# # Turn on rewrite engine # RewriteEngine on # # to log into wordpress admin you must un-comment # # one of the following lines and put your ip address in place # # of the 123.123.123.123 # #RewriteCond %{REMOTE_ADDR} !^123.123.123.123$ # #RewriteCond %{REMOTE_ADDR} !^123.123.123.123$ # #RewriteCond %{REMOTE_ADDR} !^123.123.123.123$ # RewriteCond %{REQUEST_URI} ^(.*)?wp-login.php(.*)$ [OR] # RewriteCond %{REQUEST_URI} ^(.*)?wp-admin$ # RewriteCond %{REMOTE_ADDR} !^71.236.254.213$ # RewriteCond %{REMOTE_ADDR} !^50.193.218.101$ # RewriteCond %{REMOTE_ADDR} !^96.18.7.50$ # RewriteCond %{REMOTE_ADDR} !^70.129.57.86$ # RewriteCond %{REMOTE_ADDR} !^24.21.250.46$ # RewriteCond %{REMOTE_ADDR} !^47.224.136.57$ # RewriteCond %{REMOTE_ADDR} !^192.168.1.146$ # RewriteRule ^(.*)$ - [R=403,L] # # === Block access to xmlrpc.php === # # Order Deny,Allow # Deny from all # # # === Optional: Block REST API access except for logged-in users === # # Comment this out if you use REST API from frontend or external apps # # RewriteCond %{REQUEST_URI} ^/wp-json/ # RewriteCond %{HTTP_COOKIE} !^.*wordpress_logged_in_.*$ # RewriteRule ^ - [R=403,L] # # # === Protect wp-config.php from direct access === # # order allow,deny # deny from all # # # === Disable directory browsing (if not already) === # Options -Indexes # BEGIN WordPress # The directives (lines) between "BEGIN WordPress" and "END WordPress" are # dynamically generated, and should only be modified via WordPress filters. # Any changes to the directives between these markers will be overwritten. RewriteEngine On RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}] RewriteBase /wp/ RewriteRule ^index\.php$ - [L] RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteRule . /wp/index.php [L] # END WordPress # php -- BEGIN cPanel-generated handler, do not edit # Set the “ea-php81” package as the default “PHP” programming language. AddHandler application/x-httpd-ea-php81 .php .php8 .phtml # php -- END cPanel-generated handler, do not edit # BEGIN cPanel-generated php ini directives, do not edit # Manual editing of this file may result in unexpected behavior. # To make changes to this file, use the cPanel MultiPHP INI Editor (Home >> Software >> MultiPHP INI Editor) # For more information, read our documentation (https://go.cpanel.net/EA4ModifyINI) php_flag display_errors Off php_value max_execution_time 30 php_value max_input_time 60 php_value max_input_vars 1000 php_value memory_limit 1024M php_value post_max_size 500M php_value session.gc_maxlifetime 1440 php_value session.save_path "/var/cpanel/php/sessions/ea-php81" php_value upload_max_filesize 500M php_flag zlib.output_compression On php_flag display_errors Off php_value max_execution_time 30 php_value max_input_time 60 php_value max_input_vars 1000 php_value memory_limit 1024M php_value post_max_size 500M php_value session.gc_maxlifetime 1440 php_value session.save_path "/var/cpanel/php/sessions/ea-php81" php_value upload_max_filesize 500M php_flag zlib.output_compression On # END cPanel-generated php ini directives, do not edit # BEGIN LiteSpeed # The directives (lines) between "BEGIN LiteSpeed" and "END LiteSpeed" are # dynamically generated, and should only be modified via WordPress filters. # Any changes to the directives between these markers will be overwritten. SetEnv noabort 1 # END LiteSpeed