Soft 404 at /wp-content/plugins/

[miqrogroove]

/wp-content/plugins/index.php would be better written with a proper 404.

<?php
header('HTTP/1.0 404 Not Found'); // Silence is golden.
?>

Shouldn't it technically be a 403?

Technically, there is nothing in the response entity, so either 403 or 404 is appropriate.

Why not 410? Nobody should come back, no?

As per ​RFC2616 if a reason is to be given for denying access then 403 should be used, otherwise 404 should be used. In this case I would say 403 would be the better response code with a reason included for forbidding access.

Adds a 404 error message

If this is going to change, then it should change for all wp-content directories, i.e., /themes and /uploads also.

Why should we include this in the uploads/ directory as well?

I feel that a 403 would be a more appropriate response since there is actually a directory, just not that one permit access to access it.