amolvishwakarma

1.) Changing File & Directory Permissions

Note: Run the below command from the shell and make sure to change the path where your wordpress installation done.

For Directories:

find /path/to/your/wordpress/install/ -type d -exec chmod 755 {} \;

For Files:

amolvishwakarma

<IfModule mod_headers.c>
    # HSTS - force redirect to HTTPS at the browser level.
    
    Header always set Strict-Transport-Security: "max-age=31536000; includeSubDomains; preload" env=HTTPS

    # X-Xss-Protection
    Header always set X-XSS-Protection "1; mode=block"

    # Stop clickjacking by only allowing us to frame our own site 
    # Allowed values are DENY, SAMEORIGIN, ALLOW-FROM="https://example.com"