Hi,
First, with your FTP browser (for example : Filezilla), download the file called HTACCESS that is in the WWW root folder. of your website.
If something seems to be strange into the file, paste the code here.
just this code:
# BEGIN WordPress
# END WordPress
OK, so there is no rules to block some files/folders.
But if there is nothing between BEGIN WordPress and END WordPress, it miss something important for WordPress…
Try by adding this :
# BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>
# END WordPress
Then save the file, and upload it to overwrite it.
Then test again.
I forgot something important… If your site has been hacked.
Still with your FTP browser, check the Date/Time of the last modification of each files first in your Theme folder ! Then in the root WWW, wp-admin, wp-includes folders.
The hacker has perhaps used SQL injection to change your files hosted on your FTP server ! Folder permissions as well !
See with Filezilla.
What’s your website URL ?
I checked All Date/Time. All Files is true.
I add that code in HTACCESS file, but show error yet.
Website Url: http://www.acch.ir