Is it possible to move the entire wp-content folder outside of the Web root? I need to prevent anyone to view any asset file (images, pdfs, movies etc) with a direct url to the file…
Any ideas? Or could I do this safely with htaccess?
2 Answers
See Ben Word – How to Hide WordPress
Summary:
In the Roots Theme we’re taking several steps to help make it not so
obvious that you’re using WordPress:
- Cleaning up the output of
wp_head
and removing the generator from RSS feeds- Hiding
/wp-content/
by rewriting static theme assets (CSS, JS, and images), rewriting the plugins directory, and also changing the
location of WordPress uploads- Cleaning up the output of navigation menus with a custom walker
- Bonus: root relative URLs