Created
April 17, 2013 14:06
-
-
Save szbl/5404571 to your computer and use it in GitHub Desktop.
Stop direct PHP execution via URL in directories like /wp-content/uploads/, certain plugins, etc.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <Files *.php> | |
| deny from all | |
| </Files> |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
This should stop remote PHP code execution. Ideally, this should be in the
/wp-content/directory and have affect recursively. There is no reason for PHP to be executed via URL in this directory within a WordPress installation.