirectMatch 403 /(https?|ima|ucp)/
RedirectMatch 403 /(Permanent|Better)$
RedirectMatch 403 (\=\\\’|\=\\%27|/\\\’/?|\)\.css\()$
RedirectMatch 403 (\,|\)\+|/\,/|\{0\}|\(/\(|\.\.\.|\+\+\+|\||\\\”\\\”)
RedirectMatch 403 \.(cgi|asp|aspx|cfg|dll|exe|jsp|mdb|sql|ini|rar)$
RedirectMatch 403 /(contac|fpw|install|pingserver|register)\.php$
RedirectMatch 403 (base64|crossdomain|localhost|wwwroot|e107\_)
RedirectMatch 403 (eval\(|\_vti\_|\(null\)|echo.*kae|config\.xml)
RedirectMatch 403 \.well\-known/host\-meta
RedirectMatch 403 /function\.array\-rand
RedirectMatch 403 \)\;\$\(this\)\.html\(
RedirectMatch 403 proc/self/environ
RedirectMatch 403 msnbot\.htm\)\.\_
RedirectMatch 403 /ref\.outcontrol
RedirectMatch 403 com\_cropimage
RedirectMatch 403 indonesia\.htm
RedirectMatch 403 \{\$itemURL\}
RedirectMatch 403 function\(\)
RedirectMatch 403 labels\.rdf
RedirectMatch 403 /playing.php
RedirectMatch 403 muieblackcat
</IfModule>

# 5G:[REQUEST METHOD]
<ifModule mod_rewrite.c>
RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK)
RewriteRule .* – [F]
</IfModule>
#AIOWPS_FIVE_G_BLACKLIST_END
#AIOWPS_PREVENT_IMAGE_HOTLINKS_START
<IfModule mod_rewrite.c>
RewriteEngine on
RewriteCond %{HTTP_REFERER} !^$
RewriteCond %{REQUEST_FILENAME} -f
RewriteCond %{REQUEST_FILENAME} \.(gif|jpe?g?|png)$ [NC]
RewriteCond %{HTTP_REFERER} !^http(s)?://jahliveradio\.com [NC]
RewriteRule \.(gif|jpe?g?|png)$ – [F,NC,L]
</IfModule>
#AIOWPS_PREVENT_IMAGE_HOTLINKS_END
# END All In One WP Security

# BEGIN NinjaFirewall (WP+)
<IfModule !mod_php5.c>
<IfModule mod_env.c>
SetEnv PHPRC /home/hxnlfcaw/public_html/.user.ini
</IfModule>
</IfModule>
# END NinjaFirewall (WP+)

