[wp-hackers] protecting wp-content/plugins ?

Ozh ozh at planetozh.com
Thu Aug 16 14:00:24 GMT 2007


Hello there

I wonder: how come there is no blank index.html file sitting in
wp-content/plugins ? This is such a trivial thing to do that I suspect
there must have been some ruling against it by the past (although I
cannot really see any reason why one shouldnt have this file)

I think it would greatly decrease script kiddies ability to discover
exploitable plugins in open directories
(http://www.google.com/search?q=inurl:"wp-content/plugins"+intitle:"index
of")


Cheers
Ozh

-- 
http://FrenchFragFactory.net ~ Daily Quake News
   http://planetOzh.com ~ Useless Blog & Code


More information about the wp-hackers mailing list