[wp-trac] [WordPress Trac] #61003: Direct access to .php files in /wp-includes is not protected out of the box

[WordPress Trac]

#61003: Direct access to .php files in /wp-includes is not protected out of the box
--------------------------+------------------------
 Reporter:  teo8976       |       Owner:  (none)
     Type:  defect (bug)  |      Status:  closed
 Priority:  normal        |   Milestone:
Component:  Security      |     Version:
 Severity:  normal        |  Resolution:  duplicate
 Keywords:                |     Focuses:
--------------------------+------------------------
Changes (by jorbin):

 * status:  reopened => closed
 * version:  6.5 =>
 * resolution:   => duplicate
 * severity:  critical => normal


Comment:

 As pointed out previously, errors like this are a server configuration
 issue. If you would like a 403, 404 or even 418, you should configure your
 server to return it.

 Marking as a duplicate of #36177, but it could also likely be considered a
 duplicate of #30806, #44700, #45773, #47154 and #48049 (and likely more).

 Also, conversations can continue on closed tickets, there is no need to
 reopen if there is additional information to share.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/61003#comment:3>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform