From the course: WordPress: Building a Secure Site

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

Secure your WordPress site by disabling PHP executions

Secure your WordPress site by disabling PHP executions - WordPress Tutorial

From the course: WordPress: Building a Secure Site

Start my 1-month free trial

Secure your WordPress site by disabling PHP executions

“

- [Instructor] In order for users to easily upload themes, plugins, images and videos onto your site, WordPress makes certain directories writable automatically. When a directory is writeable, that basically just means it can be edited. This is handy for the usability of your site as you can make certain things writable for certain users, et cetera but it can open up a backdoor access to hackers who want to upload malware to the site. One way to prevent this is to disable PHP execution in some directories via the htaccess file. To start this process, download your htaccess file. Open it up. Copy and paste this code into the file and then save it. Upload this newly edited file into your wp-includes folder. Then go to the wp-content folder and open up the uploads folder, which is nested inside. Add the newly edited htaccess file to this folder as well. Doing this will prevent new malicious PHP files from…

Contents