0

Everyone peoples can easily acess to my wp-includes how can i hide or not visible files to users can anybody help me regarding it this is my wordpress website link see everybody can see this https://pifserver.ml/wp-includes

0

Considering you got an Apache server, use this full code in the .htaccess file:

# Block the include-only files.
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^wp-admin/includes/ - [F,L]
RewriteRule !^wp-includes/ - [S=3]
RewriteRule ^wp-includes/[^/]+\.php$ - [F,L]
RewriteRule ^wp-includes/js/tinymce/langs/.+\.php - [F,L]
RewriteRule ^wp-includes/theme-compat/ - [F,L]
</IfModule>
# BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>
# END WordPress

As a bonus, I would also add this:

<IfModule mod_autoindex.c>
    Options -Indexes
</IfModule>
  • bro can u resolve thats my .htaccess file please look into it and just say how should i put in this to resolve issue ibb.co/QKC2YJg – Forums Pif Feb 7 at 10:10
  • Just put the code before or after what you already have. – Lucien Dubois Feb 7 at 13:26
  • i did this bro but its showing me 500 error after that – Forums Pif Feb 7 at 19:15
  • 1
    i can send u my server ftp details if u wanna check – Forums Pif Feb 7 at 19:17
  • 1
    Yea thanks bro love you alot 😁 appreciated – Forums Pif Feb 8 at 18:36

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Not the answer you're looking for? Browse other questions tagged or ask your own question.