The plugin is called “WP safely disable directory browsing”. That includes the words “safe” and “browsing.” I think it’s pretty fair to assume that “disable directory browsing” implies “disable browsing to an entire directory, including the files within it, because those are the resources that actually matter.” If you can access a file via its URL in your browser, that is browsing. If an unauthenticated user can access sensitive files, that is not safe. The plugin’s description claims that it will “improve the security of your wordpress blog” when in fact it does nothing of the sort. But it would be easy for a user that is not particularly knowledgeable to overlook this fact.
And by the way, you could have easily written that post without being a dick, but you didn’t. Let’s make the world a better place by not being assholes to strangers on the Internet. Do we have a deal?
