[wp-trac] [WordPress Trac] #4759: Blank index.php in wp-content subdirs

WordPress Trac wp-trac at lists.automattic.com
Thu Aug 16 14:36:56 GMT 2007


#4759: Blank index.php in wp-content subdirs
-------------------------+--------------------------------------------------
 Reporter:  ozh          |       Owner:  anonymous             
     Type:  enhancement  |      Status:  new                   
 Priority:  normal       |   Milestone:  2.3 (trunk)           
Component:  Security     |     Version:                        
 Severity:  trivial      |    Keywords:  index opendir security
-------------------------+--------------------------------------------------
 Ola

 Directory /wp-content has had its "Silence is golden" blank index page for
 years now, why not add this file by default to /plugins & /themes ?

 It would greatly reduce script kiddies ability to find exploitable plugins
 ([http://www.google.com/search?q=inurl:%22wp-
 content/plugins%22+intitle:%22index%20of%22 example])

-- 
Ticket URL: <http://trac.wordpress.org/ticket/4759>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list