I installed latest WordPress 3.5 in my CentOS server. When I tried accessing
http://example.com/wp-includes/, I received a listing of the directory: (Index of wp-includes).
I added the following code at the top of
.htaccess file, and it fixed the issue:
Options -Indexes IndexIgnore .htaccess */.??* *~ *# */HEADER* */README* */_vti*
When I try accessing PHP files in
wp-content using a web-browser (for example:
http://example.com/wp-includes/class-smtp.php), it shows a blank screen. I think it should show "Permission denied" or something like this. Am I correct?
How can I achieve this? I'm concerned if my website is vulnerable to attacks. I am already aware of the Hardening WordPress article.
Here are my directory and file permissions:
- Files have permission 644