• Resolved ecdltf

    (@ecdltf)


    I’ve seen that there is a Deny rule for everything but png in the ninjafirewall folder.

    Problem is, on my (shared) host the Allow,Deny directives are disabled. rewrite_mod however is enabled.

    So, is it save if I replace the Deny rule with this?:

    
    <IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteRule !\.png$ - [F,L]
    </IfModule>
    

    https://wordpress.org/plugins/ninjafirewall/

Viewing 4 replies - 1 through 4 (of 4 total)
  • Plugin Author nintechnet

    (@nintechnet)

    Hi,

    It is fine.
    All PHP files in the /ninjafirewall/ folder are protected by the firewall. The .htaccess is just used to add an extra level of security.

    Maybe we’ll remove the Deny rules and replace them with mod_rewrite ones.

    Thread Starter ecdltf

    (@ecdltf)

    That’s great, thanks.

    Best,
    Tom

    Plugin Author nintechnet

    (@nintechnet)

    I forgot to mention that there is also another .htaccess with Deny rules in the “/wp-content/nfwlog/” folder, which is used to block any access to it.

    Thread Starter ecdltf

    (@ecdltf)

    Thanks, havn’t seen that one. Replaced both with Rewrite rules, everything fine.

    One more? 😉

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘.htaccess in /wp-content/plugins/ninjafirewall/’ is closed to new replies.