My site was infected with a malware, after restore a backup and run a scan using Wordfence, it mentions:

/wp-content/debug.log is publicly accessible and may expose source code or sensitive information about your site

Can you please help me to make wp-content/debug.log inaccessible?

Please try creating a .htaccess file in the “wp-content” directory (if it is not there already) and add the following rules into it:

<Files "debug.log">

Order Allow,Deny

Deny from all

</Files>

Hope this helps. Let me know if it works for you. Thanks!

Kind regards,

Ankit

/wp-content/debug.log is publicly accessible and may expose source code or sensitive information about your site

Can you please help me to make wp-content/debug.log inaccessible?