• Hy!

    I’ve noticed on 2 sites, that the security menu item is lost! If i directly go to http://HOSTNAME/wp-admin/admin.php?page=toplevel_page_itsec_settings everything is there as it should be.

    Any hints for me?

    Kind regards,
    Bernhard

    Plugin Version: 5.2.0
    Htaccess content:

    # BEGIN iThemes Security - Do not modify or remove this line
    # iThemes Security Config Details: 2
    	# Enable HackRepair.com's blacklist feature - Security > Settings > Banned Users > Default Blacklist
    	# Start HackRepair.com Blacklist
    	RewriteEngine on
    	# Start Abuse Agent Blocking
    	RewriteCond %{HTTP_USER_AGENT} "^Mozilla.*Indy" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Mozilla.*NEWT" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^$" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Maxthon$" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^SeaMonkey$" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Acunetix" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^binlar" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^BlackWidow" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Bolt 0" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^BOT for JCE" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Bot mailto\:craftbot@yahoo\.com" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^casper" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^checkprivacy" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^ChinaClaw" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^clshttp" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^cmsworldmap" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^comodo" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Custo" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Default Browser 0" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^diavol" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^DIIbot" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^DISCo" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^dotbot" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Download Demon" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^eCatch" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^EirGrabber" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^EmailCollector" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^EmailSiphon" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^EmailWolf" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Express WebPictures" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^extract" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^ExtractorPro" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^EyeNetIE" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^feedfinder" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^FHscan" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^FlashGet" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^flicky" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^g00g1e" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^GetRight" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^GetWeb\!" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Go\!Zilla" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Go\-Ahead\-Got\-It" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^grab" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^GrabNet" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Grafula" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^harvest" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^HMView" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^ia_archiver" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Image Stripper" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Image Sucker" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^InterGET" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Internet Ninja" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^InternetSeer\.com" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^jakarta" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Java" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^JetCar" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^JOC Web Spider" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^kanagawa" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^kmccrew" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^larbin" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^LeechFTP" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^libwww" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Mass Downloader" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^microsoft\.url" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^MIDown tool" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^miner" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Mister PiX" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^MSFrontPage" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Navroad" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^NearSite" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Net Vampire" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^NetAnts" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^NetSpider" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^NetZIP" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^nutch" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Octopus" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Offline Explorer" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Offline Navigator" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^PageGrabber" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Papa Foto" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^pavuk" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^pcBrowser" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^PeoplePal" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^planetwork" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^psbot" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^purebot" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^pycurl" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^RealDownload" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^ReGet" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Rippers 0" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^sitecheck\.internetseer\.com" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^SiteSnagger" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^skygrid" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^SmartDownload" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^sucker" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^SuperBot" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^SuperHTTP" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Surfbot" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^tAkeOut" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Teleport Pro" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Toata dragostea mea pentru diavola" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^turnit" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^vikspider" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^VoidEYE" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Web Image Collector" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Web Sucker" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^WebAuto" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^WebBandit" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^WebCopier" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^WebFetch" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^WebGo IS" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^WebLeacher" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^WebReaper" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^WebSauger" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Website eXtractor" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Website Quester" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^WebStripper" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^WebWhacker" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^WebZIP" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Wget" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Widow" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^WPScan" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^WWW\-Mechanize" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^WWWOFFLE" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Xaldon WebSpider" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Zeus" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^zmeu" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "360Spider" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "AhrefsBot" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "CazoodleBot" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "discobot" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "EasouSpider" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "ecxi" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "GT\:\:WWW" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "heritrix" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "HTTP\:\:Lite" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "HTTrack" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "ia_archiver" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "id\-search" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "IDBot" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "Indy Library" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "IRLbot" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "ISC Systems iRc Search 2\.1" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "LinksCrawler" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "LinksManager\.com_bot" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "linkwalker" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "lwp\-trivial" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "MFC_Tear_Sample" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "Microsoft URL Control" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "Missigua Locator" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "MJ12bot" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "panscient\.com" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "PECL\:\:HTTP" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "PHPCrawl" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "PleaseCrawl" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "SBIder" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "SearchmetricsBot" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "SeznamBot" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "Snoopy" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "Steeler" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "URI\:\:Fetch" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "urllib" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "Web Sucker" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "webalta" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "WebCollage" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "Wells Search II" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "WEP Search" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "XoviBot" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "YisouSpider" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "zermelo" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "ZyBorg" [NC,OR]
    	# End Abuse Agent Blocking
    	# Start Abuse HTTP Referrer Blocking
    	RewriteCond %{HTTP_REFERER} "^https?://(?:[^/]+\.)?semalt\.com" [NC,OR]
    	RewriteCond %{HTTP_REFERER} "^https?://(?:[^/]+\.)?kambasoft\.com" [NC,OR]
    	RewriteCond %{HTTP_REFERER} "^https?://(?:[^/]+\.)?savetubevideo\.com" [NC]
    	# End Abuse HTTP Referrer Blocking
    	RewriteRule ^.* - [F,L]
    	# End HackRepair.com Blacklist, http://pastebin.com/u/hackrepair
    
