# WordPress default index.php for various directories

**URL:** https://discourse.roots.io/t/wordpress-default-index-php-for-various-directories/9560
**Category:** bedrock
**Created:** 2017-05-09T21:58:34Z
**Posts:** 3

## Post 1 by @ethanclevenger91 — 2017-05-09T21:58:34Z

Using the create-project option, Bedrock doesn’t set up WordPress’s default “// Silence is golden” index.php files. This seems problematic, as a visitor could then (unlikely) hit `mysite.com/app/plugins` and see everything installed, right? Is this something I should be concerned about, or something the project should perhaps take care of?

---

## Post 2 by @swalkinshaw — 2017-05-09T22:01:38Z

This is something that should be taken care of by your web server ideally. People in WP-land just include those files to cater to the lowest-common denominator: sites on shared hosting.

Your web server should be set up to deny folder listings.

---

## Post 3 by @ethanclevenger91 — 2017-05-11T14:45:37Z

And wouldn’t you know it, mine is configured to do so. Excellent, thanks!