Hi to All
I am grateful for all replies and therocket954 has been extremely helpful. I am securing my blog and am using Wordpress default theme. I have three more questions. therocket954 advises me to put blank index.php files into plugins,themes, wp-includes directory and any other directories I don't want people to browse. Do I do this by creating a file or folder in My Documents, call it index.php then upload it using my FTP which is Filezilla? Do I need to do this each time Wordpress is automatically updated? Also what other directories do I do this for or does it just involve any file named with directories in the file name? Thanks. Regards janice49.
Re blank .htaccess file to help secure WRDPRSS blog
Hi
I've been kindly advised that putting blank .htaccess files into my Wordpress default theme blog, ( into plugins, themes, wp-includes, directories) can help secure my blog. I've been advised if I add some type of code I can make the blank .htaccess file in plugins apply to all directories. Can someone please let me know how I create a blank .htaccess file and the code to help me further secure my Wrdprss blog and where to put this code. Please try to give me a thorough explanation as I'm a newbie. Thanks to all for your help so far including therocket954 and Nico . Regards janice49.
I've merged your 2 last threads. Please keep further questions on the same subject in the same thread.
As for the .htaccess file, you'd only have to create one single file and place it into your root directory, where all your WP files are in. And the .htaccess file should not be blank, it should contain the line of code I posted above.
If you have further questions, please reply here rather than creating a new thread!
Rather than creating blank index files, I'd just create an .htaccess file (or add this line if you already have one):
Code:
Options -Indexes
... this will automatically disable all directory indexes if there isn't an index file already.
Ahh.. that's very good advice!
Especially if you manually update Wordpress (i.e. delete the files from the server and upload the new version files) In doing this you might accidentally delete those blank index files.
As Nico suggests, if you put the .htaccess file in your root directory, you won't have to worry about it getting accidentally deleted when updating Wordpress.
therocket954 advises me to put blank index.php files into plugins,themes, wp-includes directory and any other directories I don't want people to browse. Do I do this by creating a file or folder in My Documents, call it index.php then upload it using my FTP which is Filezilla? Do I need to do this each time Wordpress is automatically updated? Also what other directories do I do this for or does it just involve any file named with directories in the file name? Thanks. Regards janice49.
Regards janice49.
Linear Mode
