403 forbidden for certain files

[michaelbeil]

Should we harden some of our files with a 403?

This one comes to mind: https://github.com/bearded-avenger/aesop-core/blob/master/admin/views/index.php.

Could use:

<?php
//Nothing to see here
header('HTTP/1.0 403 Forbidden');

Or depending on the file:

<?php
if ( ! defined( 'ABSPATH' ) ) {
    header( 'HTTP/1.0 403 Forbidden' );
    die;
}