How to fully protect a folder plugins?

  • Dear friends,

    Is there any way to protect my plugins folder? For there is no way to know which plugins are installed on my WordPress?

    I think my blog are not as vunerável, I’m not expert but it is not possible to list the plugins folder simply by entering this:

    https://www.siteexample.com/wp-content/plugins

    But if I try to put it this way:

    https://www.siteexample.com/wp-content/plugins/akismet

    I can know that this plugin is installed and if I know that plugin has security flaws that could be exploited at least we know that the plugin is installed.

    Is there any way to protect direct access to wp-content/plugins folder?

    Example: When someone tries to access the folder directly from this 404 error or some other form of protection.

    The question here is totally restrict dsa way that we can not know which plugins are installed.

    Thank you for your attention.

Viewing 2 replies - 1 through 2 (of 2 total)

  • Your webhost can switch it off so when a directory is viewed that does not have an index it does not list the contents.

    You can also add a blank index file if you wish.
    Just create a file, call it index.php and upload it to the directory you are concerned about. The file doesn’t have to have anything in it.

    Thread Starter insideinside

    (@insideinside)

    I had found an article about putting a blank index.php but still do not think it solves.

    An example, if I try to access this address tere will answer with certainty:

    https://www.siteexample.com/wp-content/plugins/akismet/akismet.php

    There would be no way to directly access the browser when the user is redirected to a 404 page or something that protects access direct.

    Thank you for your attention.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘How to fully protect a folder plugins?’ is closed to new replies.