License.txt | Is it a security risk?

  • Resolved icing

    (@icing)


    11 years, 4 months ago

    I noticed some visits to mysite.com/license.txt.

    Is there a vulnerability related to that? Should I hide this file using htaccess rule? Or delete it?

    What other security fixes should I take care of? I am already using a security plugin.

    Thanks

Viewing 4 replies - 1 through 4 (of 4 total)
  • Moderator Jan Dembowski

    (@jdembowski)

    Forum Moderator and Brute Squad

    It’s not a security risk at all.

    Thread Starter icing

    (@icing)

    Leave it there?

    Moderator Jan Dembowski

    (@jdembowski)

    Forum Moderator and Brute Squad

    It doesn’t hurt anything and is part of the WordPress files so yes.

    As I understand things, there was a time when people began removing certain files like that while trying to hide from hackers their versions of WordPress. After an update, I used to removed that file and one or two others that do not have to be there in order for WordPress to work, but now I understand “security through obscurity” is about as useless as trying to hide a piece of cheese behind the refrigeration without having protected it with a trap.

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘License.txt | Is it a security risk?’ is closed to new replies.