David A. Windham
david
/
wp
1
0
Fork 0
Files Issues 0 Pull Requests 0
Branch: main
Branches Tags
wp
/
.htaccess

.htaccess 20 KB
Permalink History Raw

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355 
  1. Options +FollowSymLinks
    2. 

  2. 

  3. <IfModule mod_rewrite.c>
    4. 

  4. RewriteEngine On
    5. 

  5. RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
    6. 

  6. RewriteBase /
    7. 

  7. RewriteRule ^index\.php$ - [L]
    8. 

  8. RewriteCond %{REQUEST_FILENAME} !-f
    9. 

  9. RewriteCond %{REQUEST_FILENAME} !-d
    10. 

  10. RewriteRule . /index.php [L]
    11. 

  11. </IfModule>
    12. 

  12. 

  13. #### Use /wp/ subdirectory ####
    14. 

  14. <IfModule mod_rewrite.c>
    15. 

  15. 	RewriteEngine On
    16. 

  16. 	RewriteBase /
    17. 

  17. 	RewriteRule ^(wp-admin/.*)$ /wp/$1 [L]
    18. 

  18. 	RewriteRule ^(wp-[^/]+\.php)$ /wp/$1 [L]
    19. 

  19. 	RewriteRule ^xmlrpc\.php$ /wp/xmlrpc.php [L]
    20. 

  20. 	RewriteRule ^(wp-includes/.*)$ /wp/$1 [L]
    21. 

  21. </IfModule>
    22. 

  22. 

  23. #### Block wp-config.php ####
    24. 

  24. <files wp-config.php>
    25. 

  25. 	Order allow,deny
    26. 

  26. 	Deny from all
    27. 

  27. </files>
    28. 

  28. 

  29. #### Block xmlrpc.php ####
    30. 

  30. <Files xmlrpc.php>
    31. 

  31. 	Order allow,deny
    32. 

  32. 	Deny from all
    33. 

  33. </Files>
    34. 

  34. 

  35. #### Block /wp-json/wp/v2/users & wp-json/wp/v2/comments ####
    36. 

  36. <IfModule mod_rewrite.c>
    37. 

  37.   RewriteCond %{REQUEST_METHOD} ^(GET|POST|PUT|PATCH|DELETE) [NC]
    38. 

  38.   RewriteCond %{REQUEST_URI} ^.*wp-json/wp/v2/(users|comments) [NC]
    39. 

  39.   RewriteRule ^(.*)$ - [F]
    40. 

  40. </IfModule>
    41. 

  41. 

  42. #### Stop Apache from serving .ht* files ####
    43. 

  43. <Files ~ "^\.ht">
    44. 

  44.   Order allow,deny
    45. 

  45.   Deny from all
    46. 

  46. </Files>
    47. 

  47. 

  48. #### Protect wp-login.php ####
    49. 

  49. ####<Files wp-login.php>
    50. 

  50. ####  AuthName "Private"
    51. 

  51. ####  AuthType Basic
    52. 

  52. ####	AuthUserFile /var/www/domain.com/.htpasswd
    53. 

  53. ####	require valid-user
    54. 

  54. ####</Files>
    55. 

  55. 

  56. #### block blade.php files ####
    57. 

  57. <IfModule mod_headers.c>
    58. 

  58. 	<FilesMatch ".+\.(blade\.php)$">
    59. 

  59. 	    <IfModule mod_authz_core.c>
    60. 

  60. 	        Require all denied
    61. 

  61. 	    </IfModule>
    62. 

  62. 	</FilesMatch>
    63. 

  63. </IfModule>
    64. 

  64. 

  65. <IfModule mod_rewrite.c>
    66. 

  66.   RewriteCond %{SCRIPT_FILENAME} -d [OR]
    67. 

  67.   RewriteCond %{SCRIPT_FILENAME} -f
    68. 

  68.   RewriteRule "(^|/)\." - [F]
    69. 

  69. </IfModule>
    70. 

  70. 

  71. #### Force SSL ####
    72. 

  72. 	#RewriteEngine On
    73. 

  73. 	#RewriteCond %{HTTPS} !=on
    74. 

  74. 	#RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
    75. 

  75. 

  76. <IfModule mod_autoindex.c>
    77. 

  77. 	Options -Indexes
    78. 

  78. </IfModule>
    79. 

  79. 

  80. <IfModule mod_headers.c>
    81. 

  81.   Header set X-Content-Type-Options "nosniff"
    82. 

  82. </IfModule>
    83. 

