WordPress.org

1. wireframe74
   Member
   Posted 1 year ago #

   I have tried to secure my wordpress install by locking down the root .htacess file with the following security measures:

   Options - Indexes
   # BEGIN WordPress
   <IfModule mod_rewrite.c>
   RewriteEngine On
   RewriteBase /development/
   RewriteRule ^index\.php$ - [L]
   RewriteCond %{REQUEST_FILENAME} !-f
   RewriteCond %{REQUEST_FILENAME} !-d
   RewriteRule . /development/index.php [L]
   </IfModule>
   
   # END WordPress
   
   # SECURE WP-CONFIG.PHP
   <Files wp\-config\.php>
   Order Deny,Allow
   Deny from all
   Allow from 121.217.101.201
   </Files>
   
   # PROTECT SENSITIVE FILES BY FILE TYPE
   <FilesMatch "\.(htaccess|htpasswd|ini|php|fla|psd|log)$">
   Order Deny,Allow
   Deny from all
   Allow from 121.217.101.201
   </FilesMatch>

   And also locked down the wp-admin directory with the following within .htaccess file in the wp-admin directory:

   # SECURE WP-ADMIN FILES
   <FilesMatch "*.*">
   Order Deny,Allow
   Deny from all
   Allow from 121.217.101.201
   </FilesMatch>
   
   # PROTECT WP-LOGIN.PHP
   <Files wp\-login\.php>
   Order Deny,Allow
   Deny from all
   Allow from 121.217.101.201
   </Files>

   Also removed the install.php file - was following a tutorial.

   I have tried logging in to site and cant seem to now. It is located within a secondary folder on server and I just get a 404 error message from the initial install of WP in root.

   I removed the .htacess file from wp-admin and also reverted root .htacess but it still doesnt work. Any advice on how I can view files once agin would be great as I have just about finished project.

Topic Closed

This topic has been closed to new replies.