Stop directory listing by default

  1. Nick


    Currently, a default installation of WordPress allows the /wp-content/plugins/ and /wp-content/themes/ folders to be listed in the web browser.

    Please could WordPress include a blank index.html file in these and other affected folders by default? It could help prevent malicious visitors discovering and exploiting plugins and themes that are known to be vulnerable.

    Posted: 9 years ago #

  2. Inactive


    Just makes good sense. Otherwise it's like buying a new car without seat belts.

    Posted: 9 years ago #
  3. This was done a version or two ago, and now all directories contain an empty index.php file.

    Posted: 8 years ago #

RSS feed for this topic

Topic Closed

This topic has been closed to new replies.

  • Rating

    8 Votes
  • Status

    This idea has been implemented