  83. 

  84. <IfModule mod_headers.c>
    85. 

  85. 	Header set X-XSS-Protection "1; mode=block"
    86. 

  86. 	<FilesMatch "\.(appcache|atom|crx|css|cur|eot|f4[abpv]|flv|gif|htc|ico|jpe?g|js|json(ld)?|m4[av]|manifest|map|mp4|oex|og[agv]|opus|otf|pdf|png|rdf|rss|safariextz|svgz?|swf|tt[cf]|vcf|vtt|webapp|web[mp]|woff|xml|xpi)$">
    87. 

  87.     Header unset X-XSS-Protection
    88. 

  88. 	</FilesMatch>
    89. 

  89. </IfModule>
    90. 

  90. 

  91. <IfModule mod_headers.c>
    92. 

  92.   Header unset ETag
    93. 

  93. </IfModule>
    94. 

  94. FileETag None
    95. 

  95. 

  96. <IfModule mod_headers.c>
    97. 

  97.   <FilesMatch "\.(eot|otf|tt[cf]|woff)$">
    98. 

  98.      Header set Access-Control-Allow-Origin "*"
    99. 

  99.   </FilesMatch>
    100. 

  100. </IfModule>
    101. 

  101. 

  102. <IfModule mod_headers.c>
    103. 

  103. 	Header set X-Frame-Options "DENY"
    104. 

  104. 	<FilesMatch "\.(appcache|atom|crx|css|cur|eot|f4[abpv]|flv|gif|htc|ico|jpe?g|js|json(ld)?|m4[av]|manifest|map|mp4|oex|og[agv]|opus|otf|pdf|png|rdf|rss|safariextz|svgz?|swf|tt[cf]|vcf|vtt|webapp|web[mp]|woff|xml|xpi)$">
    105. 

  105. 		Header unset X-Frame-Options
    106. 

  106. 	</FilesMatch>
    107. 

  107. </IfModule>
    108. 

  108. 

  109. <IfModule mod_setenvif.c>
    110. 

  110.   <IfModule mod_headers.c>
    111. 

  111.     <FilesMatch "\.(cur|gif|ico|jpe?g|png|svgz?|webp)$">
    112. 

  112.       SetEnvIf Origin ":" IS_CORS
    113. 

  113.       Header set Access-Control-Allow-Origin "*" env=IS_CORS
    114. 

  114.     </FilesMatch>
    115. 

  115.   </IfModule>
    116. 

  116. </IfModule>
    117. 

  117. 

  118. <FilesMatch "(^#.*#|\.(env|bak|config|dist|fla|in[ci]|log|psd|sh|sql|sw[op])|~)$">
    119. 

  119.   <IfModule !mod_authz_core.c>
    120. 

  120.     Order allow,deny
    121. 

  121.     Deny from all
    122. 

  122.     Satisfy All
    123. 

  123.   </IfModule>
    124. 

  124.   <IfModule mod_authz_core.c>
    125. 

  125.     Require all denied
    126. 

  126.   </IfModule>
    127. 

  127. </FilesMatch>
    128. 

  128. 

  129. <IfModule mod_headers.c>
    130. 

  130.   <FilesMatch "\.(js|css|xml|gz)$">
    131. 

  131.     Header append Vary: Accept-Encoding
    132. 

  132.   </FilesMatch>
    133. 

  133. </IfModule>
    134. 

  134. 

  135. <IfModule mod_headers.c>
    136. 

  136.   Header set X-UA-Compatible "IE=edge"
    137. 

  137.   <FilesMatch "\.(appcache|atom|crx|css|cur|eot|f4[abpv]|flv|gif|htc|ico|jpe?g|js|json(ld)?|m4[av]|manifest|map|mp4|oex|og[agv]|opus|otf|pdf|png|rdf|rss|safariextz|svgz?|swf|tt[cf]|vcf|vtt|webapp|web[mp]|woff|xml|xpi)$">
    138. 

  138.      Header unset X-UA-Compatible
    139. 

  139.   </FilesMatch>
    140. 

  140. </IfModule>
    141. 

  141. Header set Cache-Control "max-age=7200, must-revalidate"
    142. 

  142. 

  143. <IfModule mod_mime.c>
    144. 

