Restrict Access To WP-Includes Folder - WordPress Security & Hack Prevention | WP Learning Lab
8.1 هزار بار بازدید -
9 سال پیش
-
🔥Name Your Own Price🔥 for
🔥Name Your Own Price🔥 for the 11-Point WP Security Checklist Smart PDF: https://wplearninglab.com/go/wpsecuri...
Block the include-only files.
(left pointy bracket)IfModule mod_rewrite.c(right pointy bracket)
RewriteEngine On
RewriteBase /
RewriteRule ^wp-admin/includes/ - [F,L]
RewriteRule !^wp-includes/ - [S=3]
RewriteRule ^wp-includes/[^/]+\.php$ - [F,L]
RewriteRule ^wp-includes/js/tinymce/langs/.+\.php - [F,L]
RewriteRule ^wp-includes/theme-compat/ - [F,L]
(left pointy bracket)/IfModule(right pointy bracket)
BEGIN WordPress
YouTube doesn't allow the pointy brackets (Shift period and Shift comma) so make sure they match what you see in the video.
In this tutorial I'm going to show you how to add a short Apache command to your .htaccess file in order to protect wp-includes folder. The code is above, so all you'll have to do is copy and paste it.
The WordPress wp-includes folder contains a lot of important scripts that your WordPress site needs to run. But NONE of those scripts need to be accessed by outside users, so we can lock this folder down.
Let's put that code into your .htaccess file and secure WordPress.
First login into your hosting account cPanel. Then find and click on the File Manager icon and choose the Document Root for the website that you are hardening. This will open the root of the website in another tab.
You can also log into the website root using FTP if you are more comfortable with that.
If you do not see a .htaccess in the website right then you can make one by clicking Add New File in the File Manager or right-clicking and choosing Create New File via File Transfer Protocol (FTP).
Open the .htaccess file and paste the code from above into it. There is no need to make adjustments to the code. Once pasted in just save the file and you're done.
Now you've done your better WordPress security for the day. Time to take a break! Or better yet, watch the next video.
I hope this information helps you! If you have any questions leave a comment below or ping me @WPLearningLab on Twitter.
--------------
If you want more excellent WordPress information check out our website where we post WordPress tutorials daily.
http://wplearninglab.com/
Connect with us:
WP Learning Lab Channel: http://www.youtube.com/subscription_c...
Facebook: Facebook: wplearninglab
Twitter: Twitter: WPLearningLab
Google Plus: http://google.com/+Wplearninglab
Pinterest: Pinterest: wplearninglab
Block the include-only files.
(left pointy bracket)IfModule mod_rewrite.c(right pointy bracket)
RewriteEngine On
RewriteBase /
RewriteRule ^wp-admin/includes/ - [F,L]
RewriteRule !^wp-includes/ - [S=3]
RewriteRule ^wp-includes/[^/]+\.php$ - [F,L]
RewriteRule ^wp-includes/js/tinymce/langs/.+\.php - [F,L]
RewriteRule ^wp-includes/theme-compat/ - [F,L]
(left pointy bracket)/IfModule(right pointy bracket)
BEGIN WordPress
YouTube doesn't allow the pointy brackets (Shift period and Shift comma) so make sure they match what you see in the video.
In this tutorial I'm going to show you how to add a short Apache command to your .htaccess file in order to protect wp-includes folder. The code is above, so all you'll have to do is copy and paste it.
The WordPress wp-includes folder contains a lot of important scripts that your WordPress site needs to run. But NONE of those scripts need to be accessed by outside users, so we can lock this folder down.
Let's put that code into your .htaccess file and secure WordPress.
First login into your hosting account cPanel. Then find and click on the File Manager icon and choose the Document Root for the website that you are hardening. This will open the root of the website in another tab.
You can also log into the website root using FTP if you are more comfortable with that.
If you do not see a .htaccess in the website right then you can make one by clicking Add New File in the File Manager or right-clicking and choosing Create New File via File Transfer Protocol (FTP).
Open the .htaccess file and paste the code from above into it. There is no need to make adjustments to the code. Once pasted in just save the file and you're done.
Now you've done your better WordPress security for the day. Time to take a break! Or better yet, watch the next video.
I hope this information helps you! If you have any questions leave a comment below or ping me @WPLearningLab on Twitter.
--------------
If you want more excellent WordPress information check out our website where we post WordPress tutorials daily.
http://wplearninglab.com/
Connect with us:
WP Learning Lab Channel: http://www.youtube.com/subscription_c...
Facebook: Facebook: wplearninglab
Twitter: Twitter: WPLearningLab
Google Plus: http://google.com/+Wplearninglab
Pinterest: Pinterest: wplearninglab
9 سال پیش
در تاریخ 1394/03/30 منتشر شده
است.
8,135
بـار بازدید شده