Title: index.php Inexistent In wp-includes Folder
Last modified: August 20, 2016

---

# index.php Inexistent In wp-includes Folder

 *  Resolved [ariff](https://wordpress.org/support/users/ariff/)
 * (@ariff)
 * [14 years, 10 months ago](https://wordpress.org/support/topic/indexphp-inexistent-in-wp-includes-folder/)
 * I think this should be rectified in the next update or so.
    Try looking at yourdomain.
   com/wp-includes and you can see all the contents inside it. This was discovered
   by [my friend](http://azmanishak.net/index.php/2011/07/security-patch-vol3-tahukah-anda-bahawa-wordpress-3-2-1/).

Viewing 4 replies - 1 through 4 (of 4 total)

 *  [esmi](https://wordpress.org/support/users/esmi/)
 * (@esmi)
 * [14 years, 10 months ago](https://wordpress.org/support/topic/indexphp-inexistent-in-wp-includes-folder/#post-2204841)
 * Perhaps your friend could learn how to turn directory indexing off on his web
   server?
 *  Thread Starter [ariff](https://wordpress.org/support/users/ariff/)
 * (@ariff)
 * [14 years, 10 months ago](https://wordpress.org/support/topic/indexphp-inexistent-in-wp-includes-folder/#post-2204885)
 * Even if directory indexing is turned off, you can still access files like this
   [http://yourdomain.com/wp-includes/admin-bar.php](http://yourdomain.com/wp-includes/admin-bar.php)
   thus revealing the username for ftp account.
 * Don’t know how severe this issue is as I’m not an expert. Just pointing this 
   out. If anybody feel that something should be done, then by all means do something.
 * If not, then thanks for reading.
 * Cheers!
 *  Moderator [Ipstenu (Mika Epstein)](https://wordpress.org/support/users/ipstenu/)
 * (@ipstenu)
 * 🏳️‍🌈 Advisor and Activist
 * [14 years, 10 months ago](https://wordpress.org/support/topic/indexphp-inexistent-in-wp-includes-folder/#post-2204934)
 * Even if an index.php file is there, you can still access files directly. Nothing
   WP can do about that except what they have (with wp_die() calls to anyone who
   access the file directly).
 * By the way, [http://yourdomain.com/wp-includes/admin-bar.php](http://yourdomain.com/wp-includes/admin-bar.php)
   gives me an error 500 on all my sites. All the direct links for things in wp-
   includes are blank pages (php errors, as expected) or error 500.
 * Your friend is overreacting 🙂 It’s not severe.
 *  Thread Starter [ariff](https://wordpress.org/support/users/ariff/)
 * (@ariff)
 * [14 years, 10 months ago](https://wordpress.org/support/topic/indexphp-inexistent-in-wp-includes-folder/#post-2205002)
 * Thanks for your input.

Viewing 4 replies - 1 through 4 (of 4 total)

The topic ‘index.php Inexistent In wp-includes Folder’ is closed to new replies.

## Tags

 * [wp-includes](https://wordpress.org/support/topic-tag/wp-includes/)

 * In: [Requests and Feedback](https://wordpress.org/support/forum/requests-and-feedback/)
 * 4 replies
 * 3 participants
 * Last reply from: [ariff](https://wordpress.org/support/users/ariff/)
 * Last activity: [14 years, 10 months ago](https://wordpress.org/support/topic/indexphp-inexistent-in-wp-includes-folder/#post-2205002)
 * Status: resolved

## Topics

### Topics with no replies

### Non-support topics

### Resolved topics

### Unresolved topics

### All topics