• would be nice an option to rename readme.txt files automatically from all themes/plugins.

    so, even they will auto-update,the plugin should rename the readme files again if it finds. (i.e. to something random name, like: readme_3242089reyhf.txt )

    that will make things a bit better in terms of “obscurity”, because hiding wp versions from links doesnt matter,i.e.:

    example.com/wp-content/plugin/xyz.js?vers=123

    because anyone can access:

    example.com/wp-content/plugin/readme.txt

    another simpler approach might be restricting access to readme.txt from .htaccess, just many people use NGINX and they might have problems, so, renaming readme.txt is also good way. (btw, there should be option in plugin -use htaccess way or rename method)

Viewing 1 replies (of 1 total)
Viewing 1 replies (of 1 total)
  • You must be logged in to reply to this topic.