    	# Ban Hosts - Security > Settings > Banned Users
    	SetEnvIF REMOTE_ADDR "^54\.183\.253\.223$" DenyAccess
    	SetEnvIF X-FORWARDED-FOR "^54\.183\.253\.223$" DenyAccess
    	SetEnvIF X-CLUSTER-CLIENT-IP "^54\.183\.253\.223$" DenyAccess
    
    	SetEnvIF REMOTE_ADDR "^54\.152\.91\.2$" DenyAccess
    	SetEnvIF X-FORWARDED-FOR "^54\.152\.91\.2$" DenyAccess
    	SetEnvIF X-CLUSTER-CLIENT-IP "^54\.152\.91\.2$" DenyAccess
    
    	SetEnvIF REMOTE_ADDR "^217\.114\.218\.18$" DenyAccess
    	SetEnvIF X-FORWARDED-FOR "^217\.114\.218\.18$" DenyAccess
    	SetEnvIF X-CLUSTER-CLIENT-IP "^217\.114\.218\.18$" DenyAccess
    
    	SetEnvIF REMOTE_ADDR "^78\.129\.180\.110$" DenyAccess
    	SetEnvIF X-FORWARDED-FOR "^78\.129\.180\.110$" DenyAccess
    	SetEnvIF X-CLUSTER-CLIENT-IP "^78\.129\.180\.110$" DenyAccess
    
    	SetEnvIF REMOTE_ADDR "^91\.206\.110\.85$" DenyAccess
    	SetEnvIF X-FORWARDED-FOR "^91\.206\.110\.85$" DenyAccess
    	SetEnvIF X-CLUSTER-CLIENT-IP "^91\.206\.110\.85$" DenyAccess
    
    	SetEnvIF REMOTE_ADDR "^46\.185\.31\.74$" DenyAccess
    	SetEnvIF X-FORWARDED-FOR "^46\.185\.31\.74$" DenyAccess
    	SetEnvIF X-CLUSTER-CLIENT-IP "^46\.185\.31\.74$" DenyAccess
    
    	SetEnvIF REMOTE_ADDR "^83\.166\.240\.75$" DenyAccess
    	SetEnvIF X-FORWARDED-FOR "^83\.166\.240\.75$" DenyAccess
    	SetEnvIF X-CLUSTER-CLIENT-IP "^83\.166\.240\.75$" DenyAccess
    
    	SetEnvIF REMOTE_ADDR "^46\.119\.58\.184$" DenyAccess
    	SetEnvIF X-FORWARDED-FOR "^46\.119\.58\.184$" DenyAccess
    	SetEnvIF X-CLUSTER-CLIENT-IP "^46\.119\.58\.184$" DenyAccess
    
    	SetEnvIF REMOTE_ADDR "^92\.243\.167\.43$" DenyAccess
    	SetEnvIF X-FORWARDED-FOR "^92\.243\.167\.43$" DenyAccess
    	SetEnvIF X-CLUSTER-CLIENT-IP "^92\.243\.167\.43$" DenyAccess
    
    	SetEnvIF REMOTE_ADDR "^94\.45\.182\.250$" DenyAccess
    	SetEnvIF X-FORWARDED-FOR "^94\.45\.182\.250$" DenyAccess
    	SetEnvIF X-CLUSTER-CLIENT-IP "^94\.45\.182\.250$" DenyAccess
    
    	SetEnvIF REMOTE_ADDR "^77\.66\.182\.192$" DenyAccess
    	SetEnvIF X-FORWARDED-FOR "^77\.66\.182\.192$" DenyAccess
    	SetEnvIF X-CLUSTER-CLIENT-IP "^77\.66\.182\.192$" DenyAccess
    