  144.     AddType audio/mp4                                   m4a f4a f4b
    145. 

  145.     AddType audio/ogg                                   oga ogg opus
    146. 

  146.     AddType application/json                            json map
    147. 

  147.     AddType application/ld+json                         jsonld
    148. 

  148.     AddType application/javascript                      js
    149. 

  149.     AddType video/mp4                                   f4v f4p m4v mp4
    150. 

  150.     AddType video/ogg                                   ogv
    151. 

  151.     AddType video/webm                                  webm
    152. 

  152.     AddType video/x-flv                                 flv
    153. 

  153.     AddType application/font-woff                       woff
    154. 

  154.     AddType application/vnd.ms-fontobject               eot
    155. 

  155.     AddType application/x-font-ttf                      ttc ttf
    156. 

  156.     AddType font/opentype                               otf
    157. 

  157.     AddType image/svg+xml                               svgz
    158. 

  158.     AddEncoding gzip                                    svgz
    159. 

  159.     AddType application/octet-stream                    safariextz
    160. 

  160.     AddType application/x-chrome-extension              crx
    161. 

  161.     AddType application/x-web-app-manifest+json         webapp
    162. 

  162.     AddType application/xml                             atom rdf rss xml
    163. 

  163.     AddType image/x-icon                                cur
    164. 

  164.     AddType text/cache-manifest                         appcache manifest
    165. 

  165.     AddType text/x-vcard                                vcf
    166. 

  166. </IfModule>
    167. 

  167. 

  168. <IfModule mod_mime.c>
    169. 

  169.     AddCharset utf-8 .atom .css .js .json .jsonld .rss .vtt .webapp .xml
    170. 

  170. </IfModule>
    171. 

  171. 

  172. <IfModule mod_expires.c>
    173. 

  173. ExpiresActive on
    174. 

  174. ExpiresDefault                                      "access plus 1 month"
    175. 

  175. ExpiresByType text/html                             "access plus 0 seconds"
    176. 

  176. ExpiresByType text/css                              "access plus 1 year"
    177. 

  177. ExpiresByType image/jpeg                            "access plus 1 year"
    178. 

  178. ExpiresByType image/png                             "access plus 1 year"
    179. 

  179. ExpiresByType application/javascript                "access plus 1 year"
    180. 

  180. ExpiresByType text/javascript                		  	"access plus 1 year"
    181. 

  181. ExpiresByType text/javascript A2592000
    182. 

  182. 

  183. ExpiresByType image/x-icon                          "access plus 1 week"
    184. 

  184. ExpiresByType text/x-component                      "access plus 1 month"
    185. 

  185. ExpiresByType audio/ogg                             "access plus 1 month"
    186. 

  186. ExpiresByType image/gif                             "access plus 1 month"
    187. 

  187. ExpiresByType video/mp4                             "access plus 1 month"
    188. 

  188. ExpiresByType video/ogg                             "access plus 1 month"
    189. 

  189. ExpiresByType video/webm                            "access plus 1 month"
    190. 

  190. ExpiresByType application/font-woff                 "access plus 1 month"
    191. 

  191. ExpiresByType application/vnd.ms-fontobject         "access plus 1 month"
    192. 

  192. ExpiresByType application/x-font-ttf                "access plus 1 month"
    193. 

  193. ExpiresByType font/opentype                         "access plus 1 month"
    194. 

  194. ExpiresByType image/svg+xml                         "access plus 1 month"
    195. 

  195. 

  196. ExpiresByType text/xml                              "access plus 0 seconds"
    197. 

  197. ExpiresByType application/x-web-app-manifest+json   "access plus 0 seconds"
    198. 

  198. ExpiresByType text/cache-manifest                   "access plus 0 seconds"
    199. 

  199. ExpiresByType application/json                      "access plus 0 seconds"
    200. 

  200. ExpiresByType application/ld+json                   "access plus 0 seconds"
    201. 

  201. ExpiresByType application/xml                       "access plus 0 seconds"
    202. 

  202. ExpiresByType application/atom+xml                  "access plus 1 hour"
    203. 

  203. ExpiresByType application/rss+xml                   "access plus 1 hour"
    204. 

  204. </IfModule>
    205. 

  205. 

  206. <IfModule mod_deflate.c>
    207. 

  207.   <IfModule mod_setenvif.c>
    208. 

  208.     <IfModule mod_headers.c>
    209. 

  209. 			SetEnvIfNoCase ^(Accept-EncodXng|X-cept-Encoding|X{15}|~{15}|-{15})$ ^((gzip|deflate)\s*,?\s*)+|[X~-]{4,13}$ HAVE_Accept-Encoding
    210. 

  210. 			RequestHeader append Accept-Encoding "gzip,deflate" env=HAVE_Accept-Encoding
    211. 

  211.     </IfModule>
    212. 

