[wp-trac] Re: [WordPress Trac] #1038: Limit access to php files

WordPress Trac wp-trac at lists.automattic.com
Wed Apr 30 17:51:27 GMT 2008


#1038: Limit access to php files
-----------------------------+----------------------------------------------
 Reporter:  anonymousbugger  |        Owner:  matt   
     Type:  defect           |       Status:  closed 
 Priority:  normal           |    Milestone:         
Component:  Security         |      Version:         
 Severity:  normal           |   Resolution:  wontfix
 Keywords:  needs-patch      |  
-----------------------------+----------------------------------------------
Changes (by Otto42):

  * version:  2.5 =>

Comment:

 It still might make sense for WordPress to add a statement to the
 .htaccess like this:

 <Location /wp-includes>
     Order Deny,Allow
     Deny from all
 </Location>

 Sort of as a preventative measure. Is there any particular downside to
 doing this that I am unaware of?

-- 
Ticket URL: <http://trac.wordpress.org/ticket/1038#comment:21>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list