    	SetEnvIF REMOTE_ADDR "^94\.41\.128\.154$" DenyAccess
    	SetEnvIF X-FORWARDED-FOR "^94\.41\.128\.154$" DenyAccess
    	SetEnvIF X-CLUSTER-CLIENT-IP "^94\.41\.128\.154$" DenyAccess
    
    	SetEnvIF REMOTE_ADDR "^37\.23\.240\.181$" DenyAccess
    	SetEnvIF X-FORWARDED-FOR "^37\.23\.240\.181$" DenyAccess
    	SetEnvIF X-CLUSTER-CLIENT-IP "^37\.23\.240\.181$" DenyAccess
    
    	SetEnvIF REMOTE_ADDR "^31\.132\.176\.141$" DenyAccess
    	SetEnvIF X-FORWARDED-FOR "^31\.132\.176\.141$" DenyAccess
    	SetEnvIF X-CLUSTER-CLIENT-IP "^31\.132\.176\.141$" DenyAccess
    
    	SetEnvIF REMOTE_ADDR "^193\.34\.160\.53$" DenyAccess
    	SetEnvIF X-FORWARDED-FOR "^193\.34\.160\.53$" DenyAccess
    	SetEnvIF X-CLUSTER-CLIENT-IP "^193\.34\.160\.53$" DenyAccess
    
    	SetEnvIF REMOTE_ADDR "^188\.191\.161\.27$" DenyAccess
    	SetEnvIF X-FORWARDED-FOR "^188\.191\.161\.27$" DenyAccess
    	SetEnvIF X-CLUSTER-CLIENT-IP "^188\.191\.161\.27$" DenyAccess
    
    	SetEnvIF REMOTE_ADDR "^91\.123\.155\.169$" DenyAccess
    	SetEnvIF X-FORWARDED-FOR "^91\.123\.155\.169$" DenyAccess
    	SetEnvIF X-CLUSTER-CLIENT-IP "^91\.123\.155\.169$" DenyAccess
    
    	SetEnvIF REMOTE_ADDR "^193\.169\.4\.156$" DenyAccess
    	SetEnvIF X-FORWARDED-FOR "^193\.169\.4\.156$" DenyAccess
    	SetEnvIF X-CLUSTER-CLIENT-IP "^193\.169\.4\.156$" DenyAccess
    
    	SetEnvIF REMOTE_ADDR "^179\.184\.193\.101$" DenyAccess
    	SetEnvIF X-FORWARDED-FOR "^179\.184\.193\.101$" DenyAccess
    	SetEnvIF X-CLUSTER-CLIENT-IP "^179\.184\.193\.101$" DenyAccess
    
    	SetEnvIF REMOTE_ADDR "^5\.58\.63\.91$" DenyAccess
    	SetEnvIF X-FORWARDED-FOR "^5\.58\.63\.91$" DenyAccess
    	SetEnvIF X-CLUSTER-CLIENT-IP "^5\.58\.63\.91$" DenyAccess
    
    	SetEnvIF REMOTE_ADDR "^92\.252\.150\.109$" DenyAccess
    	SetEnvIF X-FORWARDED-FOR "^92\.252\.150\.109$" DenyAccess
    	SetEnvIF X-CLUSTER-CLIENT-IP "^92\.252\.150\.109$" DenyAccess
    
    	SetEnvIF REMOTE_ADDR "^178\.216\.123\.221$" DenyAccess
    	SetEnvIF X-FORWARDED-FOR "^178\.216\.123\.221$" DenyAccess
    	SetEnvIF X-CLUSTER-CLIENT-IP "^178\.216\.123\.221$" DenyAccess
    
    	SetEnvIF REMOTE_ADDR "^213\.87\.249\.14$" DenyAccess
    	SetEnvIF X-FORWARDED-FOR "^213\.87\.249\.14$" DenyAccess
    	SetEnvIF X-CLUSTER-CLIENT-IP "^213\.87\.249\.14$" DenyAccess
    
    	SetEnvIF REMOTE_ADDR "^46\.188\.121\.172$" DenyAccess
    	SetEnvIF X-FORWARDED-FOR "^46\.188\.121\.172$" DenyAccess
    	SetEnvIF X-CLUSTER-CLIENT-IP "^46\.188\.121\.172$" DenyAccess
    
    	SetEnvIF REMOTE_ADDR "^91\.105\.176\.83$" DenyAccess
    	SetEnvIF X-FORWARDED-FOR "^91\.105\.176\.83$" DenyAccess
    	SetEnvIF X-CLUSTER-CLIENT-IP "^91\.105\.176\.83$" DenyAccess
    
