@@ -16,6 +16,36 @@ SetEnv SECURE_AUTH_SALT "secure_auth_salt"
1616SetEnv LOGGED_IN_SALT "logged_in_salt"
1717SetEnv NONCE_SALT "nonce_salt"
1818
19+ #AIOWPS_ENABLE_BRUTE_FORCE_PREVENTION_START
20+ # Change the "secretlogin" to a url friendly word/phrase
21+ RewriteEngine On
22+ RewriteCond %{REQUEST_URI} (wp-admin|wp-login)
23+ RewriteCond %{HTTP_COOKIE} !secretlogin= [NC]
24+ RewriteCond %{HTTP_COOKIE} !aiowps_cookie_test_5fuhy5c3fa= [NC]
25+ RewriteRule .* http://127.0.0.1 [L]
26+ #AIOWPS_ENABLE_BRUTE_FORCE_PREVENTION_END
27+
28+ #AIOWPS_PREVENT_IMAGE_HOTLINKS_START
29+ <IfModule mod_rewrite.c>
30+ RewriteEngine on
31+ RewriteCond %{HTTP_REFERER} !^$
32+ RewriteCond %{REQUEST_FILENAME} -f
33+ RewriteCond %{REQUEST_FILENAME} \.(gif|jpe?g?|png)$ [NC]
34+ RewriteCond %{HTTP_REFERER} !^http(s)?://(.*)?\.?SITEADDRESS\.com [NC]
35+ RewriteRule \.(gif|jpe?g?|png)$ - [F,NC,L]
36+ </IfModule>
37+ #AIOWPS_PREVENT_IMAGE_HOTLINKS_END
38+
39+ #AIOWPS_BLOCK_SPAMBOTS_START
40+ <IfModule mod_rewrite.c>
41+ RewriteCond %{REQUEST_METHOD} POST
42+ RewriteCond %{REQUEST_URI} ^(.*)?wp-comments-post\.php(.*)$
43+ RewriteCond %{HTTP_REFERER} !^http(s)?://(.*)?\.SITEADDRESS\.com [NC,OR]
44+ RewriteCond %{HTTP_USER_AGENT} ^$
45+ RewriteRule .* http://127.0.0.1 [L]
46+ </IfModule>
47+ #AIOWPS_BLOCK_SPAMBOTS_END
48+
1949# Block the include-only files.
2050<IfModule mod_rewrite.c>
2151RewriteEngine On
@@ -163,44 +193,6 @@ Redirectmatch 403 Table\/Latest\/index\.
163193</IfModule>
164194#AIOWPS_ADVANCED_CHAR_STRING_FILTER_END
165195
166- #AIOWPS_ENABLE_BRUTE_FORCE_PREVENTION_START (may need to reset this http cookie per site)
167- RewriteEngine On
168- RewriteCond %{REQUEST_URI} (wp-admin|wp-login)
169- RewriteCond %{HTTP_COOKIE} !secretlogin= [NC]
170- RewriteCond %{HTTP_COOKIE} !aiowps_cookie_test_5fuhy5c3fa= [NC]
171- RewriteRule .* http://127.0.0.1 [L]
172- #AIOWPS_ENABLE_BRUTE_FORCE_PREVENTION_END
173-
174- #AIOWPS_PREVENT_IMAGE_HOTLINKS_START
175- <IfModule mod_rewrite.c>
176- RewriteEngine on
177- RewriteCond %{HTTP_REFERER} !^$
178- RewriteCond %{REQUEST_FILENAME} -f
179- RewriteCond %{REQUEST_FILENAME} \.(gif|jpe?g?|png)$ [NC]
180- RewriteCond %{HTTP_REFERER} !^http(s)?://(.*)?\.?SITEADDRESS\.com [NC]
181- RewriteRule \.(gif|jpe?g?|png)$ - [F,NC,L]
182- </IfModule>
183- #AIOWPS_PREVENT_IMAGE_HOTLINKS_END
184-
185- #AIOWPS_BLOCK_SPAMBOTS_START
186- <IfModule mod_rewrite.c>
187- RewriteCond %{REQUEST_METHOD} POST
188- RewriteCond %{REQUEST_URI} ^(.*)?wp-comments-post\.php(.*)$
189- RewriteCond %{HTTP_REFERER} !^http(s)?://(.*)?\.SITEADDRESS\.com [NC,OR]
190- RewriteCond %{HTTP_USER_AGENT} ^$
191- RewriteRule .* http://127.0.0.1 [L]
192- </IfModule>
193- #AIOWPS_BLOCK_SPAMBOTS_END
194-
195- #AIOWPS_LOGIN_WHITELIST_START
196- # Uncomment if you only want people to edit from certain IPs
197- #<FilesMatch "^(wp-login\.php)">
198- #Order Allow,Deny
199- #Allow from SITEADDRESS
200- #Allow from 192.254.186.151
201- #Allow from 67.86.250.42
202- #</FilesMatch>
203- #AIOWPS_LOGIN_WHITELIST_END
204196
205197#AIOWPS_FIVE_G_BLACKLIST_START
206198# 5G BLACKLIST/FIREWALL (2013)
0 commit comments