Protect WP Config File from Phishing Attacks
Returns a blank page if anyone tries to load wp-config.php or common backup filenames directly in a browser.
What you get
- Latest stable plugin ZIP from WordPress.org
- Public source on GitHub for review and contribution
- GPL v2-licensed code, free for personal and commercial use
Install
- Download the ZIP and upload via Plugins → Add New → Upload Plugin.
- Activate from the Plugins screen.
- No configuration required.
Source code
The full source lives on GitHub at https://github.com/thisismyurl/protect-wp-config-from-phishing-attacks. Issues and pull requests welcome.
WordPress.org listing
Originally published at https://wordpress.org/plugins/protect-wp-config-from-phishing-attacks/.
Ready for the Next Step?
If this is relevant to your goals, we can scope practical next steps for Protect WP Config File from Phishing Attacks.
Rate And Review This Content
Found this useful? Leave a quick rating and short review. Approved submissions are stored as testimonials.