Comments on: AskApache WordPress Hardening Plugin

By: Philipp

Philipp — Wed, 22 Oct 2008 15:53:51 +0000

From what’s told within the linked Article you would need to put it into each folder as the directory tag is only allowed to be used within httpd.conf. You could mod for sure the current htaccess file so it doesn’t block every php file like index.php if it would be within the root WP folder. Anyway this way here isn’t the best one as AskApache suggested some time ago. It’s better to proceed this way:
http://www.askapache.com/htaccess/htaccess-plugin-blocks-spam-hackers-and-password-protects-blog.html
as described under Protect wp-content & wp-includes. This is only denying direct requests to these files, internal calls will still work.

By: n00b

n00b — Thu, 09 Oct 2008 22:05:31 +0000

Hi.
About: “Restricting wpcontent
& wpincludes” do i need to put two copies of the .httacces file in each folder (wpcontent & wpincludes) or just one in the top level directory ponting to both?
I just read .htacces files supercedes the .htacces file in the above directory.

By: Hardening WordPress with .htaccess « WordPress .htaccess

Hardening WordPress with .htaccess « WordPress .htaccess — Mon, 11 Aug 2008 16:57:06 +0000

[...] WordPress with .htaccess Filed under: htaccess, security — htaccess @ 4:56 pm AskApache WordPress Hardening Plugin Filed Under (Plugin Reviews, WordPress) by DK on 7 August [...]