The easiest way to achieve this is to add,
Options -Indexes
..to your .htaccess
file.
Specifically your .htaccess
file should look like this,
# BEGIN WordPress
Options -Indexes
...etc
...etc
# END WordPress
This is one way and probably the most efficient way.
This method will prevent any direct access outside of blog posts, pages, or template files which call any images or files from this directory.
A usual read overall:
http://httpd.apache.org/docs/current/mod/core.html
Access to the (retracted aforementioned statement – if your permissions are set incorrectly you may expose yourself to harm) /uploads/
folder should not pose a security risk, in theory,
Related Posts:
- Compare 2 directories in windows
- get_template_directory() vs bloginfo( ‘template_directory’ ) vs TEMPLATEPATH
- Change upload directory for PDF files
- What’s the purpose of index.php in wp-content directory? [duplicate]
- How do I serve static content on same domain as WordPress
- Can I change get_template_directory_uri()?
- Custom Post Type Archive in Sub Folder
- How to point my domain to a WordPress install in a sub-directory?
- Can I put my WordPress theme files in another folder?
- Multiple domains for multiple single installs
- How to Create Hierarchical Directory for Nation Wide Mental Health Services
- How to create new folder in wp-content root same like upload folder?
- How do I set up single sign on for multiple WP installs across the same domain?
- Why doesn’t WP_PLUGIN_DIR definition use DIRECTORY_SEPARATOR?
- How to copy one folder to another folder recursively
- Disable to create folders for every years and months in uploads folder
- local folder permissions vs chown — security considerations
- How is a student directory best handled in WordPress?
- Creating directory in uploads: mkdir vs wp_mkdir_p
- Cant get wordpress to work on subdirectory
- Two identical wp-includes directories on server
- What is the recommend directory in which I can upload a new library?
- Second wordpress installation on subdirectory
- Install theme on multiple domains
- How to create an Online Dictionary Using WordPress? [closed]
- Include file from higher level
- how to create a folder in wordpress
- wordpress blog in subdirectory or subdomain
- Accessing WordPress installation in its own directory at domain root
- Right permissions to WordPress directory
- Can I install a new WordPress site inside a sub-directory of an existing WordPress site?
- Template Hierarchy tag-{slug}.php directory
- more than one upload directory?
- Change directory of javascript files
- Theme in wp-content but my index.php search theme files in root
- get_query_var not working for subdirectory
- Subdomain redirects to subdirectory [closed]
- How to make use of WP templates within a nested site structure?
- Plugins will only be installed with 777 on folder. Solution?
- How to create directory using username within theme
- 2 WordPress sites in 2 sibling folders on one domain
- Main WP page and subfolder WP with the same name. How to prioritize for main Wp
- Auto-create a post with last 10 images in WordPress directory
- Copy Folder to another Folder using WP Filesystem
- Unable to update WordPress or install plugins/themes
- Moved WordPress site to new server, directory permissions not working correctly
- Moving from one test to multiple final environments
- WordPress in a sub directory but not images
- Should I install blog on subdomain or subdirectory?
- Moving WP from /blog to root directory
- Should custom directories be created under the wp-content directory?
- Use of Folders within WordPress
- Folder keeps popping up in my public_html directory and overriding WordPress page structure
- Hosting my WordPress site out of a subdirectory
- Clean installation missing its /wp-content folder
- Path in dev server works; same path in prod server is broken
- What is wp-admin/meta for?
- google xml sitemap won’t work on directory install
- What plugins create a directory on the root directory of WordPress? [closed]
- How can i shift my chosen posts to a subdirectory?
- Where to put robot.txt and sitemap.xml for wordpress installed in its own directory
- Automating WP application directory creation (domain name passed as a variable argument)
- How to disable directory files from accessing?
- Move WordPress from Root to Subfolder
- Wp-CLI not working with WordPress installed with composer
- How to visit php file in my custom directory under site root directory
- Does WordPress refer to any files outside of the main install folder (and database)?
- WordPress File Structure
- Getting Internal server in sub folder pages
- Impossible to index an upload folder with 10k files
- Upload an image at frontend > Create direction and/or rename filename possible?
- wordpress sub-directory sites on a sub-domain?
- Trying to setup a dev subdomain, but url loads as /dev/ instead
- Best way to transfer WordPress install to root of directory when I’m ready to launch?
- How to move a WordPress installation to a subdirectory
- Is there a way to create folders restricted to specific users to open?
- WordPress page for one specific page on Google Cloud hosted website?
- WordPress hosted on subfolder of domain causing customizer to constantly refresh and is requesting jquery from root domain
- WordPress Bedrock breaking plugin links
- Error in the paths of one of the plugins when changing the plugin directory
- Serve WordPress site as root domain with WordPress files in subdirectory in nginx server
- How to install WordPress on sub directory in ubuntu 16.4 in same vhost with AngularJS
- Bedrock WordPress retro-porting to standard WP installation: is this allowed?
- How to Install WP to Subdomain but Serve on Subdirectory?
- Rrestrict access to static pages if user is not logged in
- Change the WordPress files structure
- Downloadable content file structure
- WordPress makes 404 error when going to domain folder
- Using same root header in subfolder wp blog – Header disapears on Single Posts
- Run multiple installs using the same wp-admin & wp-includes?
- How do I get WP site to show in both root and sub-directory
- How to replace a wordpress installation in root directory with another in a subdirectory?
- Move WordPress with changed name ‘wp-content’
- FTPS Uploads – wp-content cannot be found
- Index (Home) page not displayed when running wordpress in a subdirectory
- Hide/Remove Wp Directory /wp-content/uploads/
- The right way to go about creating a WordPress site from a static site which has WordPress installs in its subdirectory
- Plugin could not be deleted due to an error: Unable to locate WordPress Plugin directory
- Multisite Sub-directories Installation
- Could moving my WordPress installation from /var/www/html/ to /var/www/ break the application?