Viewing 4 replies - 1 through 4 (of 4 total)
  • Plugin Author Thomas Townsend

    (@smb-dev)

    Not at present. That’s something we are working on but it’s not an easy nor quick fix due to the complexity of how resumes and apps are inter connected.

    In the meantime this may be an option:

    Protect /wp-content Directory

    WordPress holds all your media files in here and they’re an asset you want search engines to crawl. But, “/wp-content” is a place where your themes and plugins reside, too. You don’t want to allow access to those sensitive .php files.

    In order to work you need to create a separate .htaccess file (just use your FTP client and create a file with no name and give it an “.htaccess” extension) and put it in your /wp-content directory. This code will allow access to images, CSS, java-script and XML files, but deny it for any other type.

    order deny,allow
    deny from all
    <files ~ ".(xml|css|jpe?g|png|gif|js)$">
    allow from all
    </files>

    That’s it. Your WordPress website should be a lot safer place now. There’s just one last thing you may want to do and that’s protecting the .htaccess file(s).

    Protect the .htaccess Itself

    The .htaccess file itself is still open to attacks. The following code snippet will stop anyone from accessing (reading or writing) any file that starts with “hta“.

    <files ~ "^.*\.([Hh][Tt][Aa])">
    order allow,deny
    deny from all
    satisfy all
    </files>

    Hope this helps

    Thread Starter designarmy

    (@designarmy)

    Thanks Thomas. very much looking for this fix sooner.

    Plugin Author Thomas Townsend

    (@smb-dev)

    It in the works but it’s down the road a bit. will keep you posted.

    Looking forward to this capability.

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Change File Upload Folder’ is closed to new replies.