  212.   </IfModule>
    213. 

  213.   <IfModule mod_filter.c>
    214. 

  214.     AddOutputFilterByType DEFLATE application/atom+xml \
    215. 

  215.                                   application/javascript \
    216. 

  216.                                   application/json \
    217. 

  217.                                   application/ld+json \
    218. 

  218.                                   application/rss+xml \
    219. 

  219.                                   application/vnd.ms-fontobject \
    220. 

  220.                                   application/x-font-ttf \
    221. 

  221.                                   application/x-web-app-manifest+json \
    222. 

  222.                                   application/xhtml+xml \
    223. 

  223.                                   application/xml \
    224. 

  224.                                   font/opentype \
    225. 

  225.                                   image/svg+xml \
    226. 

  226.                                   image/x-icon \
    227. 

  227.                                   text/css \
    228. 

  228.                                   text/html \
    229. 

  229.                                   text/plain \
    230. 

  230.                                   text/x-component \
    231. 

  231.                                   text/xml
    232. 

  232.   </IfModule>
    233. 

  233. </IfModule>
    234. 

  234. 

  235. 

  236. 

  237. <IfModule mod_rewrite.c>
    238. 

  238. RewriteEngine on
    239. 

  239. Options +FollowSymlinks
    240. 

  240. RewriteCond %{HTTP_REFERER} ^https?://([^.]+\.)*semalt\.com [NC,OR]
    241. 

  241. RewriteCond %{HTTP_REFERER} ^https?://([^.]+\.)*savetubevideo\.com\ [NC,OR]
    242. 

  242. RewriteCond %{HTTP_REFERER} ^https?://([^.]+\.)*kambasoft\.com\ [NC,OR]
    243. 

  243. RewriteCond %{HTTP_REFERER} ^https?://([^.]+\.)*srecorder\.com\ [NC,OR]
    244. 

  244. RewriteCond %{HTTP_REFERER} ^https?://([^.]+\.)*4webmasters.org\ [NC,OR]
    245. 

  245. RewriteCond %{HTTP_REFERER} ^https?://([^.]+\.)*best\-seo\-offer\.com [NC,OR]
    246. 

  246. RewriteCond %{HTTP_REFERER} best\-seo\-offer\.com [NC,OR]
    247. 

  247. RewriteCond %{HTTP_REFERER} ^https?://([^.]+\.)*best\-seo\-solution\.com [NC,OR]
    248. 

  248. RewriteCond %{HTTP_REFERER} best\-seo\-solution\.com [NC,OR]
    249. 

  249. RewriteCond %{HTTP_REFERER} ^https?://([^.]+\.)*buttons\-for\-website\.com [NC,OR]
    250. 

  250. RewriteCond %{HTTP_REFERER} buttons\-for\-website\.com [NC,OR]
    251. 

  251. RewriteCond %{HTTP_REFERER} ^https?://([^.]+\.)*buttons\-for\-your\-website\.com [NC,OR]
    252. 

  252. RewriteCond %{HTTP_REFERER} buttons\-for\-your\-website\.com [NC,OR]
    253. 

  253. RewriteCond %{HTTP_REFERER} ^https?://([^.]+\.)*justprofit\.xyz [NC,OR]
    254. 

  254. RewriteCond %{HTTP_REFERER} justprofit\.xyz [NC,OR]
    255. 

  255. RewriteCond %{HTTP_REFERER} ^https?://([^.]+\.)*100dollars\-seo\.com [NC,OR]
    256. 

  256. RewriteCond %{HTTP_REFERER} 100dollars\-seo\.com [NC,OR]
    257. 

  257. RewriteCond %{HTTP_REFERER} 100dollars-seo.com [NC,OR]
    258. 

  258. RewriteCond %{HTTP_REFERER} ^https?://([^.]+\.)*7makemoneyonline.com\.com [NC]
    259. 

  259. RewriteCond %{HTTP_REFERER} ^https?://([^.]+\.)*best-seo-software\.xyz [NC,OR]
    260. 

  260. RewriteCond %{HTTP_REFERER} best-seo-software\.xyz [NC,OR]
    261. 

  261. RewriteCond %{HTTP_REFERER} ^https?://([^.]+\.)*1-99seo\.com [NC,OR]
    262. 

  262. RewriteCond %{HTTP_REFERER} 1-99seo\.com [NC,OR]
    263. 

  263. RewriteRule .* - [F]
    264. 

  264. </IfModule>
    265. 