# BEGIN HTML5 Boilerplate
# This contains the HTML5 Boilerplate .htaccess that can be found at:
# github.com/h5bp/html5-boilerplate/blob/master/.htaccess
#
# Added:
# Block access to access to WordPress files that reveal version information.
#
# Commented out by default:
# Expires headers: Use WP Super Cache or W3 Total Cache (unless using the H5BP build script)
# ETag removal: Use WP Super Cache or W3 Total Cache (unless using the H5BP build script)
# Start rewrite engine: Handled by WordPress
# Suppress/force www: Handled by WordPress
# Custom 404 page: Handled by WordPress
#
# Anytime you update this file the .htaccess file in the root of your
# WordPress install is automatically updated with the changes whenever
# the permalinks are flushed or set
#
# ———————————————————————-
# Better website experience for IE users
# ———————————————————————-
# Force the latest IE version, in various cases when it may fall back to IE7 mode
# github.com/rails/rails/commit/123eb25
# Use ChromeFrame if it’s installed for a better experience for the poor IE folk
<IfModule mod_headers.c>
Header set X-UA-Compatible “IE=edge”
# mod_headers can’t match by content-type, but we don’t want to send this header on *everything*…
<FilesMatch “\.(appcache|crx|css|eot|gif|htc|ico|jpe?g|js|m4a|m4v|manifest|mp4|oex|oga|ogg|ogv|otf|pdf|png|safariextz|svg|svgz|ttf|vcf|webapp|webm|webp|woff|xml|xpi)$”>
Header unset X-UA-Compatible
</FilesMatch>
</IfModule>
# ———————————————————————-
# CORS-enabled images (@crossorigin)
# ———————————————————————-
# Send CORS headers if browsers request them; enabled by default for images.
# developer.mozilla.org/en/CORS_Enabled_Image
# blog.chromium.org/2011/07/using-cross-domain-images-in-webgl-and.html
# hacks.mozilla.org/2011/11/using-cors-to-load-webgl-textures-from-cross-domain-images/
# wiki.mozilla.org/Security/Reviews/crossoriginAttribute
<IfModule mod_setenvif.c>
<IfModule mod_headers.c>
# mod_headers, y u no match by Content-Type?!
<FilesMatch “\.(gif|png|jpe?g|svg|svgz|ico|webp)$”>
SetEnvIf Origin “:” IS_CORS
Header set Access-Control-Allow-Origin “*” env=IS_CORS
</FilesMatch>
</IfModule>
</IfModule>
# ———————————————————————-
# Webfont access
# ———————————————————————-
# Allow access from all domains for webfonts.
# Alternatively you could only whitelist your
# subdomains like “subdomain.example.com”.
<IfModule mod_headers.c>
<FilesMatch “\.(eot|font.css|otf|ttc|ttf|woff)$”>
Header set Access-Control-Allow-Origin “*”
</FilesMatch>
</IfModule>
# ———————————————————————-
# Proper MIME type for all files
# ———————————————————————-
<IfModule mod_mime.c>
# JavaScript
# Normalize to standard type (it’s sniffed in IE anyways)
# tools.ietf.org/html/rfc4329
AddType application/javascript js jsonp
AddType application/json json
# Audio
AddType audio/ogg oga ogg
AddType audio/mp4 m4a f4a f4b
# Video
AddType video/ogg ogv
AddType video/mp4 mp4 m4v f4v f4p
AddType video/webm webm
AddType video/x-flv flv
# SVG
# Required for svg webfonts on iPad
# twitter.com/FontSquirrel/status/14855840545
AddType image/svg+xml svg svgz
AddEncoding gzip svgz
# Webfonts
AddType application/vnd.ms-fontobject eot
AddType application/x-font-ttf ttf ttc
AddType font/opentype otf
AddType application/x-font-woff woff
# Assorted types
AddType application/octet-stream safariextz
AddType application/x-chrome-extension crx
AddType application/x-opera-extension oex
AddType application/x-shockwave-flash swf
AddType application/x-web-app-manifest+json webapp
AddType application/x-xpinstall xpi
AddType application/xml atom rdf rss xml
AddType image/webp webp
AddType image/x-icon ico
AddType text/cache-manifest appcache manifest
AddType text/vtt vtt
AddType text/x-component htc
AddType text/x-vcard vcf
</IfModule>
# ———————————————————————-
# Gzip compression
# ———————————————————————-
<IfModule mod_deflate.c>
# Force compression for mangled headers.
# http://developer.yahoo.com/blogs/ydn/posts/2010/12/pushing-beyond-gzipping
<IfModule mod_setenvif.c>
<IfModule mod_headers.c>
SetEnvIfNoCase ^(Accept-EncodXng|X-cept-Encoding|X{15}|~{15}|-{15})$ ^((gzip|deflate)\s*,?\s*)+|[X~-]{4,13}$ HAVE_Accept-Encoding
RequestHeader append Accept-Encoding “gzip,deflate” env=HAVE_Accept-Encoding
</IfModule>
</IfModule>
# Compress all output labeled with one of the following MIME-types
# (for Apache versions below 2.3.7, you don’t need to enable mod_filter
# and can remove the <IfModule mod_filter.c> and </IfModule> lines
# as AddOutputFilterByType is still in the core directives).
<IfModule mod_filter.c>
AddOutputFilterByType DEFLATE application/atom+xml \
AddOutputFilterByType DEFLATE application/javascript \
AddOutputFilterByType DEFLATE application/json \
AddOutputFilterByType DEFLATE application/rss+xml \
AddOutputFilterByType DEFLATE application/vnd.ms-fontobject \
AddOutputFilterByType DEFLATE application/x-font-ttf \
AddOutputFilterByType DEFLATE application/x-web-app-manifest+json \
AddOutputFilterByType DEFLATE application/xhtml+xml \
AddOutputFilterByType DEFLATE application/xml \
AddOutputFilterByType DEFLATE font/opentype \
AddOutputFilterByType DEFLATE image/svg+xml \
AddOutputFilterByType DEFLATE image/x-icon \
AddOutputFilterByType DEFLATE text/css \
AddOutputFilterByType DEFLATE text/html \
AddOutputFilterByType DEFLATE text/plain \
AddOutputFilterByType DEFLATE text/x-component \
AddOutputFilterByType DEFLATE text/xml
</IfModule>
</IfModule>
# ———————————————————————-
# UTF-8 encoding
# ———————————————————————-
# Use UTF-8 encoding for anything served text/plain or text/html
AddDefaultCharset utf-8
# Force UTF-8 for a number of file formats
<IfModule mod_mime.c>
AddCharset utf-8 .atom .css .js .json .rss .vtt .webapp .xml
</IfModule>
# ———————————————————————-
# A little more security
# ———————————————————————-
# “-Indexes” will have Apache block users from browsing folders without a default document
# Usually you should leave this activated, because you shouldn’t allow everybody to surf through
# every folder on your server (which includes rather private places like CMS system folders).
<IfModule mod_autoindex.c>
Options -Indexes
</IfModule>
# Block access to backup and source files
# This files may be left by some text/html editors and
# pose a great security danger, when someone can access them
<FilesMatch “(\.(bak|config|sql|fla|psd|ini|log|sh|inc|swp|dist)|~)$”>
Order allow,deny
Deny from all
Satisfy All
</FilesMatch>
# Block access to WordPress files that reveal version information.
<FilesMatch “^(wp-config\.php|readme\.html|license\.txt)”>
Order allow,deny
Deny from all
Satisfy All
</FilesMatch>
# END HTML5 Boilerplate
# BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index\.php$ – [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>

