mncombine strip out commented sections from cached html?

I added those comments in to help debug should anyone have issues getting scripts to combine. I’m not sure how knowing the tags used to combine the files poses a security risk. However, if you wanted to remove them you could by modifying the plugin. I’m not sure if I would add this as an option or not. I think there are already just enough options to be confusing :).

Modify class-plugin-mncombine.php
replace lines 1048 and 1049 with this

//$implode = array_keys( (array)$data );
//$implode = implode( ", ", $implode );
$implode = "";

And replace line 1065 with

//file_put_contents( $path, "/*$key*/\n$content\n\n", FILE_APPEND | LOCK_EX );
file_put_contents( $path, "\n$content\n\n", FILE_APPEND | LOCK_EX );

That should do it for the CSS.

HEHE ty neil, I understand if you do not wish to implement this into the plugin, Its not that confusing when you get to grips with it :).

In regards to the security I mentioned, this really does boil down to what kind of website you are building, It depends on if the website you build with wordpress would be a high target for hackers etc, if hackers can see what theme files and plugins you are using it gives them ammunition to find security vulnerability’s by first scouring through your HTML to find out exactly what plugins you are using, from there they can themselves find out lots of different security flaws within these plugins to perform all sorts of attacks,especially if one or 2 of these plugins are needed for functionality and have not been updated very much and there are no other alternatives.

It is a point that does often come up and a proven fact that 90 percent of website hacks on wordpress are via plugin security holes, the way my websites are setup are not just security by obscurity, they are infact locked down so no-one can hunt down any single plugin or theme file that I am using via the HTML method, I do understand there are other ways but that would need the hacker already being aware of the plugins used by spotting the way they function within the websites, if you are building a social network for example, or a website that hosts numerous files you can be become a target if busy, so the steps I take along with lockdown of wp-admin and lots more details I could mention does infact help tighten things up to a level far far beyond a default open to anyone approach. ??