Post Pic

WordPress tip: Quickly secure plugin files

Many plugins are made of only *.php files and most of the time they do allow direct access. Depending on what’s in your files that might be a potential security hole. Today’s tip will show you how to prevent direct access to plugin files.

Paste the following in your .htaccess file. Don't forget to backup the file before edition!

<Files ~ "\.(js|css)$">
  order allow,deny
  allow from all
</Files>

This recipe has been submitted by Greg Winiarski. Thanks for your contribution!

Leave a Comment

* Name, Email, Comment are Required

RSS FEED
 FOLLOW ME
Follow me on Twitter SUBSCRIBE BY EMAIL