About Garbage Files

Good to know series for the curious users

After a fresh WordPress installation and each time WordPress is updated to a new version some unuseful files – what we call garbage files (!) – are installed on your server. These files include:

  • readme.html
  • license.txt
  • wp-config-sample.php

In particular readme.html provide a possible attacker with information about the WordPress version installed on your system — that info can let the attacker know how to ruin your site.

To enhance security FencePress can automatically remove all garbage files from your installation.

Important: as the readme.html file name is localised it is possible that we forgot to include it out garbage files list. In such cases it will not be deleted — please let us know by sending us the name of the readme.html file in your language and we will add it in the next update.