  265. 

  266. 

  267. ############# 7G FIREWALL v1.3 20200903 #################
    268. 

  268. ###### @ https://perishablepress.com/7g-firewall/ #######
    269. 

  269. 

  270. ServerSignature Off
    271. 

  271. 

  272. <IfModule mod_rewrite.c>
    273. 

  273. 	RewriteCond %{QUERY_STRING} ([a-z0-9]{2000,}) [NC,OR]
    274. 

  274. 	RewriteCond %{QUERY_STRING} (/|%2f)(:|%3a)(/|%2f) [NC,OR]
    275. 

  275. 	RewriteCond %{QUERY_STRING} (/|%2f)(\*|%2a)(\*|%2a)(/|%2f) [NC,OR]
    276. 

  276. 	RewriteCond %{QUERY_STRING} (`|<|>|\^|\|\\|0x00|%00|%0d%0a) [NC,OR]
    277. 

  277. 	RewriteCond %{QUERY_STRING} (cmd|command)(=|%3d)(chdir|mkdir)(.*)(x20) [NC,OR]
    278. 

  278. 	RewriteCond %{QUERY_STRING} (ckfinder|fullclick|ckfinder|fckeditor) [NC,OR]
    279. 

  279. 	RewriteCond %{QUERY_STRING} (globals|mosconfig([a-z_]{1,22})|request)(=|\[) [NC,OR]
    280. 

  280. 	RewriteCond %{QUERY_STRING} (/|%2f)((wp-)?config)((\.|%2e)inc)?((\.|%2e)php) [NC,OR]
    281. 

  281. 	RewriteCond %{QUERY_STRING} (thumbs?(_editor|open)?|tim(thumbs?)?)((\.|%2e)php) [NC,OR]
    282. 

  282. 	RewriteCond %{QUERY_STRING} (absolute_|base|root_)(dir|path)(=|%3d)(ftp|https?) [NC,OR]
    283. 

  283. 	RewriteCond %{QUERY_STRING} (localhost|loopback|127(\.|%2e)0(\.|%2e)0(\.|%2e)1) [NC,OR]
    284. 

  284. 	RewriteCond %{QUERY_STRING} (s)?(ftp|inurl|php)(s)?(:(/|%2f|%u2215)(/|%2f|%u2215)) [NC,OR]
    285. 

  285. 	RewriteCond %{QUERY_STRING} (\.|20)(get|the)(_|%5f)(permalink|posts_page_url)(\(|%28) [NC,OR]
    286. 

  286. 	RewriteCond %{QUERY_STRING} ((boot|win)((\.|%2e)ini)|etc(/|%2f)passwd|self(/|%2f)environ) [NC,OR]
    287. 

  287. 	RewriteCond %{QUERY_STRING} (((/|%2f){3,3})|((\.|%2e){3,3})|((\.|%2e){2,2})(/|%2f|%u2215)) [NC,OR]
    288. 

  288. 	RewriteCond %{QUERY_STRING} (benchmark|char|exec|fopen|function|html)(.*)(\(|%28)(.*)(\)|%29) [NC,OR]
    289. 

  289. 	RewriteCond %{QUERY_STRING} (php)([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}) [NC,OR]
    290. 

  290. 	RewriteCond %{QUERY_STRING} (e|%65|%45)(v|%76|%56)(a|%61|%31)(l|%6c|%4c)(.*)(\(|%28)(.*)(\)|%29) [NC,OR]
    291. 

  291. 	RewriteCond %{QUERY_STRING} (/|%2f)(=|%3d|$&|_mm|cgi(\.|-)|inurl(:|%3a)(/|%2f)|(mod|path)(=|%3d)(\.|%2e)) [NC,OR]
    292. 

  292. 	RewriteCond %{QUERY_STRING} (<|%3c)(.*)(e|%65|%45)(m|%6d|%4d)(b|%62|%42)(e|%65|%45)(d|%64|%44)(.*)(>|%3e) [NC,OR]
    293. 

  293. 	RewriteCond %{QUERY_STRING} (<|%3c)(.*)(i|%69|%49)(f|%66|%46)(r|%72|%52)(a|%61|%41)(m|%6d|%4d)(e|%65|%45)(.*)(>|%3e) [NC,OR]
    294. 

  294. 	RewriteCond %{QUERY_STRING} (<|%3c)(.*)(o|%4f|%6f)(b|%62|%42)(j|%4a|%6a)(e|%65|%45)(c|%63|%43)(t|%74|%54)(.*)(>|%3e) [NC,OR]
    295. 

