Marko Vasiljevic

Hey Tim,

Sorry for the late reply.
Yes, I can also see the changes.
The possible issue may be that the website was open in the browser, and it was not reloaded. Even if the cache is purged, browsing through the website after this will still show the old cached pages.
So they should check in the incognito window, or reload the page crtl+f5

I hope this helps!

Thanks!

Hello Tim,

Thank you for reaching out and I am happy to assist you with this.
I’ve checked the website and busted the cache, and both versions look the same for me. Can you please share what is actually updated? Content or some styling of the website?
Is there a chance you could share what it suppose to look like (before and after disabling W3TC), because I can see that the W3 Total Cache is installed and active, and again, I am not seeing the difference when the cache is bypassed?

Thanks!

Hello Wayne,

Thank you for reaching out!
Can you please disable the HTML&XML Cache-control and expires header in W3 Total Cache Perofmrance>Browser Cache, save all settings and purge the cache and see if the problem persists?
Thanks!

Hello Mel,

Thank you for reaching out and I am happy to assist you with this.
This is not related to the W3 Total Cache plugin.
The sitemap URL is throwing 404 because it does not exist on your server or by that name. The Rankmath generated sitemap works:
https://www.hundetraining-mit-roya.at/sitemap_index.xml

Once again, this is not because of the W3TC.

Thanks!

Hello Mel,

Thank you for reaching out.

I’ve checked the sitemap you provided and as I can see all the steps you have taken in the W3 Total Cache, successfully secluded the sitemap from being cached. As I can see your sitemap is not cached now, so there is no need to add or remove additional steps.

And no, I don’t believe there will be any google penalties because of this.

Thanks!

Hello Ryan,

Thank your feedback. Are you using Nginx or Apache? Please check the nginx.conf/.htaccess file and check for the W3TC webp rules.
Also can you please change the Cloudflare Browser Cache TTL to respect the origin headers?

Thanks!

Hello Davide,

W3 Total Cache Pro licenses are valid on a per-install basis, meaning you need one for every WordPress instance you run. If you have three separate websites, you will need three licenses in total—one for each site. If you have five sites in a WordPress multisite instance, you need just one license for all five sites. If you are interested in bulk licensing, We are offering plans for a single license activation on multiple installations.

The bulk of 5 activations – $350/year

The bulk of 10 activations – $500/year

We do not have any unlimited license plans at the moment.

If you are interested in the plans above, please email us for more information.

Thanks!

Hello Everyone,

First of all, my sincerest apologies for the delay on this matter.
We have managed to find the problem and the reason why we could not replicate the issue. In the past weeks, we’ve put a lot of effort into this and we have found the solution.
This problem will be fixed in the next release, and since we need to change some files, unfortunately, it’s not a one-liner fix.

I’ll make sure to share the fix immediately once we confirm it’s working.

Once again, thank you for your patience, and please make sure to check for the upcoming release, or this topic thread where I’ll share the information about the fix.

Thank you once again!

Hello Adam,

Thank you for your feedback.
We need to replicate this and make sure that the paths are correct and the Java is installed correctly
I’ll get back to you once I have more details and am able to replicate the problem.
FOr the time being, you should use the default Minify option.
As for the Brotli, W3 Total Cache only recognizes the PHP extensions so please make sure that the https://github.com/kjdev/php-ext-brotli PHP brotli extension is installed on your server.

Thanks!

Hello Andy,

First of all, I am very sorry about any inconvenience you may have with the W3 Total Cache plugin.
I must assure you that our plugin which has 1.6 million active installations is not any kind of malware, and I was confused by your question because you mentioned the Wp Fastest Cache plugin in the initial post.
I must also state that we have not received any emails or screenshots from you, regarding this issue or anything else.
You can always reach out directly to us using the website contact from https://www.w3-edge.com/contact/
Provide the details there and we will be more than happy to help you remove the plugin.
As I’ve mentioned before, I’ve checked your website and I can see that you have multiple layers of caching so there is a chance of a conflict with the rules added to the .htaccess file, and possibly something was cached on a server level or Cloudflare, especially if you have integrated the Cloudflare with the W3 Total Cache.
You can always upload the images to imgur.com and share the images here, but please reach out directly to us via the link provided https://www.w3-edge.com/contact/ and share the information there.
Pleas let me know here when you send an email.

Thanks!

Hello Adam,

YOu can upload the images to imgur.com and share the link.
Thank you for the feedback.
Can you please also share what you added to the Path to JAVA executable: and Path to JAR file: and what message you are getting when clicking the Test YUI Compressor button?
Thanks!

Hey Mel,

Thank you for reaching out and I am happy to answer.
As I’ve mentioned in the previous topic regarding this, security headers are an option in the W3 Total Cache, however, how and if you are going to use it, it depends on you, your website, and what you are trying to achieve so there is no single answer for this.
In W3 Total Cache Browser Cache settings there is a description for each option. Again, it’s up to you on what you are trying to achieve and how the website should behave, and this is why there are a lot of articles explaining the Security headers, however, there are no recommended settings, since every website’s traffic, purpose and content is different.

