How to disable directory browsing in WordPress

How to Disable Directory Browsing in WordPress


Do you want to disable listing searching in WordPress?

Directory browsing can set your web page at danger by displaying vital data to hackers which can be used to exploit vulnerabilities in your site’s plugins, themes, or even your hosting server.

In this posting, we will demonstrate you how you can disable directory searching in WordPress.

How to disable directory browsing in WordPress

What Does Disabling Directory Searching in WordPress Do?

Each individual time another person visits your web site, your web server will course of action that request.

Generally, the server provides an index file to the visitor’s browser, this sort of as index.html. Nevertheless, if the server simply cannot locate an index file, then it could display all the information and folders in the requested directory alternatively.

This is directory searching, and it’s often enabled by default.

If you have at any time visited a web page and found a list of documents and folders as a substitute of a webpage, then you have witnessed directory searching in action.

A WordPress site with directory browsing enabled

The dilemma is that hackers can use listing browsing to see the information that make up your website, together with all the themes and plugins that you are utilizing.

If any of these themes or plugins have recognized vulnerabilities, then hackers can use this information to consider management of your WordPress site or web-site, steal your data, or carry out other actions.

Attackers may also use listing searching to seem at the private facts inside of your information and folders. They could possibly even copy your website’s contents, including articles that you would normally charge for these kinds of as book downloads or on-line programs.

This is why it is regarded a best observe to disable directory searching in WordPress.

How to Verify is Directory Browsing is Enabled in WordPress

The least difficult way to test regardless of whether listing searching is at present enabled for your WordPress internet site is by only traveling to the /wp-incorporates/ folder website link like this: https://instance.com/wp-includes/.

You will want to replace www.instance.com with your website’s URL.

If you get a 403 Forbidden or similar information, then listing searching is by now disabled on your WordPress web page.

A website with directory browsing disabled

If you see a list of data files and folders in its place, then this means that listing searching is enabled for your web page.

A WordPress site with directory browsing enabled

Considering the fact that this makes your internet site additional vulnerable to assault, you’ll typically want to block listing searching in WordPress.

How to Disable Directory Searching in WordPress

To disable directory listing, you are going to want to incorporate some code to your site’s .htaccess file.

To obtain the file, you are going to need an FTP shopper, or you can use the file manager application within your WordPress internet hosting command panel.

If this is your initially time applying FTP, then you can see our comprehensive guide on how to hook up to your web page making use of FTP.

Just after connecting to your web page, simply open your website’s ‘public’ folder and locate the .htaccess file. You can edit the .htaccess file by downloading it to your desktop and then opening it in a text editor like Notepad.

At the really base of the file, simply just insert the next code:

It will glimpse anything like this:

The WordPress .htaccess file

As soon as you are completed, save your .htaccess file and add it again to your server utilizing an FTP consumer.

That’s it. Now if you visit the identical http://case in point.com/wp-contains/ URL, you’ll get a 403 Forbidden or similar message.

How to disable directory browsing in WordPress

We hope this posting aided you discover how to disable listing searching in WordPress. You may also want to see our best WordPress security guideline, or see our professional pick of the finest WordPress membership plugin to defend your files.

If you preferred this article, then be sure to subscribe to our YouTube Channel for WordPress online video tutorials. You can also uncover us on Twitter and Facebook.



9 thoughts on “How to Disable Directory Browsing in WordPress

  1. I’vе been exploring for a little for any higһ quаlity artiⅽles or blog posts on this sort of area .
    Exploring in Yahoo I finally stumbleԀ upon this web site.
    Reading this information So i’m satisfied to expresѕ that I’ve a very jսst right uncanny
    feeling I found out just what I needed. I most indubitably will make сertain to don?t forget this
    web site and give it a look regularly.

Leave a Reply

Your email address will not be published.