• About
    • History of Dallas SEO
    • SEO Expert Witness Services
  • Contact
  • Topics
    • Bing
    • Blogging
    • Branding
    • Domain Names
    • Google
    • Internet Marketing
    • Link Building
    • Local Search
    • Marketing
    • Public Relations
    • Reputation Management
    • Search Engine Marketing
    • Search Engine Optimization
    • Search Engines
    • Social Media
    • Tech
  • Advertise
  • Email Newsletter

Bill Hartzer

Bill Hartzer on Search, Marketing, Tech, and Domains.

Home » Search Engine Optimization » One Simple Way to Protect Your WordPress Plugins

One Simple Way to Protect Your WordPress Plugins

Posted on June 19, 2007 Written by Bill Hartzer

wordpress

I’m amazed that so many popular bloggers use WordPress and don’t protect their WordPress plugins. Here’s one simple way to protect people from seeing exactly which WordPress Plugins you’re using.

First, here’s a little background about it: If you don’t have a default web page (usually index.html or default.html or something similar) in each of your web site’s folders, then people can gain direct access to that folder’s contents by accessing it in a web browser. For example, try going to www.yourdomain.com/images/ in your favorite browser. See what I mean? You’ll most likely see a list of all the files in that folder. For most people, seeing the image files in your images folder is not a big deal. In fact, I even let people see the files I have in my images folder. No big deal.

But what if folders in your installed apps are open?

That’s right. What if there are key folders in applications or scripts that are left open for everyone to view? Exactly–they can view all the files in that folder (or directory).

Like me, you may be proud of the different WordPress plugins that you are using if you’re using WordPress to power your site or blog. Did you know that a default installation of WordPress actually doesn’t protect your WordPress plugins folder? Well, it doesn’t! So, most likely, people can go here and view all of the plugins you have installed, even some custom ones if you’re using them:

www.yourdomain.com/wp-content/plugins

Try it now on your own WordPress-powered site or blog. There’s a good chance that you’ve left yourself wide open. And if you’re using an anti-spam plugin then people can see which one(s) you’re using. Not good.

To be honest with you, I kind of stumbled across the fact that most people have their plugins open for everyone to view. I was interested in a certain blogger’s plugins so-to-speak and which ones they were using because I kept seeing some additional pings and additional links to his blog (yes, this blogger shall remain nameless, but you know who you are if you’re reading this post!). I actually checked some (ahem) other popular bloggers, even bloggers in the Technorati 100 and they’ve left their plugins folder wide open.

So, if you’re reading this, here’s (finally) the way to protect your WordPress plugins from being viewed by snoops:

Copy the following code and paste it into notepad or whatever text editor you use:

plugin-fix.txt

Save the file as index.html and upload that file to your blog’s wp-content/plugins folder. Voila! Fixed! Now you have to FTP into that folder or go to the Admin section of your blog in order to view the plugins you’re using.

If people view your WordPress plugins and see which ones you have installed, then it may not actually be a big deal to you. But, if you’re like me and you use certain plugins to add certain functionality to your WordPress install, then most likely you will not want people snooping around, looking at all of the WordPress plugins that you have installed.

Filed Under: Search Engine Optimization

About Bill Hartzer

Bill Hartzer is CEO of Hartzer Consulting, an SEO Consulting firm that includes services such as search engine optimization, technical SEO audits, domain name consulting, and online reputation management. As an SEO Expert, Mr. Hartzer frequently serves as an SEO Expert Witness and Domain Name Expert Witness in legal cases worldwide. He also oversees DNAccess.com, a company that provides brand protection and monitoring, domain name background checks, and stolen domain name recovery services.

