Comments on: Secure you WordPress Installation

By: Dexter Panganiban

Dexter Panganiban — Sun, 09 Nov 2008 18:26:20 +0000

Thanks for the link in your latest post

By: jayl

jayl — Sun, 09 Nov 2008 09:47:53 +0000

Im not a coder as well. The tip of Marhgil did not work out for me, I did a post about an alternative way of disabling wp directories. It worked for me. thanks, jayl jayls last blog post..Hide Those Wordpress Directory Files

By: Hide Those Wordpress Directory Files | Hinlalato

Hide Those Wordpress Directory Files | Hinlalato — Sun, 09 Nov 2008 09:41:47 +0000

[...] the Options All -Indexes tip of sir Marhgil did not work out for you? or you figured out that Sir Dexter’s method of making blank index.html and uploading it to your /wp-content/plugins/ or in any folder is just a bit [...]

By: Dexter Panganiban

Dexter Panganiban — Sun, 09 Nov 2008 04:45:50 +0000

Well We can ask Marhgil about it.. I am not really that Php progrmamer.. But I will try to find it out.

By: jayl

jayl — Sun, 09 Nov 2008 00:16:30 +0000

how about a redirection of your 404′s to your sitemap this way your “visitor” would just be dumbfounded at your categories, archives and pages. Also good for the bots

jayls last blog post..Sad Guys on Trading Floors

By: Rayland

Rayland — Tue, 29 Jan 2008 11:54:27 +0000

just insert it on any line actually.. as long as it is on a line of its own.

# BEGIN WordPress

RewriteEngine On
RewriteBase /
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]

# END WordPress

Options All -Indexes

the “# END WordPress” are just comments like in css where they have it as /* comment here */ . so they just get ignored. those rewrite rules are for your permalinks so dont remove them.

Youre Welcome

By: Dexter

Dexter — Tue, 29 Jan 2008 11:41:04 +0000

@ Rayland

I have this

# BEGIN WordPress

RewriteEngine On
RewriteBase /
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]

# END WordPress

Where do I have to insert it..? Thanks in advance

By: Rayland

Rayland — Tue, 29 Jan 2008 09:51:01 +0000

this should work on all apache servers..

i know what you mean by how it can be destructive to SEO. but how i see it, adding that line merely prevents users from seeing the folder contents. but it doesnt prevent robots from accessing the folders and the contents within.

By: Dexter

Dexter — Tue, 29 Jan 2008 07:48:53 +0000

@ Rayland

Is this applicable in all types of platform.. I mean applicable sa Apache….( I am not an expert on this ) ussually I am afraid to touch .htaccess.. It can be helpful or distructive to SEO..

By: Rayland

Rayland — Mon, 28 Jan 2008 23:11:22 +0000

a faster way to prevent access to those directories is by adding a line to your .htaccess file..

Options All -Indexes

adding that line denies access to directories which do not have an index file, but contain other sensitive files. you might want to try it. it sure saves a lot of time compared to adding an index file to each and every directory you want to protect.