WP Manifestindependent plugin directory
manifest / security / disable-directory-browsing-htaccess-security-for-wordpress

Ade IndexShield Directory Lock

Disable Apache directory browsing (Options -Indexes) by adding a safe, marker-based block to your site’s root .htaccess on activation.

by Adeleye Ayodeji · github.com/adeleyeayodeji/disable-directory-browsing-htaccess-security-for-wordpress · website

★ 0stars
0forks

Install

No release zip yet. The repository archive installs, but the folder name will carry the branch suffix and updates will not flow:

wp plugin install https://github.com/adeleyeayodeji/disable-directory-browsing-htaccess-security-for-wordpress/archive/refs/heads/main.zip
Readme github.com/adeleyeayodeji/disable-directory-browsing-htaccess-security-for-wordpress ↗

IndexShield Directory Lock

Disable directory browsing on Apache servers by adding Options All -Indexes to your site’s root .htaccess on plugin activation.

Description

Disable Directory Access is a lightweight security-hardening plugin that prevents visitors from viewing directory listings (for example, when an index.php/index.html file is missing).

On activation, the plugin safely inserts the following rules into your site’s root .htaccess using WordPress markers:

  • # BEGIN Disable Directory Access Plugin
  • Options All -Indexes
  • # END Disable Directory Access Plugin

On deactivation, the plugin removes only its own marked block.

Important notes:

  • This plugin targets Apache .htaccess. If your server does not use .htaccess (for example, some Nginx setups), these rules won’t apply.
  • The plugin requires write access to the root .htaccess file.

Installation

  1. Upload the indexshield-directory-lock folder to the /wp-content/plugins/ directory.
  2. Activate the plugin through the Plugins menu in WordPress.
  3. Confirm your root .htaccess contains a block wrapped in # BEGIN Disable Directory Access Plugin / # END Disable Directory Access Plugin.

Frequently Asked Questions

Does this work on Nginx?

No. Nginx does not use .htaccess. You’ll need to disable autoindex/directory listing in your Nginx site configuration.

Will this overwrite my existing .htaccess rules?

No. The plugin uses WordPress marker blocks and only adds/removes its own marked section.

What if my .htaccess is not writable?

The plugin won’t be able to write the rules. Ensure the web server user has permission to update the site root .htaccess.

Changelog

0.1.3

  • Updated plugin.

0.1.2

  • Updated plugin namespaces and text domains to match new plugin slug.

0.1.1

  • Update plugin URI and text domain to match new plugin slug.

0.1.0

  • Initial release.

Upgrade Notice

0.1.0

  • Initial release.