# END WordPress

# Leverage Browser Caching Ninja — Starts here
# Do not write anything between “Leverage Browser Caching Ninja — Starts” and “Leverage Browser Caching Ninja — Ends”
# It will be deleted while uninstalling Leverage Browser Caching Ninja plugin
<IfModule mod_expires.c>
ExpiresActive On
ExpiresDefault “access plus 1 month”
ExpiresByType image/x-icon “access plus 1 year”
ExpiresByType image/gif “access plus 1 month”
ExpiresByType image/png “access plus 1 month”
ExpiresByType image/jpg “access plus 1 month”
ExpiresByType image/jpeg “access plus 1 month”
ExpiresByType text/css “access 1 month”
ExpiresByType application/javascript “access plus 1 year”
</IfModule>
# Leverage Browser Caching Ninja — Ends here

@manual
best bet for my stuff, is go “backwards” from here as the stuff for htaccess file still good, for Apache/Linux. I’m only running nginx for some stuff on our server, we use Apache for compatibility with 20 years of content and some stuff not practical to reinvent at this time.

mod_pagespeed … I am running kind of a moderate number of things with defaults on server wide, then htaccess for local per site/folder controls/over-rides or “off.” With nginx I think you have to use a config file.

Anyway…. here’s my htaccess minus the 301 stuff:

<IfModule pagespeed_module>
ModPagespeed on
ModPagespeedEnableFilters collapse_whitespace
ModPagespeedEnableFilters move_css_to_head
ModPagespeedEnableFilters combine_css
ModPagespeedEnableFilters remove_comments
ModPagespeedEnableFilters rewrite_images
ModPagespeedEnableFilters insert_dns_prefetch
</IfModule>

# start WordPress
(removed; might be diff for other setups :-)
# END WordPress

AddType text/javascript .js

# BEGIN Expire headers
<IfModule mod_expires.c>
ExpiresActive On
ExpiresDefault "access plus 5 seconds"
ExpiresByType image/x-icon "access plus 2500000 seconds"
ExpiresByType image/jpeg "access plus 2500000 seconds"
ExpiresByType image/png "access plus 2500000 seconds"
ExpiresByType image/gif "access plus 2500000 seconds"
ExpiresByType application/x-shockwave-flash "access plus 2500000 seconds"
ExpiresByType text/css "access plus 700000 seconds"
ExpiresByType text/javascript "access plus 700000 seconds"
ExpiresByType application/javascript "access plus 700000 seconds"
ExpiresByType application/x-javascript "access plus 700000 seconds"
ExpiresByType text/html "access plus 600 seconds"
ExpiresByType application/xhtml+xml "access plus 600 seconds"
</IfModule>
# END Expire headers

# BEGIN Cache-Control Headers
<IfModule mod_headers.c>
<filesMatch "\.(ico|jpe?g|png|gif|swf)$">
Header set Cache-Control "public"
</filesMatch>
<filesMatch "\.(css)$">
Header set Cache-Control "public"
</filesMatch>
<filesMatch "\.(js)$">
Header set Cache-Control "private"
</filesMatch>
<filesMatch "\.(x?html?|php)$">
Header set Cache-Control "private, must-revalidate"
</filesMatch>
</IfModule>
# END Cache-Control Headers

<IfModule mod_headers.c>
    Header unset ETag
</IfModule>
<IfModule mod_alias.c>
RedirectMatch 403 /xmlrpc.php
</IfModule>

Here’s my robots.txt file (again, your needs may vary)

User-agent: *
 Disallow: /cgi-bin
 Disallow: /cgi-bin/
 Disallow: /wp-admin
 Disallow: /wp-admin/
 Disallow: /wp-includes
 Disallow: /wp-includes/
 Disallow: /wp-content/plugins
 Disallow: /wp-content/cache
 Disallow: /wp-content/themes
 Disallow: /wp-content/upgrade
 Disallow: /wp-content/backup-*
 Disallow: /aff/
 Disallow: /search/*/*
 Disallow: /trackback
 Disallow: */trackback
 Disallow: /trackback/

We’re currently not running things off our Amazon CDN for the WP sites, in favor of using the horsepower of the dedicated server with high-speed switch, APC, mod_pagespeed, etc. Not finding it super beneficial to load those 1kb sprites off the CDN, frankly. (Brand new web server Dec. 2013). And for us tweaking is simpler when it’s all using one system, and letting mod_pagespeed fix some stuff.

I was manually minifying the style.css file and couple other things. Have not done that with latest version (just updated last weekend). Simple to do … some of my posts on here reference the websites like css minifier where you can copy/paste your code, make new file and over-write the theme css file to solve that issue (takes 5 minutes).

I had too many issues with the caching plugins so not using right now.

Take Google’s PageSpeed Insights with major grain of salt.

On one of my project sites (not running WP), we have the CSS loading from external file, minified, got pagespeed score of 87 and warning about only 47% of page loading above the fold (menu wasn’t showing up), and this could be seen missing from screen capture. So, we put all the code inline, speed went to 95 desktop, 85 mobile, but warning about above the fold now says only 1% was able to be loaded, but snapshot of screen shows everything above fold loaded properly.

Similarly on our WP install running Newspaper, here’s one of their wonderful “suggestions” ….

Reduce server response time
In our test, your server responded in 0.36 seconds. There are many factors that can slow down your server response time. Please read our recommendations to learn how you can monitor and measure where your server is spending the most time.

So, apparently 0.36 seconds is considered slow?

🙂

Hey Lucian,

Thanks for your help!
I tried to do it with plain text but it still doesn’t display right (http://www.thetika.com/tabs-testing/).

