| ######################################################################## | |
| # OPTIMAL .htaccess FILE FOR SPEED AND SECURITY @Version 2019 | |
| # ---------------------------------------------------------------------- | |
| # @Author: Andreas Hecht | |
| # @Author URI: https://andreas-hecht.com | |
| # License: GNU General Public License v2 or later | |
| # License URI: http://www.gnu.org/licenses/gpl-2.0.html | |
| ######################################################################## | |
Wordpress is a very popular target for hackers. They normally get in with holes found in plugins, themes or in wordpress core.
An up-to-date installation (including plugins and themes) is crutial!
Hardening Wordpress is sadly not a part of the standard installation documentation, but they have a guide available in the "codex": http://codex.wordpress.org/Hardening_WordPress
Removing unused plugins and users, setting htpasswd and/or ip-whitelisting in //wp-admin// also should be considered.
| # ----------------------------------------------------------------- | |
| # .gitignore for WordPress @salcode | |
| # ver 20180808 | |
| # | |
| # From the root of your project run | |
| # curl -O https://gist.githubusercontent.com/salcode/b515f520d3f8207ecd04/raw/.gitignore | |
| # to download this file | |
| # | |
| # By default all files are ignored. You'll need to whitelist | |
| # any mu-plugins, plugins, or themes you want to include in the repo. |
| add_action('admin_enqueue_scripts', 'ds_admin_theme_style'); | |
| add_action('login_enqueue_scripts', 'ds_admin_theme_style'); | |
| function ds_admin_theme_style() { | |
| if (!current_user_can( 'manage_options' )) { | |
| echo '<style>.update-nag, .updated, .error, .is-dismissible { display: none; }</style>'; | |
| } | |
| } |