  295. 	RewriteCond %{QUERY_STRING} (<|%3c)(.*)(s|%73|%53)(c|%63|%43)(r|%72|%52)(i|%69|%49)(p|%70|%50)(t|%74|%54)(.*)(>|%3e) [NC,OR]
    296. 

  296. 	RewriteCond %{QUERY_STRING} (\+|%2b|%20)(d|%64|%44)(e|%65|%45)(l|%6c|%4c)(e|%65|%45)(t|%74|%54)(e|%65|%45)(\+|%2b|%20) [NC,OR]
    297. 

  297. 	RewriteCond %{QUERY_STRING} (\+|%2b|%20)(i|%69|%49)(n|%6e|%4e)(s|%73|%53)(e|%65|%45)(r|%72|%52)(t|%74|%54)(\+|%2b|%20) [NC,OR]
    298. 

  298. 	RewriteCond %{QUERY_STRING} (\+|%2b|%20)(s|%73|%53)(e|%65|%45)(l|%6c|%4c)(e|%65|%45)(c|%63|%43)(t|%74|%54)(\+|%2b|%20) [NC,OR]
    299. 

  299. 	RewriteCond %{QUERY_STRING} (\+|%2b|%20)(u|%75|%55)(p|%70|%50)(d|%64|%44)(a|%61|%41)(t|%74|%54)(e|%65|%45)(\+|%2b|%20) [NC,OR]
    300. 

  300. 	RewriteCond %{QUERY_STRING} (\\x00|(\"|%22|\'|%27)?0(\"|%22|\'|%27)?(=|%3d)(\"|%22|\'|%27)?0|cast(\(|%28)0x|or%201(=|%3d)1) [NC,OR]
    301. 

  301. 	RewriteCond %{QUERY_STRING} (g|%67|%47)(l|%6c|%4c)(o|%6f|%4f)(b|%62|%42)(a|%61|%41)(l|%6c|%4c)(s|%73|%53)(=|[|%[0-9A-Z]{0,2}) [NC,OR]
    302. 

  302. 	RewriteCond %{QUERY_STRING} (_|%5f)(r|%72|%52)(e|%65|%45)(q|%71|%51)(u|%75|%55)(e|%65|%45)(s|%73|%53)(t|%74|%54)(=|[|%[0-9A-Z]{2,}) [NC,OR]
    303. 

  303. 	RewriteCond %{QUERY_STRING} (j|%6a|%4a)(a|%61|%41)(v|%76|%56)(a|%61|%31)(s|%73|%53)(c|%63|%43)(r|%72|%52)(i|%69|%49)(p|%70|%50)(t|%74|%54)(:|%3a)(.*)(;|%3b|\)|%29) [NC,OR]
    304. 

  304. 	RewriteCond %{QUERY_STRING} (b|%62|%42)(a|%61|%41)(s|%73|%53)(e|%65|%45)(6|%36)(4|%34)(_|%5f)(e|%65|%45|d|%64|%44)(e|%65|%45|n|%6e|%4e)(c|%63|%43)(o|%6f|%4f)(d|%64|%44)(e|%65|%45)(.*)(\()(.*)(\)) [NC,OR]
    305. 

  305. 	RewriteCond %{QUERY_STRING} (@copy|\$_(files|get|post)|allow_url_(fopen|include)|auto_prepend_file|blexbot|browsersploit|(c99|php)shell|curl(_exec|test)|disable_functions?|document_root|elastix|encodeuricom|exploit|fclose|fgets|file_put_contents|fputs|fsbuff|fsockopen|gethostbyname|grablogin|hmei7|input_file|null|open_basedir|outfile|passthru|phpinfo|popen|proc_open|quickbrute|remoteview|root_path|safe_mode|shell_exec|site((.){0,2})copier|sux0r|trojan|user_func_array|wget|xertive) [NC,OR]
    306. 

  306. 	RewriteCond %{QUERY_STRING} (;|<|>|\'|\"|\)|%0a|%0d|%22|%27|%3c|%3e|%00)(.*)(/\*|alter|base64|benchmark|cast|char|concat|convert|create|encode|declare|delete|drop|insert|md5|order|request|script|select|set|union|update) [NC,OR]
    307. 

