Wordpress How to Hide MainWP Child Plugin from Search Engines

when you manually browse you domain.com/wp-content/plugins/mainwp-child/ files can you access them on centmin mod wordpress install ?

i don't use mainwp-child plugin but test installed it and on centmin mod nginx installed wordpress via centmin.sh menu option 22, access to domain.com/wp-content/plugins/mainwp-child/mainwp-child.php will give 403 permission denied so search engines won't be indexing it as centmin mod default security for centmin.sh menu option 22 usually will prevent php scripts from public access in wp-content/plugins/* directories unless you whitelist them - see Wordpress - Wordpress 403 Permission Denied Errors

Code (Text):

curl -I http://domain.com/wp-content/plugins/mainwp-child/mainwp-child.php
HTTP/1.1 403 Forbidden
Date: Thu, 05 Sep 2019 13:17:40 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 146
Connection: keep-alive
Server: nginx centminmod
X-Powered-By: centminmod
X-Xss-Protection: 1; mode=block
X-Content-Type-Options: nosniff

 

centmin mod security only blocks *.php files not .html so mainwp-child/index.html results in blank page and is fine as index.html won't pose any security risk from access unlike if index.php was used so that's ok.

but if you tried to access php files like at http://domain.com/wp-content/plugins/mainwp-child/mainwp-child.php, will give 403 permission denied

jetpack's directory must use index.php and not index.html, hence 403

 

if it's valid search engine just block indexing via robots.txt for /wp-content/plugins/mainwp-child/