Your Backup Folder MIGHT Be Visible to the Public” in WordPress

Introduction

While using a database backup plugin in WordPress, you may encounter the warning:

Your backup folder MIGHT be visible to the public

This warning usually appears when the backup directory does not contain a .htaccess file to restrict public access.

Cause

The issue commonly occurs after installing a WordPress database backup plugin such as WP-DBManager. The plugin expects a .htaccess file inside the backup directory for security purposes.

If the file is missing, the plugin displays the warning message.

Prerequisites

Before proceeding, ensure:

• Access to WordPress files via:
  • File Manager, or
  • FTP/SSH access
• Existing .htaccess file in the WordPress root directory
• Backup plugin already installed

Implementation

Step 1: Locate Main .htaccess File

Find the .htaccess file in your WordPress root directory:

/public_html/.htaccess

Step 2: Copy the .htaccess File

Copy the existing .htaccess file.

Step 3: Paste into Backup Directory

Paste the copied file into:

/wp-content/backup-db/

Step 4: Verify

Refresh the WordPress admin panel and confirm the warning message is removed.

Alternative Secure .htaccess

Instead of copying the entire file, you can create a simple .htaccess file inside the backup folder with:

deny from all

This prevents public access to backup files.

Conclusion

This warning in WordPress occurs because the backup directory lacks protection from public access. Adding a .htaccess file to the backup folder secures the directory and resolves the warning.