  307. 	RewriteCond %{QUERY_STRING} ((\+|%2b)(concat|delete|get|select|union)(\+|%2b)) [NC,OR]
    308. 

  308. 	RewriteCond %{QUERY_STRING} (union)(.*)(select)(.*)(\(|%28) [NC,OR]
    309. 

  309. 	RewriteCond %{QUERY_STRING} (concat)(.*)(\(|%28) [NC]
    310. 

  310. 	RewriteRule .* - [F,L]
    311. 

  311. </IfModule>
    312. 

  312. 

  313. <IfModule mod_rewrite.c>
    314. 

  314. 	RewriteCond %{REQUEST_URI} ([a-z0-9]{2000,}) [NC,OR]
    315. 

  315. 	RewriteCond %{REQUEST_URI} (=?\\(\'|%27)/?)(\.) [NC,OR]
    316. 

  316. 	RewriteCond %{REQUEST_URI} (\^|`|<|>|%|\\|\{|\}|\|) [NC,OR]
    317. 

  317. 	RewriteCond %{REQUEST_URI} (\.)(php)(\()?([0-9]+)(\))?(/)?$ [NC,OR]
    318. 

  318. 	RewriteCond %{REQUEST_URI} (\.|20)(get|the)(_)(permalink|posts_page_url)(\() [NC,OR]
    319. 

  319. 	RewriteCond %{REQUEST_URI} (///|\?\?|/&&|/\*(.*)\*/|/:/|\\\\|0x00|%00|%0d%0a) [NC,OR]
    320. 

  320. 	RewriteCond %{REQUEST_URI} (\.)(ds_store|htaccess|htpasswd|init?|mysql-select-db)(/)?$ [NC,OR]
    321. 

  321. 	RewriteCond %{REQUEST_URI} (/)(bin)(/)(cc|chmod|chsh|cpp|echo|id|kill|mail|nasm|perl|ping|ps|python|tclsh)(/)?$ [NC,OR]
    322. 

  322. 	RewriteCond %{REQUEST_URI} (/)(::[0-9999]|%3a%3a[0-9999]|127\.0\.0\.1|localhost|loopback|makefile|pingserver|wwwroot)(/)? [NC,OR]
    323. 

  323. 	RewriteCond %{REQUEST_URI} (\(null\)|\{\$itemURL\}|cAsT\(0x|echo(.*)kae|etc/passwd|eval\(|self/environ|\+union\+all\+select) [NC,OR]
    324. 

  324. 	RewriteCond %{REQUEST_URI} (/)(awstats|(c99|php|web)shell|document_root|error_log|listinfo|muieblack|remoteview|site((.){0,2})copier|sqlpatch|sux0r) [NC,OR]
    325. 

  325. 	RewriteCond %{REQUEST_URI} (/)((php|web)?shell|crossdomain|fileditor|locus7|nstview|php(get|remoteview|writer)|r57|remview|sshphp|storm7|webadmin)(.*)(\.|\() [NC,OR]
    326. 

  326. 	RewriteCond %{REQUEST_URI} (/)(author-panel|bitrix|class|database|(db|mysql)-?admin|filemanager|htdocs|httpdocs|https?|mailman|mailto|msoffice|mysql|_?php-?my-?admin(.*)|tmp|undefined|usage|var|vhosts|webmaster|www)(/) [NC,OR]
    327. 

  327. 	RewriteCond %{REQUEST_URI} (\.)(7z|ab4|afm|aspx?|bash|ba?k?|bz2|cfg|cfml?|cgi|ctl|dat|db|dll|eml|et2|exe|fec|fla|hg|inc|ini|inv|jsp|log|lqd|mbf|mdb|mmw|mny|old|one|out|passwd|pdb|pl|psd|pst|ptdb|pwd|py|qbb|qdf|rar|rdf|sdb|sql|sh|soa|swf|swl|swp|stx|tar|tax|tgz|tls|tmd|wow|zlib)$ [NC,OR]
    328. 

  328. 	RewriteCond %{REQUEST_URI} (base64_(en|de)code|benchmark|child_terminate|curl_exec|e?chr|eval|function|fwrite|(f|p)open|html|leak|passthru|p?fsockopen|phpinfo|posix_(kill|mkfifo|setpgid|setsid|setuid)|proc_(close|get_status|nice|open|terminate)|(shell_)?exec|system)(.*)(\()(.*)(\)) [NC,OR]
    329. 

  329. 	RewriteCond %{REQUEST_URI} (/)(^$|00.temp00|0day|3xp|70bex?|admin_events|bkht|(php|web)?shell|configbak|curltest|db|dompdf|filenetworks|hmei7|index\.php/index\.php/index|jahat|kcrew|keywordspy|mobiquo|mysql|nessus|php-?info|racrew|sql|vuln|webconfig|(wp-)?conf(ig)?(uration)?|xertive)(\.php) [NC]
    330. 

