WP Manifestindependent plugin directory
manifest / performance / wpr-redis

WP Rocket Redis WP Registry grade A-. Low-severity findings · 1 findingWP RegistryLow-severity findings · 1 findingOpen the reportA-

Addon to WP Rocket that allows storage of cache files in Redis.

★ 13stars
v1.0.2latest · 6 years ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/naxvog/wpr-redis/archive/refs/heads/master.zip
Updates itself. It ships its own updater (Plugin Update Checker), so new versions appear under Dashboard → Updates.

This plugin enables WP Rocket to store its generated cache files in the Redis database instead of the default filesystem storage.

Requirements

  • WP Rocket WordPress Plugin (tested up to v3.5.5.1)
  • Redis Server
  • PHP 7+

Constant Configuration

You may use the following constants to configure the plugin. All constants will take preference over the defined settings if there are any.

  • WPR_REDIS_SCHEME Needs to be set to unix to use a unix socket to connect.
  • WPR_REDIS_HOST For TCP connections this will be the IP or hostname of the server. If you are using a socket connection this will be the socket path. Default: localhost
  • WPR_REDIS_PORT Port to connect to the server using TCP. Default 6379
  • WPR_REDIS_DB The Database to be used. Default 0
  • WPR_REDIS_PWD Redis server password if needed.
  • WPR_REDIS_SALT If set all stored keys will be prefixed by this salt. To further differentiate all keys will pre prefixed by their respective database table prefix as well.

Known Issues

  • Connection to any kind of Redis cluster is currently not supported
  • If you are using nginx and if you can alter its configuration the Rocket-Nginx configuration seems to be faster than this (tested using a NVME SSD equipped server)

Disclaimer

This plugin uses WP Rocket's namespacing to alter its file modification functions as well as WP Rockets advanced-cache.php file content filter to register itself. Any API changes from the side of WP Rocket might break this plugin's functionality so please report any issues you might have in the GitHub issue tracker.

Releases

3 releases.

Tag
Published
v1.0.2 latest
Dec 3, 2019 6 years ago
Aug 12, 2019 7 years ago
Aug 12, 2019 7 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

A- grade

Security

WP Rocket Redis 1.0.2 · audited by WP Registry

Low-severity findings only.

1 low
Audited release
1.0.2
Findings
1
Worst severity
low
Content hash
867656b46a40af93bf3a7ad5…

Findings

  • low Notice dismiss AJAX missing nonce and capability

    missing_nonce

    wp_ajax_wpr_redis_notice_handler ajax_clear_notice accepts POST id and may delete_transient('wpr_redis_connection_exception') with no check_ajax_referer or current_user_can. Impact is limited to clearing an admin connection-error notice flag.

    includes/class-wpr-redis.php:149-158

    Recommendation

    Require manage_options and check_ajax_referer before clearing the transient.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.