Title: Fatal Error in requests to “http(s)://DOMAIN/wp-includes/blocks/”
Last modified: August 16, 2021

---

# Fatal Error in requests to “http(s)://DOMAIN/wp-includes/blocks/”

 *  [r1baum](https://wordpress.org/support/users/r1baum/)
 * (@r1baum)
 * [4 years, 9 months ago](https://wordpress.org/support/topic/fatal-error-in-requests-to-https-domain-wp-includes-blocks/)
 * Hi,
 * for unknown reasons bots started to request the uri [Our-Domain]/wp-includes/
   blocks/ which are all ending in a fatal error.
 * PHP Fatal error: require(): Failed opening required ‘ABSPATHWPINC/blocks/archives.
   php’ in …/wp-includes/blocks/index.php on line 9
 * In your documentation you advise to restrict the access to /wp-includes/, but
   the .htaccess snippet does not prevent access to subfolders in wp-includes/ except
   for wp-includes/theme-compat/
 * > [Hardening WordPress](https://wordpress.org/support/article/hardening-wordpress/)
 * “/wp-includes/blocks/” is probably not intended to be accessed directly but i
   do not know if it is really save to block it.
 * Any advice would be very helpful!
 * We use WP 5.7.2 and WP 5.8
 * Best,
 * Max
    -  This topic was modified 4 years, 9 months ago by [r1baum](https://wordpress.org/support/users/r1baum/).

Viewing 2 replies - 1 through 2 (of 2 total)

 *  Moderator [t-p](https://wordpress.org/support/users/t-p/)
 * (@t-p)
 * [4 years, 9 months ago](https://wordpress.org/support/topic/fatal-error-in-requests-to-https-domain-wp-includes-blocks/#post-14773371)
 * We have some recommendations to protect against brute force attack in this document:
   [https://wordpress.org/support/article/brute-force-attacks/](https://wordpress.org/support/article/brute-force-attacks/)
 *  Thread Starter [r1baum](https://wordpress.org/support/users/r1baum/)
 * (@r1baum)
 * [4 years, 9 months ago](https://wordpress.org/support/topic/fatal-error-in-requests-to-https-domain-wp-includes-blocks/#post-14774908)
 * Thank you for your feedback.
 * But coming back to /blocks/, is it save to block direct requests like
 * `RewriteRule ^wp-includes/blocks/ - [F,L]`
 * without breaking any WP functionality?
    -  This reply was modified 4 years, 9 months ago by [r1baum](https://wordpress.org/support/users/r1baum/).

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘Fatal Error in requests to “http(s)://DOMAIN/wp-includes/blocks/”’ is
closed to new replies.

 * In: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/)
 * 2 replies
 * 2 participants
 * Last reply from: [r1baum](https://wordpress.org/support/users/r1baum/)
 * Last activity: [4 years, 9 months ago](https://wordpress.org/support/topic/fatal-error-in-requests-to-https-domain-wp-includes-blocks/#post-14774908)
 * Status: not resolved

## Topics

### Topics with no replies

### Non-support topics

### Resolved topics

### Unresolved topics

### All topics