sabrx

Dear Tom,

thanks for you reply. I must disagree with you, because:

– over 80% of WordPress installations are powered by Apache, hence presence of .htaccess file is meaningful
– file names of backups do not contain any random characters, but time data. In case I backup every day, an attacker can easily guess the file name by running an automated tool that will check all 86400 (24*60*60) combinations, which is not that many. Don’t you agree?

Kind regards
Erich Szabo