Block access to wordpress folders

  • Resolved raha1988ab

    (@raha1988ab)


    4 months, 3 weeks ago

    Hi

    Is it possible to change something that return wordpress folders with 403 error code?

    /wp-includes/

    /wp-content/

    Cpanel / WHM im using

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Support hjogiupdraftplus

    (@hjogiupdraftplus)

    Hi @raha1988ab,

    Sorry not getting can you please let me know the details,

    Generally, media images, etc are uploaded in the wp-content folder so it should not be forbidden to show the 403.

    for wp-includes are library like jquery etc so it should also not forbidden and show 403

    Regards

    Thread Starter raha1988ab

    (@raha1988ab)

    HI @hjogiupdraftplus Thank you for reaching out and your information

    Please cheek this url status code:

    https://www.ads-software.com/wp-content/

    https://wordpress.com/wp-content/

    Yes, We have a file in wp-content but there is no reason to show this folder with the status of 200, inside that folder are plugins, themes, and uploads that should be accessible but not for main folder

    also for wp-includes or wp-admin

    is there any solution?

    Plugin Support hjogiupdraftplus

    (@hjogiupdraftplus)

    Hi @raha1988ab

    Right now AIOS does not have the solution so /wp-content/ if accessed it do not show 200 code as index.php inside it is being executed.

    WP security > Firewall > .htaccess rules have the – option to Disable index views

    which will disable listing of the contents of a directory if it doesn’t contain an index.php file and .htaccess is supported.

    so /wp-includes/ and /wp-content/uploads/ etc folder directory listing is disabled.

    I will create internal ticket for this.

    Regards

Viewing 3 replies - 1 through 3 (of 3 total)
  • You must be logged in to reply to this topic.