Avoid direct access to php files – Exclude folder?

[aqt]

Hi I have a plugin which uses a lot of direct hits to php files and I would like to exclude some folders of the plugin, however I haven’t managed to do so.

What I put in the exclude list is
wp-content/plugins/newsletter/do/, wp-content/plugins/newsletter/emails/

but this doesn’t exclude wp-content/plugins/newsletter/do/view.php for example So what is the way to exclude a folder?

Thanks

EDIT:I forgot to say that I use Version 3.00 of the plugin since this works fine for me so far. Is this the problem?

• This topic was modified 9 years, 7 months ago by aqt.

[Suman M.]

Hi, the “Exclude Files” option box is not for excluding access to listed files. Actually it’s just the reverse – “avoid direct access to PHP files…except listed in Exclude Files”

You can add the line below in “Replace URLs” (this will redirect all requests for /do/view.php to 404 not found page)
wp-content/plugins/newsletter/do/view.php==nothing_404_404

[aqt]

Exactly I want to allow access to that folder while having the option checked. So I want to exclude it from the list and doing so above doesn’t exclude it.

[Suman M.]

Adding “wp-content/plugins/newsletter/do/view.php” to Exclude List will actually allow access to “wp-content/plugins/newsletter/do/view.php”. HMWP doesn’t have any option to exclude particular script/file.

[aqt]

it says that you can exclude a folder if you wish.

So I want to exclude (meaning allow access on) those two folders
wp-content/plugins/newsletter/do/
wp-content/plugins/newsletter/emails/

Putting wp-content/plugins/newsletter/do/, wp-content/plugins/newsletter/emails/ in the exclude list doesn’t work.

[Suman M.]

You do not need to specifically add those two folders to allow access to them. They should be accessible by default if you uncheck “avoid direct access to php files” option.

[aqt]

Yes I know that but I don’t want to allow access on any other place inside the website, so is there any way to exclude (meaning allow access on) a folder or folders in that list?

• This reply was modified 9 years, 6 months ago by aqt.

[Suman M.]

HMWP plugin’s aim is to basically hide the fact that your site uses wordpress. The functionality that you are looking for isn’t currently possible with this plugin.

[aqt]

It is mentioned here. See attached image So you should remove this from there or do you plan to add this functionality later?? Anyway now it is confusing as it is

Attachments:

You must be logged in to view attached files.

[Suman M.]

Please find the attachment for the explanation.

Attachments:

You must be logged in to view attached files.

[aqt]

So can you tell me what do you mean by “or folders” in the attached picture i provided. It’s misleading

[Suman M.]

“folders” means all PHP files within that folder.

[aqt]

ok and how can I do this? What to I have to write if let’s say the folder is wp-content/plugins/plugin1/folder1/

[Author]

Posts