WordPress.org

Ready to get started?Download WordPress

Ideas

Stop directory listing by default

  1. Nick
    Member

    12345

    Currently, a default installation of WordPress allows the /wp-content/plugins/ and /wp-content/themes/ folders to be listed in the web browser.

    Please could WordPress include a blank index.html file in these and other affected folders by default? It could help prevent malicious visitors discovering and exploiting plugins and themes that are known to be vulnerable.

    Posted: 5 years ago #
  2. RogueHand
    Member

    12345

    Just makes good sense. Otherwise it's like buying a new car without seat belts.

    Posted: 5 years ago #
  3. This was done a version or two ago, and now all directories contain an empty index.php file.

    Posted: 4 years ago #

RSS feed for this topic

Topic Closed

This topic has been closed to new replies.

  • Rating

    12345
    8 Votes
  • Status

    This idea has been implemented