Disable Directory Listings vs Apache Status & Info

Prevent virtual directory listing services from listing the contents of directories, and/or show a page in place of a directory’s listing. The Apache web server can be configured to automatically display the listings of the contents of a web site’s file directory if no index file (i.e. index.html or index.php) is present. This can expose files and information to visitors. Of course the web server could be configured to not do this (the recommended approach), but sometimes you don’t have permission (you’re on a shared host), the know-how, or you want to selectively disallow virtual directory listings. That’s where this plugin can help. If you want to test if your site has virtual directory listings enabled, try visiting http://www.YOURSITE.com/wp-includes (obviously, change the domain to match your own). If you see a listing of PHP files then virtual directory listing is enabled for your site. This plugin can prevent visitors from seeing the contents of certain (or all) directories on your site (assuming your web server generates virtual directory listings). It also allows you to use a WordPress page as the index for a directory By default, the following directories are protected: wp-includes/ wp-content/ wp-content/plugins/ wp-content/themes/ It does NOT protect any other directory by default. You can change this via the plugin’s admin settings page. TIP: When this plugin is activated (and more specifically, ater the permalink structure is updated as per the instructions below), WordPress will generate the themed 404 – Not Found page. If you were to create a Page with the same name as one of the directories being disabled (i.e. ‘wp-includes’ or ‘wp-content’) then that page will be displayed instead of the 404 error message. If you want to display a page for the ‘plugins’ and ‘themes’ directory, you must create them as children pages of a ‘wp-content’ page. NOTE: This plugin only works for the Apache web server. Links: Plugin Homepage | Author Homepage

When you want to use server-info and/or server-status with Apache server, you must modify (right in your .htaccess file) the rewrite rules generated by WordPress. And you must do it each time WordPress modify and regenerates the rules. Apache Status & Info do it for you, without you having to intervene. Just activate it and that’s it! In addition to this, Apache Status & Info allows you to monitor your Apache configuration and settings, right in your WordPress admin (see screenshots for example). Apache Status & Info is part of PerfOps One, a suite of free and open source WordPress plugins dedicated to observability and operations performance. Apache Status & Info is a free and open source plugin for WordPress. It integrates many other free and open source works (as-is or modified). Please, see ‘about’ tab in the plugin settings to see the details. Support This plugin is free and provided without warranty of any kind. Use it at your own risk, I’m not responsible for any improper use of this plugin, nor for any damage it might cause to your site. Always backup all your data before installing a new plugin. Anyway, I’ll be glad to help you if you encounter issues when using this plugin. Please read carefully the FAQ at the bottom of this page before requesting support. Privacy This plugin, as any piece of software, is neither compliant nor non-compliant with privacy laws and regulations. It is your responsibility to use it with respect for the personal data of your users and applicable laws. This plugin doesn’t set any cookie in the user’s browser. This plugin doesn’t handle personally identifiable information (PII). Donation If you like this plugin or find it useful and want to thank me for the work done, please consider making a donation to La Quadrature Du Net or the Electronic Frontier Foundation which are advocacy groups defending the rights and freedoms of citizens on the Internet. By supporting them, you help the daily actions they perform to defend our fundamental freedoms!