Question Forbid execution of PHP in WordPress directories

[PeterH]

Server operating system version

Ubuntu 24.04

Plesk version and microupdate number

Plesk Obsidian 18.0.65

In many tutorials it is recommended to disallow execution of PHP scripts in the directories /wp-content/uploads/ and /wp-includes/. Now in the /wp-content/uploads/ directory that is no problem but if I put a .htaccess file disallowing execution of PHP scripts in the /wp-includes/ then WordPress will break. Is there another way to disallow execution of PHP in the /wp-includes/ directory?

 

[Oldiesmann]

Use the option in the security settings in the WP Toolkit extension. It doesn't break things.

 

[PeterH]

Thanks Oldiesmann, I didn't know WP Toolkit had such features because I never used it before. I bought it to use all the possibilities it offers. Thanks again.