Created
April 2, 2011 07:19
-
-
Save tracend/899305 to your computer and use it in GitHub Desktop.
Wordpress: Almost Perfect htaccess File for WordPress blogs - Source: http://www.josiahcole.com/2007/07/11/almost-perfect-htaccess-file-for-wordpress-blogs/
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# protect the htaccess file | |
<files .htaccess> | |
order allow,deny | |
deny from all | |
</files> | |
# disable the server signature | |
ServerSignature Off | |
# limit file uploads to 10mb | |
LimitRequestBody 10240000 | |
# protect wpconfig.php | |
<files wp-config.php> | |
order allow,deny | |
deny from all | |
</files> | |
#who has access who doesnt | |
order allow,deny | |
#deny from 000.000.000.000 | |
allow from all | |
#custom error docs | |
ErrorDocument 404 /notfound.php | |
ErrorDocument 403 /forbidden.php | |
ErrorDocument 500 /error.php | |
# disable directory browsing | |
Options All -Indexes | |
#redirect old to new | |
Redirect 301 /old.php http://www.yourdomain.com/new.php | |
#block referring domains | |
RewriteEngine on | |
RewriteCond %{HTTP_REFERER} digg\.com [NC] | |
RewriteRule .* – [F] | |
#disable hotlinking of images with forbidden or custom image option | |
RewriteEngine on | |
RewriteCond %{HTTP_REFERER} !^$ | |
RewriteCond %{HTTP_REFERER} !^http://(www\.)?yourdomain.com/.*$ [NC] | |
#RewriteRule \.(gif|jpg)$ – [F] | |
#RewriteRule \.(gif|jpg)$ http://www.yourdomain.com/stealingisbad.gif [R,L] | |
# php compression – use with caution | |
<ifmodule mod_php4.c> | |
php_value zlib.output_compression 16386 | |
</ifmodule> | |
# set the canonical url | |
RewriteEngine On | |
RewriteCond %{HTTP_HOST} ^yourdomain\.com$ [NC] | |
RewriteRule ^(.*)$ http://www.yourdomain.com/$1 [R=301,L] | |
# protect from spam comments | |
RewriteEngine On | |
RewriteCond %{REQUEST_METHOD} POST | |
RewriteCond %{REQUEST_URI} .wp-comments-post\.php* | |
RewriteCond %{HTTP_REFERER} !.*yourdomain.com.* [OR] | |
RewriteCond %{HTTP_USER_AGENT} ^$ | |
RewriteRule (.*) ^http://%{REMOTE_ADDR}/$ [R=301,L] |
You may want to change the paths in the redirection of error messages and the http://www.yourdomain.com to your domain of course ;)
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Do I need to make any changes in this file before uploading it ?