Skip to content

Instantly share code, notes, and snippets.

@imelgrat

imelgrat/.htaccess

Last active August 23, 2017 19:42
Show Gist options
  • Save imelgrat/b0dc92aa6773da4cf466 to your computer and use it in GitHub Desktop.
Save imelgrat/b0dc92aa6773da4cf466 to your computer and use it in GitHub Desktop.
Download ZIP
Deny all access to Wordpress' wp-includes directory using .htaccess. Full article at: http://imelgrat.me/security/wordpress-htaccess-file-protect/
Raw
.htaccess
# Block wp-includes folder and files
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^wp-admin/includes/ - [F,L]
RewriteRule !^wp-includes/ - [S=3]
RewriteRule ^wp-includes/[^/]+\.php$ - [F,L]
RewriteRule ^wp-includes/js/tinymce/langs/.+\.php - [F,L]
RewriteRule ^wp-includes/theme-compat/ - [F,L]
</IfModule>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment