Below are the instructions I found to secure both of the above folders using htaccess. Has anyone used these? Is it worth the effort or does it cause more issues then it is worth? Order Allow,Deny Deny from all <Files ~ "\.(css|jpe?g|png|gif|js)$"> Allow from all </Files> If we want to allow certain plugins such as Democracy, we can append the following to our wp-content/.htaccess file: <Files "democracy.php"> Allow from all </Files>