@@ -16,6 +16,36 @@ SetEnv SECURE_AUTH_SALT "secure_auth_salt"
16
16
SetEnv LOGGED_IN_SALT "logged_in_salt"
17
17
SetEnv NONCE_SALT "nonce_salt"
18
18
19
+ #AIOWPS_ENABLE_BRUTE_FORCE_PREVENTION_START
20
+ # Change the "secretlogin" to a url friendly word/phrase
21
+ RewriteEngine On
22
+ RewriteCond %{REQUEST_URI} (wp-admin|wp-login)
23
+ RewriteCond %{HTTP_COOKIE} !secretlogin= [NC]
24
+ RewriteCond %{HTTP_COOKIE} !aiowps_cookie_test_5fuhy5c3fa= [NC]
25
+ RewriteRule .* http://127.0.0.1 [L]
26
+ #AIOWPS_ENABLE_BRUTE_FORCE_PREVENTION_END
27
+
28
+ #AIOWPS_PREVENT_IMAGE_HOTLINKS_START
29
+ <IfModule mod_rewrite.c>
30
+ RewriteEngine on
31
+ RewriteCond %{HTTP_REFERER} !^$
32
+ RewriteCond %{REQUEST_FILENAME} -f
33
+ RewriteCond %{REQUEST_FILENAME} \.(gif|jpe?g?|png)$ [NC]
34
+ RewriteCond %{HTTP_REFERER} !^http(s)?://(.*)?\.?SITEADDRESS\.com [NC]
35
+ RewriteRule \.(gif|jpe?g?|png)$ - [F,NC,L]
36
+ </IfModule>
37
+ #AIOWPS_PREVENT_IMAGE_HOTLINKS_END
38
+
39
+ #AIOWPS_BLOCK_SPAMBOTS_START
40
+ <IfModule mod_rewrite.c>
41
+ RewriteCond %{REQUEST_METHOD} POST
42
+ RewriteCond %{REQUEST_URI} ^(.*)?wp-comments-post\.php(.*)$
43
+ RewriteCond %{HTTP_REFERER} !^http(s)?://(.*)?\.SITEADDRESS\.com [NC,OR]
44
+ RewriteCond %{HTTP_USER_AGENT} ^$
45
+ RewriteRule .* http://127.0.0.1 [L]
46
+ </IfModule>
47
+ #AIOWPS_BLOCK_SPAMBOTS_END
48
+
19
49
# Block the include-only files.
20
50
<IfModule mod_rewrite.c>
21
51
RewriteEngine On
@@ -163,44 +193,6 @@ Redirectmatch 403 Table\/Latest\/index\.
163
193
</IfModule>
164
194
#AIOWPS_ADVANCED_CHAR_STRING_FILTER_END
165
195
166
- #AIOWPS_ENABLE_BRUTE_FORCE_PREVENTION_START (may need to reset this http cookie per site)
167
- RewriteEngine On
168
- RewriteCond %{REQUEST_URI} (wp-admin|wp-login)
169
- RewriteCond %{HTTP_COOKIE} !secretlogin= [NC]
170
- RewriteCond %{HTTP_COOKIE} !aiowps_cookie_test_5fuhy5c3fa= [NC]
171
- RewriteRule .* http://127.0.0.1 [L]
172
- #AIOWPS_ENABLE_BRUTE_FORCE_PREVENTION_END
173
-
174
- #AIOWPS_PREVENT_IMAGE_HOTLINKS_START
175
- <IfModule mod_rewrite.c>
176
- RewriteEngine on
177
- RewriteCond %{HTTP_REFERER} !^$
178
- RewriteCond %{REQUEST_FILENAME} -f
179
- RewriteCond %{REQUEST_FILENAME} \.(gif|jpe?g?|png)$ [NC]
180
- RewriteCond %{HTTP_REFERER} !^http(s)?://(.*)?\.?SITEADDRESS\.com [NC]
181
- RewriteRule \.(gif|jpe?g?|png)$ - [F,NC,L]
182
- </IfModule>
183
- #AIOWPS_PREVENT_IMAGE_HOTLINKS_END
184
-
185
- #AIOWPS_BLOCK_SPAMBOTS_START
186
- <IfModule mod_rewrite.c>
187
- RewriteCond %{REQUEST_METHOD} POST
188
- RewriteCond %{REQUEST_URI} ^(.*)?wp-comments-post\.php(.*)$
189
- RewriteCond %{HTTP_REFERER} !^http(s)?://(.*)?\.SITEADDRESS\.com [NC,OR]
190
- RewriteCond %{HTTP_USER_AGENT} ^$
191
- RewriteRule .* http://127.0.0.1 [L]
192
- </IfModule>
193
- #AIOWPS_BLOCK_SPAMBOTS_END
194
-
195
- #AIOWPS_LOGIN_WHITELIST_START
196
- # Uncomment if you only want people to edit from certain IPs
197
- #<FilesMatch "^(wp-login\.php)">
198
- #Order Allow,Deny
199
- #Allow from SITEADDRESS
200
- #Allow from 192.254.186.151
201
- #Allow from 67.86.250.42
202
- #</FilesMatch>
203
- #AIOWPS_LOGIN_WHITELIST_END
204
196
205
197
#AIOWPS_FIVE_G_BLACKLIST_START
206
198
# 5G BLACKLIST/FIREWALL (2013)
0 commit comments