    	SetEnvIF REMOTE_ADDR "^178\.213\.192\.34$" DenyAccess
    	SetEnvIF X-FORWARDED-FOR "^178\.213\.192\.34$" DenyAccess
    	SetEnvIF X-CLUSTER-CLIENT-IP "^178\.213\.192\.34$" DenyAccess
    
    	SetEnvIF REMOTE_ADDR "^212\.5\.185\.254$" DenyAccess
    	SetEnvIF X-FORWARDED-FOR "^212\.5\.185\.254$" DenyAccess
    	SetEnvIF X-CLUSTER-CLIENT-IP "^212\.5\.185\.254$" DenyAccess
    
    	SetEnvIF REMOTE_ADDR "^81\.30\.48\.66$" DenyAccess
    	SetEnvIF X-FORWARDED-FOR "^81\.30\.48\.66$" DenyAccess
    	SetEnvIF X-CLUSTER-CLIENT-IP "^81\.30\.48\.66$" DenyAccess
    
    	SetEnvIF REMOTE_ADDR "^91\.234\.147\.66$" DenyAccess
    	SetEnvIF X-FORWARDED-FOR "^91\.234\.147\.66$" DenyAccess
    	SetEnvIF X-CLUSTER-CLIENT-IP "^91\.234\.147\.66$" DenyAccess
    
    	SetEnvIF REMOTE_ADDR "^176\.194\.57\.243$" DenyAccess
    	SetEnvIF X-FORWARDED-FOR "^176\.194\.57\.243$" DenyAccess
    	SetEnvIF X-CLUSTER-CLIENT-IP "^176\.194\.57\.243$" DenyAccess
    
    	SetEnvIF REMOTE_ADDR "^37\.139\.84\.102$" DenyAccess
    	SetEnvIF X-FORWARDED-FOR "^37\.139\.84\.102$" DenyAccess
    	SetEnvIF X-CLUSTER-CLIENT-IP "^37\.139\.84\.102$" DenyAccess
    
    	SetEnvIF REMOTE_ADDR "^178\.209\.225\.24$" DenyAccess
    	SetEnvIF X-FORWARDED-FOR "^178\.209\.225\.24$" DenyAccess
    	SetEnvIF X-CLUSTER-CLIENT-IP "^178\.209\.225\.24$" DenyAccess
    
    	SetEnvIF REMOTE_ADDR "^177\.85\.89\.4$" DenyAccess
    	SetEnvIF X-FORWARDED-FOR "^177\.85\.89\.4$" DenyAccess
    	SetEnvIF X-CLUSTER-CLIENT-IP "^177\.85\.89\.4$" DenyAccess
    
    	SetEnvIF REMOTE_ADDR "^195\.218\.183\.23$" DenyAccess
    	SetEnvIF X-FORWARDED-FOR "^195\.218\.183\.23$" DenyAccess
    	SetEnvIF X-CLUSTER-CLIENT-IP "^195\.218\.183\.23$" DenyAccess
    
    	SetEnvIF REMOTE_ADDR "^178\.218\.20\.252$" DenyAccess
    	SetEnvIF X-FORWARDED-FOR "^178\.218\.20\.252$" DenyAccess
    	SetEnvIF X-CLUSTER-CLIENT-IP "^178\.218\.20\.252$" DenyAccess
    
    	SetEnvIF REMOTE_ADDR "^31\.211\.47\.93$" DenyAccess
    	SetEnvIF X-FORWARDED-FOR "^31\.211\.47\.93$" DenyAccess
    	SetEnvIF X-CLUSTER-CLIENT-IP "^31\.211\.47\.93$" DenyAccess
    
    	SetEnvIF REMOTE_ADDR "^213\.79\.100\.50$" DenyAccess
    	SetEnvIF X-FORWARDED-FOR "^213\.79\.100\.50$" DenyAccess
    	SetEnvIF X-CLUSTER-CLIENT-IP "^213\.79\.100\.50$" DenyAccess
    
