WordPress.org

1. hellocatfood
   Member
   Posted 11 months ago #

   Is there a plugin available or any other way to hide the uploads folder/directory so that if a user were to go to it it'd return a Not Found or Forbidden message?

2. LenK
   Member
   Posted 11 months ago #

   Drop a htaccess file in the wp-contents folder.

   Order Allow,Deny
   Deny from all
   <Files ~ "\.(css|jpe?g|png|xsl|gif|ico|js)$">
    Allow from all
   </Files>

   This will return a 404 for wp-contents and all subdirectories beneath it such wp-content/uploads, /themes, /plugins

3. hellocatfood
   Member
   Posted 11 months ago #

   Cheers :-)

4. LenK
   Member
   Posted 11 months ago #

   Actually an ever better way is place the following in a htaccess file,
   Options -Indexes

   That will turn off indexing for whatever folder it resides in as well as any subfolders beneath it. For example, if you place it in wp-contents it will protect not only wp-contents but wp-contents/themes, wp-contents/plugins and wp-contents/uploads as well.

   If you place it at root it will work for all foldes/subfolders sitewide.

5. tretsim
   Member
   Posted 11 months ago #

   .htaccess will work or just place an index.html/index.php in the directories with whatever message you want. The first method is best but the second is easiest.

6. LenK
   Member
   Posted 11 months ago #

   A word of caution: if you use an index file make sure you don't use a PHP index file in the plugin directory. It may bork the dashboard.

Reply

You must log in to post.