I hope this answers your question

Thanks!

Hello Mel,

Thank you for your feedback.
This is a public forum and any replies or topics must be approved by the Administrator to avoid potential spam or sharing of sensitive information.
The Security headers do not have any impact or conflict with Minify so you should not worry about this.
The security headers are an option in the W3 Total Cache, however, how and if you are going to use it, it depends on you, your website, and what you are trying to achieve so there is no single answer for this.

X-Frame-Options directives#
The X-Frame-Options header has three different directives in which you can choose from. These must be sent as an HTTP header, as the browser will ignore if found in a META tag. It is also important to note that certain directives are only supported in certain browsers. See browser support further below in this post. While it is not required to send this response header across your entire site, it is best practice to at least enable it on pages that need it.

1. deny directive#
The deny directive completely disables the loading of the page in a frame, regardless of what site is trying. Below is what the header request will look like if this is enabled.

X-Frame-Options: deny
This might be a great way to lock down your site, but it will also break a lot of functionality. The following two directives below are more common use cases for a typical website.

Examples of sites currently using the deny directive:

Facebook
GitHub

2. sameorigin directive#
The sameorigin directive allows the page to be loaded in a frame on the same origin as the page itself. Below is what the header request will look like if this is enabled.

X-Frame-Options: sameorigin
We have the sameorigin directive enabled on this website. With this directive enabled, only our website is allowed to embed an iframe of one of our pages. This is probably the most commonly used directive out of the three. It is a good balance between functionality and security.

It is also important to note that if a browser or plugin can not reliably determine whether the origin of the content and the frame have the same origin, this must be treated as deny.

Examples of sites currently using the sameorigin directive:

Twitter
Amazon
eBay
LinkedIn

3. allow-from uri directive#
The allow-from uri directive allows the page to only be loaded in a frame on the specified origin and or domain. Below is what the header request will look like if this is enabled.

X-Frame-Options: allow-from https://www.example.com/
This allows you to lock down your site to only trusted origins. But be careful with this directive. If you apply it and the browser does not support it, then you will have NO clickjacking defense in place.

As for the CSP (Content security policy) and GTM, please check the article below for more assistance with the setup:
https://developers.google.com/tag-platform/tag-manager/web/csp

I hope this helps!

Thanks!

Hello Mel,

Thank you for your feedback.
When implementing a Google tag manager script, The function then creates a new script element, sets its src attribute to the URL of the GTM JavaScript file, and appends it to the element of the HTML document. The id parameter passed to the GTM JavaScript file is the GTM container ID that identifies the specific GTM container that the website owner has set up in the GTM interface.
So you should not worry about any conflict with W3 Total Cache in this case.

As for the X-Frame-Options, you can enable this and set a Directive in Performance>Browser Cache>Security headers section
This tells the browser if it is permitted to render a page within a frame-like tag (i.e., <frame>, <iframe> or <object>). This is useful for preventing clickjacking attacks.

Thanks!

Hello Petus,

Thank you for reaching out and I am happy to assist you with this.
W3 Total Cache Pro licenses are valid on a per-install basis, meaning you need one for every WordPress instance you run. If you have three separate websites, you will need three licenses in total—one for each site. If you have five sites in a WordPress multisite instance, you need just one license for all five sites. If you are interested in bulk licensing, please email us for more information.

Hey Mel,

You are most welcome!

Thanks!

Hello Ryan,

Thank you for reaching out and I am happy to assist you with this.
The fact that the issue occurs sporadically and not to all users suggests that the problem is not specifically related to the W3 Total Cache. I’ve tested this on your website and I have not experienced an issue as you described.
Can you please temporarily disable W3 Total Cache and let me know if the problem keeps persisting?
Thanks!

Hello Mel,

Thank you for reaching out.
The optimal W3 Total Cache configuration takes into account several factors: your theme, your plugins, and the technologies available on the server. Since everyone’s site and traffic and theme are different, there is no one size fits all solution.
The mentioned guide is good, however, it all depends on your website.
All the settings related to the performance of your website are good. I’ve made the tests (check the screenshots) and in the report, there are no render-blocking files (total blocking time is 0ms), and the score is PERFECT! There are no console errors and there are no problems in the functionality of your website.
The Minify settings are spot on for your website.
Since the other topic is duplicate, I’ll remove it and you can ask any additional questions in this thread if you have any.

Thanks!

Hello Mel,

You are most welcome and thank you for your awesome review!

Thanks!

Hello Mel,

Thank you for your feedback.
I’ve checked the screenshot you shared and you added the path to the file to “Never minify the following pages:” instead of “Never minify the following JS files:”.
You should add it to the field below, save all settings and purge the cache.
Please check the screenshot below:

Thanks!