    	<IfModule mod_authz_core.c>
    		<RequireAll>
    			Require all granted
    			Require not env DenyAccess
    			Require not ip 54.183.253.223
    			Require not ip 54.152.91.2
    			Require not ip 217.114.218.18
    			Require not ip 78.129.180.110
    			Require not ip 91.206.110.85
    			Require not ip 46.185.31.74
    			Require not ip 83.166.240.75
    			Require not ip 46.119.58.184
    			Require not ip 92.243.167.43
    			Require not ip 94.45.182.250
    			Require not ip 77.66.182.192
    			Require not ip 94.41.128.154
    			Require not ip 37.23.240.181
    			Require not ip 31.132.176.141
    			Require not ip 193.34.160.53
    			Require not ip 188.191.161.27
    			Require not ip 91.123.155.169
    			Require not ip 193.169.4.156
    			Require not ip 179.184.193.101
    			Require not ip 5.58.63.91
    			Require not ip 92.252.150.109
    			Require not ip 178.216.123.221
    			Require not ip 213.87.249.14
    			Require not ip 46.188.121.172
    			Require not ip 91.105.176.83
    			Require not ip 178.213.192.34
    			Require not ip 212.5.185.254
    			Require not ip 81.30.48.66
    			Require not ip 91.234.147.66
    			Require not ip 176.194.57.243
    			Require not ip 37.139.84.102
    			Require not ip 178.209.225.24
    			Require not ip 177.85.89.4
    			Require not ip 195.218.183.23
    			Require not ip 178.218.20.252
    			Require not ip 31.211.47.93
    			Require not ip 213.79.100.50
    		</RequireAll>
    	</IfModule>
    	<IfModule !mod_authz_core.c>
    		Order allow,deny
    		Allow from all
    		Deny from env=DenyAccess
    		Deny from 54.183.253.223
    		Deny from 54.152.91.2
    		Deny from 217.114.218.18
    		Deny from 78.129.180.110
    		Deny from 91.206.110.85
    		Deny from 46.185.31.74
    		Deny from 83.166.240.75
    		Deny from 46.119.58.184
    		Deny from 92.243.167.43
    		Deny from 94.45.182.250
    		Deny from 77.66.182.192
    		Deny from 94.41.128.154
    		Deny from 37.23.240.181
    		Deny from 31.132.176.141
    		Deny from 193.34.160.53
    		Deny from 188.191.161.27
    		Deny from 91.123.155.169
    		Deny from 193.169.4.156
    		Deny from 179.184.193.101
    		Deny from 5.58.63.91
    		Deny from 92.252.150.109
    		Deny from 178.216.123.221
    		Deny from 213.87.249.14
    		Deny from 46.188.121.172
    		Deny from 91.105.176.83
    		Deny from 178.213.192.34
    		Deny from 212.5.185.254
    		Deny from 81.30.48.66
    		Deny from 91.234.147.66
    		Deny from 176.194.57.243
    		Deny from 37.139.84.102
    		Deny from 178.209.225.24
    		Deny from 177.85.89.4
    		Deny from 195.218.183.23
    		Deny from 178.218.20.252
    		Deny from 31.211.47.93
    		Deny from 213.79.100.50
    	</IfModule>
    
    	# Protect System Files - Security > Settings > System Tweaks > System Files
    	<files .htaccess>
    		<IfModule mod_authz_core.c>
    			Require all denied
    		</IfModule>
    		<IfModule !mod_authz_core.c>
    			Order allow,deny
    			Deny from all
    		</IfModule>
    	</files>
    	<files readme.html>
    		<IfModule mod_authz_core.c>
    			Require all denied
    		</IfModule>
    		<IfModule !mod_authz_core.c>
    			Order allow,deny
    			Deny from all
    		</IfModule>
    	</files>
    	<files readme.txt>
    		<IfModule mod_authz_core.c>
    			Require all denied
    		</IfModule>
    		<IfModule !mod_authz_core.c>
    			Order allow,deny
    			Deny from all
    		</IfModule>
    	</files>
    	<files install.php>
    		<IfModule mod_authz_core.c>
    			Require all denied
    		</IfModule>
    		<IfModule !mod_authz_core.c>
    			Order allow,deny
    			Deny from all
    		</IfModule>
    	</files>
    	<files wp-config.php>
    		<IfModule mod_authz_core.c>
    			Require all denied
    		</IfModule>
    		<IfModule !mod_authz_core.c>
    			Order allow,deny
    			Deny from all
    		</IfModule>
    	</files>
    
    	# Disable XML-RPC - Security > Settings > WordPress Tweaks > XML-RPC
    	<files xmlrpc.php>
    		<IfModule mod_authz_core.c>
    			Require all denied
    		</IfModule>
    		<IfModule !mod_authz_core.c>
    			Order allow,deny
    			Deny from all
    		</IfModule>
    	</files>
    
