Get Chitika | Premium
Custom Search

Protect WordPress Directory with .Htaccess

Let us discuss about. Htaccess file, what it is. Htacess ..? . htaccess file is an ASCII text file that is located in the root directory is usually "public_html" or klo hosting free in the "htdocs" which is often used to change the default settings from the web server is running. So that the benefits of. Htaccess file is huge. And a Web Utility is often used by the web master.
then what should be in secure in wordpress.? how many, example / wp-admin, / wp-includes, wp-login.php, wp-db.php, wp-config.php. / etc ..
immediately wrote gan, source code I'll give you a live copy and paste on. htaccess, already know the times ..

Access page / Wp-Admin Login with Private IP / Single IP

AuthUserFile / dev / null
AuthGroupFile / dev / null
AuthName "Access Control"
AuthType Basic
Order deny, allow
deny from all
# IP address mate
allow from **.***.***.**

Take a look at the red letters, the same fox **.***.***.** your IP, so IP aja special one who can access the page ..
Keep what about the wp-login.php was also the same right for login ..? Well calm down, we go to wp-login.php, using private IP as well ..

Order deny, allow
Deny from All
Allow from **.***.***.**
same as above, replace the red writing that use the IP you, if you make a dynamic IP address does not need mending, coz it's just for one IP only,

Secure your wp-config.php

Advanced brother, now we mw amanin wp-config.php file, dh wp-config.php know that their role, and therefore let us secure ..
This code ..

# Protect wpconfig.php
order allow, deny
deny from all

Following that we discuss goto the directory Wp-includes, if said people still in the directory wp-includes wp-db.php exists that can ngebongkar all our important data,
made in case of attack wp-includes the authority to make gk index.php or index.html file in that directory gan. For wp-db.php try agan access, there must be an error in wp-includes/wp-db.php that right, there emang klo kelemahanya let us cover it, how to create. Htaccess file the directory section wp-includes, continue to fill the same this code ..

RewriteEngine On
RewriteBase /
RewriteRule .* \. Php $ readme.html [L]
Look at the red writing that, it's readme file of wordpress, we try to transfer the file wp-db.php to the file readme.html in this way.

Ok done, hopefully useful and handy.

No comments:

Post a Comment