Recent Posts

  • Revolutionizing TV Advertising: Waymark and DanAds Join Forces for Instant, AI-Generated Ad Magic December 6, 2023
  • Winston AI Unleashes ‘Luka’ (V3.0): The Unbeatable AI Guardian with 99.98% Accuracy in Spotting Fake Content December 6, 2023
  • Revolutionizing Content Creation: BrightEdge Unleashes Copilot for Content Advisor December 6, 2023
  • Unleashing the Power of Quora Ads December 5, 2023
  • Is Santa Real? Here’s What 3 Search Engines and 3 AIs Say December 4, 2023
  • iKala Unleashes AI Magic with 2 Million Influencers in Southeast Asia December 1, 2023
  • Baidu’s A.I. Advertising Platform Boosts Lead Quality and Cuts Costs for European Native Ad Company December 1, 2023
  • Web.com’s AI Wizardry Transforms Website Building for Entrepreneurs November 30, 2023
  • Revolutionizing Marketing: Jasper Unveils AI Partnership Program November 30, 2023
  • Revolutionize Your Social Media Game: Hookle’s AI Image Suggestions Set to Transform Small Business Marketing November 29, 2023
  • Unlocking Internet Secrets: ICANN’s Game-Changing RDRS Service Revealed November 29, 2023
  • Fansearch Launches OnlyFans Search Engine November 28, 2023
  • Actual SEO Media’s Approach to Discovered-Currently Not Indexed in Google Search Console November 28, 2023
  • Yoast’s New AI Writing Assistant Slashes Time Needed to Craft SEO Gold for WordPress Sites November 28, 2023
  • Revolutionizing Black Friday: Logie.ai’s Game-Changing Tools Set to Transform E-Commerce Sales November 22, 2023
  • Revolutionizing Holiday Shopping: Storyblok’s Survey Unveils Shocking Consumer Trends, Exposing Website Trust and AI Skepticism November 21, 2023
  • TicketNetwork’s $825,000 Fine Exposes Dark Secrets of Ticket Prices! Unveils Deceptive Tactics and the Scandal of Search Engine Ads November 21, 2023
  • Temu Strikes Back: Scam Websites Shut Down in Battle Against Fraudsters November 20, 2023
  • Identity Digital Secures Prestigious Spot in Newsweek’s 1000 Excellence Index November 20, 2023
  • Unlock Your Social Media Fortune: Doba Direct App Sparks a Money-Making Revolution for Influencers November 20, 2023

Hartzer Domains

Bare-Metal Servers by HostDime

US Agency Awards Judge

DFWSEM logo

Bill Hartzer is a Brand Ambassador for:



Industry Friends

I Love SEO
WTFSEO
SEO By the Sea
Jeff Lenney
Jeff Gabriel
Scott Hendison
Dixon Jones
Brian Hartzer
Navah Hopkins
DNAccess
SEO Dallas

Connect With Bill Hartzer

Bill Hartzer on Twitter
Bill Hartzer on Instagram
Hartzer Consulting on Facebook
Bill Hartzer on Facebook
Bill Hartzer on YouTube

Categories

  • Advertising (22)
  • AI (24)
  • Bing Search Engine (6)
  • Blogging (42)
  • Branding (16)
  • Domain Names (223)
  • Google (241)
  • Internet Marketing (27)
  • Internet Usage (87)
  • Link Building (53)
  • Local Search (43)
  • Marketing (185)
  • Marketing Foo (30)
  • Pay Per Click (6)
  • Podcast (18)
  • Public Relations (8)
  • Reputation Management (10)
  • Search Engine Marketing (44)
  • Search Engine Marketing Events (50)
  • Search Engine Marketing Firms (21)
  • Search Engine Marketing Jobs (33)
  • Search Engine Optimization (171)
  • Search Engines (210)
  • Social Media (209)
  • Social Media Marketing (1)
  • Tech (7)
  • Web Analytics (17)
  • Webinars (1)

Note: All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only, and are mentioned only to help my readers. All other trademarks cited herein are the property of their respective owners. Use of these names, logos, and brands does not imply endorsement.




Hartzer Consulting



Website, Content, and Marketing by Hartzer Consulting, LLC.

Copyright © 2023 ·