Skip to content
Snippets Groups Projects

Harden htaccess for /wp-includes/ direct access

Merged ale requested to merge harden-includes into master
1 file
+ 2
3
Compare changes
  • Side-by-side
  • Inline
+ 2
3
@@ -29,10 +29,9 @@ RewriteRule ^resource/[^/]+/download/(.*)$ wp-includes/ms-files.php?file=2010/08
# hardening of wp-includes (with the exception of ms-files.php, the WP multisite file server).
RewriteRule ^wp-admin/includes/ - [F,L]
RewriteRule !^wp-includes/ - [S=3]
RewriteCond %{REQUEST_URI} !^wp-includes/ms-files.php$
RewriteRule !^wp-includes/ - [S=2]
RewriteCond $0 !^wp-includes/ms-files\.php$
RewriteRule ^wp-includes/.+\.php$ - [F,L]
RewriteRule ^wp-includes/js/tinymce/langs/.+\.php - [F,L]
RewriteRule ^wp-includes/theme-compat/ - [F,L]
# BEGIN WPSuperCache
Loading