Strengthen the security of your WordPress site with the Disallow Access WP Sensible Files Module

In the dynamic and constantly evolving environment of WordPress, the security of your website must always be a priority. In response to this need, we've developed the Disallow Access WP Sensible Files for our WPMasterToolKit plugin. This module is designed to block access to sensitive files in your WordPress installation, reducing the risk of exploitation by malicious users.

Which plugin can Disallow Access WP Sensible Files replace?

Traditionally, the protection of sensitive files such as readme.html and license.txt would be provided by security plugins such as SecuPress, Solid Security, All-In-One Security, Wordfence or by making manual changes to your .htaccess or nginx.conf. Thanks to our module, we've simplified this process by automating the addition of the necessary configurations for you.

Discover the module : Prohibit plugin uploads

What is the purpose of the Disallow Access WP Sensible Files module?

This module is designed to automatically add security rules to your web server, whether it uses Apache or Nginx, to prevent access to certain default WordPress files that could reveal information about your installation, such as the readme.html and license.txt. It ensures that these files cannot be viewed by the public, thus strengthening the security of your website.

How do I use the Disallow Access WP Sensible Files module?

Using this module is simple and straightforward. Once you've activated the module in WPMasterToolKit, it automatically starts working by checking the type of server used by your hosting.

For Apache

If your site uses Apache, the plugin modifies the file .htaccess to block access to sensitive files automatically, you don't need to do a thing.

The following code will be injected directly into your .htaccess :

# BEGIN WPMastertoolkit: Disallow Access WP Sensible Files

	order allow,deny
	deny from all

# END WPMastertoolkit: Disallow Access WP Sensible Files

For Nginx

For Nginx servers, go to Nginx Code Snippets to retrieve the code snippet to copy and paste into your configuration file.

Auto delete wp-config-sample

In addition, this module automatically deletes the wp-config-sample.phpfile, often left by default in WordPress installations. This file, while not critical, could provide useful information to attackers if publicly accessible. With Disallow Access WP Sensible FilesYou don't have to worry about it: we do it for you.

Deletion after each update

This file is added with every WordPress update, which can be time-consuming if you do it manually, but don't worry, Disallow Access WP Sensible Files does it for you after each WordPress core update.

Conclusion

The module Disallow Access WP Sensible Files is an effective, lightweight solution for those looking to strengthen the security of their WordPress site without the need for cumbersome plugins or tedious manual configuration. By integrating this module into WPMasterToolKit, we offer a unified, automated approach to security, enabling your site to remain protected against unwanted access to critical files. By keeping your site secure with simple adjustments, you can stay focused on improving your content without worrying about potential vulnerabilities.