• While I understand one can simply add “.git” to the list of directory exclusions, I’d like to argue that there wouldn’t be any benefit to scanning the directory in the first place. We are seeing multiple issues from customers where the plugin will essentially “hang” on the .git directory, and we have to manually add it to the exclusions list. Let me know your thoughts!

    http://wordpress.org/plugins/better-wp-security/

  • The topic ‘Prevent .git directories from scanfiles()’ is closed to new replies.