The code is:
[vc_row][vc_column width="1/1"][vc_tour][vc_tab title="Slide 1" tab_id="1403700272-1-12"][vc_column_text] All text here, no formatting [/vc_column_text][/vc_tab][vc_tab title="Slide 2" tab_id="1403700272-2-95"][vc_column_text] All text here, no formatting [/vc_column_text][/vc_tab][/vc_tour][/vc_column][/vc_row]

I hope you can tell me what goes wrong, thanks!

The problem exists when I check it, too: https://s3.amazonaws.com/fvd-data/notes/175774/1403204835-1xN8b9/screen.png

All that should go *after* the normal #END WordPress elements …

example (from one of my sites; using custom permalinks – don’t copy the elements for #wordpress or the mod_pagespeed stuff !)

<IfModule pagespeed_module>
ModPagespeed on
ModPagespeedEnableFilters collapse_whitespace
ModPagespeedEnableFilters move_css_to_head
ModPagespeedEnableFilters combine_css
ModPagespeedEnableFilters remove_comments
ModPagespeedEnableFilters rewrite_images
ModPagespeedEnableFilters insert_dns_prefetch
</IfModule>

# BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>

# END WordPress

AddType text/javascript .js

# BEGIN Expire headers
<IfModule mod_expires.c>
ExpiresActive On
ExpiresDefault "access plus 5 seconds"
ExpiresByType image/x-icon "access plus 2500000 seconds"
ExpiresByType image/jpeg "access plus 2500000 seconds"
ExpiresByType image/png "access plus 2500000 seconds"
ExpiresByType image/gif "access plus 2500000 seconds"
ExpiresByType application/x-shockwave-flash "access plus 2500000 seconds"
ExpiresByType text/css "access plus 700000 seconds"
ExpiresByType text/javascript "access plus 700000 seconds"
ExpiresByType application/javascript "access plus 700000 seconds"
ExpiresByType application/x-javascript "access plus 700000 seconds"
ExpiresByType text/html "access plus 600 seconds"
ExpiresByType application/xhtml+xml "access plus 600 seconds"
</IfModule>
# END Expire headers

# BEGIN Cache-Control Headers
<IfModule mod_headers.c>
<filesMatch "\.(ico|jpe?g|png|gif|swf)$">
Header set Cache-Control "public"
</filesMatch>
<filesMatch "\.(css)$">
Header set Cache-Control "public"
</filesMatch>
<filesMatch "\.(js)$">
Header set Cache-Control "private"
</filesMatch>
<filesMatch "\.(x?html?|php)$">
Header set Cache-Control "private, must-revalidate"
</filesMatch>
</IfModule>
# END Cache-Control Headers

<IfModule mod_headers.c>
    Header unset ETag
</IfModule>
<IfModule mod_alias.c>
RedirectMatch 403 /xmlrpc.php
</IfModule>

ALSO: don’t include the last three lines if you are allowing trackback/pingbacks or using email to post via XMLRPC.

Don’t forget you need to have gzip/deflate running on your server also, which alone is good for 20 points!

And if you’re curious here’s my robots.txt file

User-agent: *
 Disallow: /cgi-bin
 Disallow: /cgi-bin/
 Disallow: /wp-admin
 Disallow: /wp-admin/
 Disallow: /wp-includes
 Disallow: /wp-includes/
 Disallow: /wp-content/plugins
 Disallow: /wp-content/cache
 Disallow: /wp-content/themes
 Disallow: /wp-content/upgrade
 Disallow: /wp-content/backup-*
 Disallow: /aff/
 Disallow: /search/*/*
 Disallow: /trackback
 Disallow: */trackback
 Disallow: /trackback/

@Christopher Have I done this right? My performance grade is now only 78/100

This is my htaccess code below:

