vinigarcia87/StormsFramework/master/bkp.htaccess - Htaccess File

vinigarcia87/StormsFramework/master/bkp.htaccess

# BEGIN iThemes Security
  # BEGIN Hide Backend
      # Rules to hide the dashboard
      RewriteRule ^(/StormsFramework/)?entrar/?$ /StormsFramework/wp-login.php [QSA,L]
    
  # END Hide Backend
  # BEGIN Tweaks
    # Rules to block access to WordPress specific files
    <files .htaccess>
      Order allow,deny
      Deny from all
    </files>
    <files readme.html>
      Order allow,deny
      Deny from all
    </files>
    <files readme.txt>
      Order allow,deny
      Deny from all
    </files>
    <files install.php>
      Order allow,deny
      Deny from all
    </files>
    <files wp-config.php>
      Order allow,deny
      Deny from all
    </files>
    
    # Rules to disable directory browsing
    Options -Indexes
    
    <IfModule mod_rewrite.c>
      RewriteEngine On
    
      # Rules to protect wp-includes
      RewriteRule ^wp-admin/includes/ - [F]
      RewriteRule !^wp-includes/ - [S=3]
      RewriteCond %{SCRIPT_FILENAME} !^(.*)wp-includes/ms-files.php
      RewriteRule ^wp-includes/[^/]+.php$ - [F]
      RewriteRule ^wp-includes/js/tinymce/langs/.+.php - [F]
      RewriteRule ^wp-includes/theme-compat/ - [F]
    
      # Rules to prevent php execution in uploads
      RewriteRule ^(.*)/uploads/(.*).php(.?) - [F]
    
      # Rules to block unneeded HTTP methods
      RewriteCond %{REQUEST_METHOD} ^(TRACE|DELETE|TRACK) [NC]
      RewriteRule ^(.*)$ - [F]
    
      # Rules to block suspicious URIs
      RewriteCond %{QUERY_STRING} ../ [NC,OR]
      RewriteCond %{QUERY_STRING} ^.*.(bash|git|hg|log|svn|swp|cvs) [NC,OR]
      RewriteCond %{QUERY_STRING} etc/passwd [NC,OR]
      RewriteCond %{QUERY_STRING} boot.ini [NC,OR]
      RewriteCond %{QUERY_STRING} ftp:  [NC,OR]
      RewriteCond %{QUERY_STRING} http:  [NC,OR]
      RewriteCond %{QUERY_STRING} https:  [NC,OR]
      RewriteCond %{QUERY_STRING} (<|%3C).*script.*(>|%3E) [NC,OR]
      RewriteCond %{QUERY_STRING} mosConfig_[a-zA-Z_]{1,21}(=|%3D) [NC,OR]
      RewriteCond %{QUERY_STRING} base64_encode.*(.*) [NC,OR]
      RewriteCond %{QUERY_STRING} ^.*(%24&x).* [NC,OR]
      RewriteCond %{QUERY_STRING} ^.*(127.0).* [NC,OR]
      RewriteCond %{QUERY_STRING} ^.*(globals|encode|localhost|loopback).* [NC,OR]
      RewriteCond %{QUERY_STRING} ^.*(request|concat|insert|union|declare).* [NC]
      RewriteCond %{QUERY_STRING} !^loggedout=true
      RewriteCond %{QUERY_STRING} !^action=jetpack-sso
      RewriteCond %{QUERY_STRING} !^action=rp
      RewriteCond %{HTTP_COOKIE} !^.*wordpress_logged_in_.*$
      RewriteCond %{HTTP_REFERER} !^http://maps.googleapis.com(.*)$
      RewriteRule ^(.*)$ - [F]
    </IfModule>
  # END Tweaks
# END iThemes Security
# BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /StormsFramework/
RewriteRule ^index.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /StormsFramework/index.php [L]
</IfModule>

# END WordPress

On Github License

Files

Download PDF of Htaccess file
HTTP_COOKIE, HTTP_REFERER, QUERY_STRING, REQUEST_FILENAME, REQUEST_METHOD, SCRIPT_FILENAME

Comments

Apache