Wordpress allows direct browser access to a lot of folders in the WP installation. This is not an immediate security threat, but if people can see what plugins you have installed then it could lead to problems if one of those plugins is later compromised.
With the image folder, its not really security, but its nice to hide your images a bit more from prying eyes!
Its really simple to do, just create a new blank page in any editor and call it index.html and drop it into your image folders and your plugins folder (/wp-content/plugins/) That way, when anyone tries to access the folders by browser they will default to the blank index page and not see your files!
For a list of all our WP security posts so far have a look here
One Response to “Wordpress: Security 1; Put an index.html in your Plugins folder”
You must be logged in to post a comment.
admin:
HI Eric, haha someone is paying attention! Its not really deliberate in there is no real plan, its more we are a British company and linking to the BBC is a nice easy link to put in, you know that the Beeb is never going to have anything inappropriate on their site, so its something clean to link to. Its either that or Google really! But no real plan, dont worry I dont work for them!