• Resolved juleekarad

    (@juleekarad)


    If we prevent directory browsing
    – by adding this code on .httaccess
    – “Options -Indexes”

    Will it better safety,How do you think ?

    Thank you

Viewing 2 replies - 1 through 2 (of 2 total)
  • Yes. But test first, most modern hosting has directory browsing (by public) blocked by default. Blocking directory browsing is a basic security setting, no big deal, easy to test and experiment with. MTN

    Hi @juleekarad,

    By default WordPress has included index.php files within most of the directories such as wp-content/plugins/ to avoid listing out which plugins a site has installed.

    You should not rely on blocking directory listing for safety.

    For example, if you have a secret file named super-secret-file-203.txt that contains all your passwords in a directory, you shouldn’t rely on blocking directory listing to hide that file from your users.

    Blocking directory listing should not be about blocking sensitive information.

    For example, the wp-content/plugins folder: It’s not a catastrophe that your users know which plugins you have installed on your site, but they don’t need to know. So, we can block that information if we want.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Should we disable wordpress directory browsing ?’ is closed to new replies.