Your Backup Folder MIGHT Be Visible to the Public” in WordPress
Introduction
While using a database backup plugin in WordPress, you may encounter the warning:
Your backup folder MIGHT be visible to the public
This warning usually appears when the backup directory does not contain a .htaccess file to restrict public access.
Cause
The issue commonly occurs after installing a WordPress database backup plugin such as WP-DBManager. The plugin expects a .htaccess file inside the backup directory for security purposes.
If the file is missing, the plugin displays the warning message.
Prerequisites
Before proceeding, ensure:
- Access to WordPress files via:
- File Manager, or
- FTP/SSH access
- Existing
.htaccessfile in the WordPress root directory - Backup plugin already installed
Implementation
Step 1: Locate Main .htaccess File
Find the .htaccess file in your WordPress root directory:
/public_html/.htaccess
Step 2: Copy the .htaccess File
Copy the existing .htaccess file.
Step 3: Paste into Backup Directory
Paste the copied file into:
/wp-content/backup-db/
Step 4: Verify
Refresh the WordPress admin panel and confirm the warning message is removed.
Alternative Secure .htaccess
Instead of copying the entire file, you can create a simple .htaccess file inside the backup folder with:
deny from all
This prevents public access to backup files.
Conclusion
This warning in WordPress occurs because the backup directory lacks protection from public access. Adding a .htaccess file to the backup folder secures the directory and resolves the warning.
