How the hell do I secure wp-includes and wp-content

  • Resolved nemo-maritime

    (@nemo-maritime)


    15 years, 11 months ago

    How am I supposed to secure these files?? I have tried .htaccess and that did secure it, but it bloced access to some code from some other code and some parts of my site did not work, at least from the admin side. So my question is how in the hell am I supposed to secure these freakin files? I already have index in my wp-content, but I have seen that some sites block access to wp-includes and wp-content, how can I do this for blog security. Also, here is what I have for the .htaccess file now:

    For wp-includes:
    Order Allow,Deny
    Deny from all
    <Files ~ “.(css|jpe?g|png|gif|js)$”>
    <Files ~ “.(/themes/)$”>
    Allow from all
    </Files>

    For wp-content:
    Order Allow,Deny
    Deny from all
    <Files ~ “\.(css|jpe?g|png|gif|js)$”>
    Allow from all
    </Files>

    <Files ~ “.(/themes/)$”>
    Allow from all
    </Files>

Viewing 2 replies - 16 through 17 (of 17 total)
  • Thread Starter nemo-maritime

    (@nemo-maritime)

    I put it in the main .htaccess, where wp-config resides, but I still have a small issue. It wont allow the WordPress 2.7 admin tools to use the ajax feature. So its still the same issue I have had with blocking the folders completely. It lets me log in and all (only through wp-admin, wp-login redirects to 404), but none of the drop down options work from the dashboard. Thought I’d ask since I think its supposed to work with no prob.

    EDIT – it actually doesn’t look like it has anything to do with that code anymore. I have taken it out, along with any other .htaccess, but it still wont let the Ajax feature/drop down features work.

    Thread Starter nemo-maritime

    (@nemo-maritime)

    Never mind, I got it. I had to use a different ftp program. The one I used did not get it off. I tried checking it with DW and it got it off. It works great. Thank you for all of the help, I would have never gotten done without it.

Viewing 2 replies - 16 through 17 (of 17 total)
  • The topic ‘How the hell do I secure wp-includes and wp-content’ is closed to new replies.