Using the create-project option, Bedrock doesn’t set up WordPress’s default “// Silence is golden” index.php files. This seems problematic, as a visitor could then (unlikely) hit mysite.com/app/plugins and see everything installed, right? Is this something I should be concerned about, or something the project should perhaps take care of?
This is something that should be taken care of by your web server ideally. People in WP-land just include those files to cater to the lowest-common denominator: sites on shared hosting.
Your web server should be set up to deny folder listings.
2 Likes
And wouldn’t you know it, mine is configured to do so. Excellent, thanks!