  330. </IfModule>
    331. 

  331. 

  332. <IfModule mod_rewrite.c>
    333. 

  333. 	RewriteCond %{HTTP_USER_AGENT} ([a-z0-9]{2000,}) [NC,OR]
    334. 

  334. 	RewriteCond %{HTTP_USER_AGENT} (&lt;|%0a|%0d|%27|%3c|%3e|%00|0x00) [NC,OR]
    335. 

  335. 	RewriteCond %{HTTP_USER_AGENT} ((c99|php|web)shell|remoteview|site((.){0,2})copier) [NC,OR]
    336. 

  336. 	RewriteCond %{HTTP_USER_AGENT} (base64_decode|bin/bash|disconnect|eval|lwp-download|unserialize|\\\x22) [NC,OR]
    337. 

  337. 	RewriteCond %{HTTP_USER_AGENT} (360Spider|acapbot|acoonbot|ahrefs|alexibot|asterias|attackbot|backdorbot|becomebot|binlar|blackwidow|blekkobot|blexbot|blowfish|bullseye|bunnys|butterfly|careerbot|casper|checkpriv|cheesebot|cherrypick|chinaclaw|choppy|clshttp|cmsworld|copernic|copyrightcheck|cosmos|crescent|cy_cho|datacha|demon|diavol|discobot|dittospyder|dotbot|dotnetdotcom|dumbot|emailcollector|emailsiphon|emailwolf|exabot|extract|eyenetie|feedfinder|flaming|flashget|flicky|foobot|g00g1e|getright|gigabot|go-ahead-got|gozilla|grabnet|grafula|harvest|heritrix|httrack|icarus6j|jetbot|jetcar|jikespider|kmccrew|leechftp|libweb|linkextractor|linkscan|linkwalker|loader|masscan|miner|majestic|mechanize|mj12bot|morfeus|moveoverbot|netmechanic|netspider|nicerspro|nikto|ninja|nutch|octopus|pagegrabber|planetwork|postrank|proximic|purebot|pycurl|python|queryn|queryseeker|radian6|radiation|realdownload|rogerbot|scooter|seekerspider|semalt|siclab|sindice|sistrix|sitebot|siteexplorer|sitesnagger|skygrid|smartdownload|snoopy|sosospider|spankbot|spbot|sqlmap|stackrambler|stripper|sucker|surftbot|sux0r|suzukacz|suzuran|takeout|teleport|telesoft|true_robots|turingos|turnit|vampire|vikspider|voideye|webleacher|webreaper|webstripper|webvac|webviewer|webwhacker|winhttp|wwwoffle|woxbot|xaldon|xxxyy|yamanalab|yioopbot|youda|zeus|zmeu|zune|zyborg) [NC]
    338. 

  338. 	RewriteRule .* - [F,L]
    339. 

  339. </IfModule>
    340. 

  340. 

  341. <IfModule mod_rewrite.c>
    342. 

  342. 	RewriteCond %{REMOTE_HOST} (163data|amazonaws|colocrossing|crimea|g00g1e|justhost|kanagawa|loopia|masterhost|onlinehome|poneytel|sprintdatacenter|reverse.softlayer|safenet|ttnet|woodpecker|wowrack) [NC]
    343. 

  343. 	RewriteRule .* - [F,L]
    344. 

  344. </IfModule>
    345. 

  345. 

  346. <IfModule mod_rewrite.c>
    347. 

  347. 	RewriteCond %{HTTP_REFERER} (semalt.com|todaperfeita) [NC,OR]
    348. 

  348. 	RewriteCond %{HTTP_REFERER} (ambien|blue\spill|cocaine|ejaculat|erectile|erections|hoodia|huronriveracres|impotence|levitra|libido|lipitor|phentermin|pro[sz]ac|sandyauer|tramadol|troyhamby|ultram|unicauca|valium|viagra|vicodin|xanax|ypxaieo) [NC]
    349. 

  349. 	RewriteRule .* - [F,L]
    350. 

  350. </IfModule>
    351. 

  351. 

  352. <IfModule mod_rewrite.c>
    353. 

  353. 	RewriteCond %{REQUEST_METHOD} ^(connect|debug|move|trace|track) [NC]
    354. 

  354. 	RewriteRule .* - [F,L]
    355. 

  355. </IfModule>
    356.