    	# Disable Directory Browsing - Security > Settings > System Tweaks > Directory Browsing
    	Options -Indexes
    
    	<IfModule mod_rewrite.c>
    		RewriteEngine On
    
    		# Protect System Files - Security > Settings > System Tweaks > System Files
    		RewriteRule ^wp-admin/includes/ - [F]
    		RewriteRule !^wp-includes/ - [S=3]
    		RewriteCond %{SCRIPT_FILENAME} !^(.*)wp-includes/ms-files.php
    		RewriteRule ^wp-includes/[^/]+\.php$ - [F]
    		RewriteRule ^wp-includes/js/tinymce/langs/.+\.php - [F]
    		RewriteRule ^wp-includes/theme-compat/ - [F]
    
    		# Disable PHP in Uploads - Security > Settings > System Tweaks > Uploads
    		RewriteRule ^wp\-content/uploads/.*\.(?:php[1-6]?|pht|phtml?)$ - [NC,F]
    
    		# Filter Request Methods - Security > Settings > System Tweaks > Request Methods
    		RewriteCond %{REQUEST_METHOD} ^(TRACE|DELETE|TRACK) [NC]
    		RewriteRule ^.* - [F]
    
    		# Filter Suspicious Query Strings in the URL - Security > Settings > System Tweaks > Suspicious Query Strings
    		RewriteCond %{QUERY_STRING} \.\.\/ [NC,OR]
    		RewriteCond %{QUERY_STRING} ^.*\.(bash|git|hg|log|svn|swp|cvs) [NC,OR]
    		RewriteCond %{QUERY_STRING} etc/passwd [NC,OR]
    		RewriteCond %{QUERY_STRING} boot\.ini [NC,OR]
    		RewriteCond %{QUERY_STRING} ftp\:  [NC,OR]
    		RewriteCond %{QUERY_STRING} http\:  [NC,OR]
    		RewriteCond %{QUERY_STRING} https\:  [NC,OR]
    		RewriteCond %{QUERY_STRING} (\<|%3C).*script.*(\>|%3E) [NC,OR]
    		RewriteCond %{QUERY_STRING} mosConfig_[a-zA-Z_]{1,21}(=|%3D) [NC,OR]
    		RewriteCond %{QUERY_STRING} base64_encode.*\(.*\) [NC,OR]
    		RewriteCond %{QUERY_STRING} ^.*(%24&x).* [NC,OR]
    		RewriteCond %{QUERY_STRING} ^.*(127\.0).* [NC,OR]
    		RewriteCond %{QUERY_STRING} ^.*(globals|encode|localhost|loopback).* [NC,OR]
    		RewriteCond %{QUERY_STRING} ^.*(request|concat|insert|union|declare).* [NC]
    		RewriteCond %{QUERY_STRING} !^loggedout=true
    		RewriteCond %{QUERY_STRING} !^action=jetpack-sso
    		RewriteCond %{QUERY_STRING} !^action=rp
    		RewriteCond %{HTTP_COOKIE} !^.*wordpress_logged_in_.*$
    		RewriteCond %{HTTP_REFERER} !^http://maps\.googleapis\.com(.*)$
    		RewriteRule ^.* - [F]
    
    		# Filter Non-English Characters - Security > Settings > System Tweaks > Non-English Characters
    		RewriteCond %{QUERY_STRING} ^.*(%0|%A|%B|%C|%D|%E|%F).* [NC]
    		RewriteRule ^.* - [F]
    
    		# Reduce Comment Spam - Security > Settings > System Tweaks > Comment Spam
    		RewriteCond %{REQUEST_METHOD} POST
    		RewriteCond %{REQUEST_URI} /wp-comments-post\.php$
    		RewriteCond %{HTTP_USER_AGENT} ^$ [OR]
    		RewriteCond %{HTTP_REFERER} !^https?://(([^/]+\.)?nowak\.or\.at|jetpack\.wordpress\.com/jetpack-comment)(/|$) [NC]
    		RewriteRule ^.* - [F]
    	</IfModule>
    # END iThemes Security - Do not modify or remove this line
    
    # BEGIN WordPress
    <IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteBase /
    RewriteRule ^index\.php$ - [L]
    RewriteCond %{REQUEST_FILENAME} !-f
    RewriteCond %{REQUEST_FILENAME} !-d
    RewriteRule . /index.php [L]
    </IfModule>
    
    # END WordPress

    https://wordpress.org/plugins/better-wp-security/

The topic ‘No access in admin panel, menu item lost’ is closed to new replies.