WordPress.org

Ready to get started?Download WordPress

Forums

[resolved] Security flaw need advice help (4 posts)

  1. ranjitcool
    Member
    Posted 4 years ago #

    Hey Guys,

    Slowly learning wordpress.

    When I access the URL to my style.css in my website it actually lets me download it.

    I would like to prevent a user from going directly to http://www.sitename.com/wp-content/themes/themename/sytle.css and download that.

    How do I prevent this?

    Please assist

    Thanks
    RJ

  2. Mark / t31os
    Moderator
    Posted 4 years ago #

    If you don't want people to see your code, the only sure way to stop people getting at it, is to not put it on the web.

    Even if you could prevent the URL being requested, there's still ways to get at your CSS without querying for it directly. You'd be wasting energy bothering to try blocking people...

    Furthermore, this is not a security flaw (can't see how it's in any way related), CSS deals with styling not authentication.

  3. Rev. Voodoo
    Volunteer Moderator
    Posted 4 years ago #

    yeah, as @t31os_ is implying, this is normal behaviour. Your css is always accessible, hell, it's how we are able to provide a lot of help on here.... looking at people's source code, and css

    people are not able to edit your css..... so no worries

  4. ranjitcool
    Member
    Posted 4 years ago #

    thanks for the replies guys, i appreciate your time.

    RJ

Topic Closed

This topic has been closed to new replies.

About this Topic