Skip to content

Instantly share code, notes, and snippets.

View BenceSzalai's full-sized avatar
🚧
... I'd rather try to do it properly!

Bence Szalai BenceSzalai

🚧
... I'd rather try to do it properly!
View GitHub Profile
@BenceSzalai
BenceSzalai / .htaccess
Created December 10, 2023 11:55
Redirect www/non-www variants
# Ensure canonical domain
<IfModule mod_rewrite.c>
RewriteEngine On
# Use one of these two:
# Rewrite www.domain.com -> domain.com
RewriteCond %{HTTP_HOST} .
RewriteCond %{HTTP_HOST} ^www.(.*)$ [NC]
RewriteRule ^(.*)$ http://%1/$1 [R=301,L]
# Ensure HTTPS
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule .* https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
</IfModule>
@BenceSzalai
BenceSzalai / .htaccess
Created December 10, 2023 11:28
Block access to xml-rpc except for a set of IP addresses
# Block WordPress xmlrpc.php requests
<Files xmlrpc.php>
#Require ip xxx.xxx.xxx.xx1
#Require ip xxx.xxx.xxx.xx2
#... add more enabled IP addresses as needed!
Require all denied
</Files>
@BenceSzalai
BenceSzalai / .htaccess
Created December 10, 2023 10:54
Block author scan on WordPress
# Block author scans
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteCond %{QUERY_STRING} (author=\d+) [NC]
RewriteRule .* - [F]
</IfModule>
@BenceSzalai
BenceSzalai / .htaccess
Last active December 9, 2023 23:22
Deny public access to typical WordPress log files
# Deny access to sensiticve files
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteCond %{REQUEST_URI} (.*(debug|error).*\.log|error_log)$ [NC]
RewriteRule .* - [F,L,NC]
</IfModule>
<IfModule !mod_rewrite.c>
<FilesMatch "(?i)(.*(debug|error).*\.log|error_log)$">
<IfModule mod_authz_core.c>
Require all denied
@BenceSzalai
BenceSzalai / generator.js
Last active April 19, 2021 16:25
generate Content-Security-Policy hashes for inline styles and scripts in SPA mode & add them to html meta tag, write to the console or save to file
/*!
* @nuxt/generator v2.14.3 (c) 2016-2020
* - All the amazing contributors
* Released under the MIT License.
* Website: https://nuxtjs.org
*/
'use strict';
Object.defineProperty(exports, '__esModule', { value: true });