How to close /wp-includes from listing?

Question

htaccess

I found on one of my sites by going to the address http://site.ru/wp-includes a
listing of files in the directory



, but on other sites at this address it gives a message of this type



. What are the consequences of an open directory for viewing?
And maybe someone will tell you how to close it correctly? perhaps an empty index.html file in this folder will suffice?

Answer 1

An empty index.php file in the directory or code in .htaccess , in the root directory of the site:

# Запрещаем просмотр директорий
Options -Indexes

You can also add:

# Запрещаем показ ответов сервера
ServerSignature Off

Answer 2

By the way, the "empty" index.php in this directory was just for these purposes, and someone deleted it. Be careful.

Answer 3

Use the iThemes Security Plugin