Today i found that my web server doesn’t make Directory Listing by default. And this can be a vulnerable for WordPress since wp-content directory can be exploit. So test your blog, if your web server doesn’t turn off the directory listing by default please follow this steps (only works for Apache web server):
- Create or Edit existing .htaccess
- Add this code there:
Options -Indexes - Save and close .htaccess file
- Test It!
That step will turn off the Directory Listing. Thank you for reading, and have a nice day… 🙂
Very useful, thank you! Worked perfectly.
You're welcome Nicole 🙂
Very useful, thank you! Worked perfectly.
You’re welcome Nicole 🙂
Thanks!
How do i test my wordpress directory listing?
What a simple solution. I was adding dummy index.html files to folders to prevent directory listing. This is MUCH easier. Thanks for the information! 🙂
Only just came across this whilst searching how to stop directory listing, so simple! Thanks so much =)
Thank you for sharing this knowledge.