# BEGIN WordPress

AddType text/javascript .js

# BEGIN Expire headers
<IfModule mod_expires.c>
ExpiresActive On
ExpiresDefault “access plus 5 seconds”
ExpiresByType image/x-icon “access plus 2500000 seconds”
ExpiresByType image/jpeg “access plus 2500000 seconds”
ExpiresByType image/png “access plus 2500000 seconds”
ExpiresByType image/gif “access plus 2500000 seconds”
ExpiresByType application/x-shockwave-flash “access plus 2500000 seconds”
ExpiresByType text/css “access plus 700000 seconds”
ExpiresByType text/javascript “access plus 700000 seconds”
ExpiresByType application/javascript “access plus 700000 seconds”
ExpiresByType application/x-javascript “access plus 700000 seconds”
ExpiresByType text/html “access plus 600 seconds”
ExpiresByType application/xhtml+xml “access plus 600 seconds”
</IfModule>

<IfModule mod_headers.c>
Header unset ETag
</IfModule>
<IfModule mod_alias.c>
RedirectMatch 403 /xmlrpc.php
</IfModule>
# END WordPress

• This reply was modified 12 years by ToniLaird.

Already fixed.
It has nothing to do with the theme.

Thank you.

@orcn

gzip/deflate is managed at the web server level – it needs to be running for your hosting account. This allows the web server to automatically compress everything sent by the web server from your site to the web browser. This alone is good for 20+ points. This is the #1 thing which should be addressed. Ideally your web host should have this on for your account. If they won’t enable it, move to another host who will!

If you look at my posts there is an example of the .htaccess settings that I used for
the “expiration headers”

For images:
1) you need to use a compression plugin, like smush.it or similar (see comments from others in the thread); this will optimize all the thumbs created by WP and the theme
2) upload well compressed images (e.g., 25-40kb max, not 150kb or 700kb — unless you’re doing some kind of photo/portfolio site where quality is first concern)
3) consider changing the compression level by default in WP, which is done in the functions.php file at bottom using the code I’ve suggested in my posts — setting it to something like “60” vs the default “90” (I think), will cut the size of the thumbs by a huge amount.

For my particular brand of magic, try putting this at the end of your .htaccess file:

AddType text/javascript .js

# BEGIN Expire headers
<IfModule mod_expires.c>
ExpiresActive On
ExpiresDefault "access plus 5 seconds"
ExpiresByType image/x-icon "access plus 2500000 seconds"
ExpiresByType image/jpeg "access plus 2500000 seconds"
ExpiresByType image/png "access plus 2500000 seconds"
ExpiresByType image/gif "access plus 2500000 seconds"
ExpiresByType application/x-shockwave-flash "access plus 2500000 seconds"
ExpiresByType text/css "access plus 700000 seconds"
ExpiresByType text/javascript "access plus 700000 seconds"
ExpiresByType application/javascript "access plus 700000 seconds"
ExpiresByType application/x-javascript "access plus 700000 seconds"
ExpiresByType text/html "access plus 600 seconds"
ExpiresByType application/xhtml+xml "access plus 600 seconds"
</IfModule>

<IfModule mod_headers.c>
    Header unset ETag
</IfModule>
<IfModule mod_alias.c>
RedirectMatch 403 /xmlrpc.php
</IfModule>

NOTE: if you use pingback or post by email, don’t put in that last 3 lines, as I do this to keep spammers from posting comments via pingback even when comments are off (!).

The above assumes your web host is running Apache, and not IIS, or nginx or other. If so, you might have to tweak those for your particular host. Apache is the most common, however.

Also: make backup, via FTP, or your hosting panel fileManager of your .htaccess file first; then if your site doesn’t load with the new elements, put back your original version.

Hope that helped.

• This reply was modified 12 years by simchris.

Thank you, problem is solved for now.. 🙂

Actually, I had Yoast been installed before when I had this problem and the 403 ERROR stopped as I disabled Yoast and Jetpack and installed then “All in one SEO”.

The same problem 🙁 http://s7.directupload.net/images/140318/fjlbizoy.png

Is there meanwhile a solution for the problem?