Upload Directory is searchable
-
I saw in the forum that this issue was solved a year ago with an update.
However, in my wp dashboard this error was popping up…
“Your store’s uploads directory is browsable via the web. We strongly recommend configuring your web server to prevent directory indexing.”
My web host told me that this must be an woocommerce error, here is what they told me:
“1) This URL https://www.vital-generation.de/wp-content/uploads/, is the URL that has the uploads directory but it is showing a 404 error meaning that it is not browsable. If this was browsable, then we would see a list of files that we could access. From our understanding, the error that WooCommerce is reporting is basically that the uploads folder is viewable in the browser so if we went to https://www.bob.com/wp-content/uploads we would see a list of all the files in the uploads folder which would be a problem. So instead, what you should see is a 403 forbidden access error because not everyone should have access to that information.
2) You can also try to pass this along to WooCommerce to show them that browsing is not enabled. https://bloggingwizard.com/disable-directory-browsing-wordpress/#:~:text=Link%3A%20http%3A//yoursitename,browsing%20is%20enabled”
How can I fix this?
PS: I have the newest version of woocommerce installed.
The page I need help with: [log in to see the link]
-
Hey @marvin12,
When I visit these URLs they both give a forbidden access message, so you can’t access any information or your files on those pages:
– https://www.vital-generation.de/wp-includes/
– https://www.vital-generation.de/wp-content/uploads/
Link to image: https://snipboard.io/Ednqry.jpgThis could probably be a false positive, so can you try adding the following line of code to see if it removes the warning?
add_filter( 'uploads_directory_is_public_notice', '__return_false' );For adding code snippets you can use a plugin like Code Snippets
Thanks.
- The topic ‘Upload Directory is searchable’ is closed to new replies.
