Skip to content
This repository has been archived by the owner on Apr 21, 2021. It is now read-only.

Make sure all theme files have no direct access #13

Open
gicolek opened this issue Oct 20, 2015 · 0 comments
Open

Make sure all theme files have no direct access #13

gicolek opened this issue Oct 20, 2015 · 0 comments

Comments

@gicolek
Copy link
Contributor

gicolek commented Oct 20, 2015

All theme included files should be prevented from accessed directly.

if ( ! defined( 'ABSPATH' ) ) {
    exit; // Exit if accessed directly
}

The line should be placed to the top of the file.

The same should be applied to directories. In case of unsafe hosting, where directory content can be viewed an empty index.php file should be placed.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant