apache_conf 通过.htaccess（主.htaccess）保护wordpress网站

Posted 2021-05-23

<Files wp-config.php>
    order allow,deny
    deny from all
    </Files>

DirectoryIndex index.php

#Place above #Begin WordPress lines
# Block the include-only files.
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^wp-admin/includes/ - [F,L]
RewriteRule !^wp-includes/ - [S=3]
RewriteRule ^wp-includes/[^/]+\.php$ - [F,L]
RewriteRule ^wp-includes/js/tinymce/langs/.+\.php - [F,L]
RewriteRule ^wp-includes/theme-compat/ - [F,L]
</IfModule>

# directory browsing
    Options All -Indexes
    
<Files ~ "^.*\.([Hh][Tt][Aa])">
    order allow,deny
    deny from all
    satisfy all
</Files>