In previously article we tell you about some important moments that are necessary for security of you website. Any site can be subject to possible attacks. Therefore it is necessary to know how to prevent them.
\nIn this article, we’ll show you how to protect directories, the admin panel of your site and more.<\/p>\n
1. Directory.<\/strong> 2.Protect admin.<\/strong> Then by proxy test<\/strong> your site. You will see that you can go to admin panel but for another people it will be Forbidden. 3. WordPress version.<\/strong> We don\u2019t want nobody see this information. So we must to go to the active theme folder and find file function.php<\/span>. In the end of this file (before ?>)<\/span> add code bellow then save.:<\/p>\n After this actions you will see that version WordPress will not be show more in pages and feed! That was our goal.<\/p>\n 4. Hotlinking.<\/strong> Change \u00abexample\u00bb<\/span> to address of your site without .com (etc)<\/span>, then save it to host. As you will see hotlink don\u2019t allow more and additional you can add another format to this file in line 6.<\/p>\n We hope that the tips in this article, we could help you in protecting your site. If you have any difficulties, you can write to us<\/a>. GKS Web Studio Team will advise you on any questions.<\/p>\n
\nDirectories that are in your site must to be closed. Now you can check your directories is close or no. Please follow link of your site: http:\/\/yourdomain\/directory\/ (for example, http:\/\/yourdomain\/wp-includes). If you don\u2019t close your directory, you will see all of files in directory as same as functions.php, post-formats.php \u2026, So at now you can understand why we must to disable directory!
\nHow we can disable directory for site?<\/strong> We have 2 ways:<\/p>\n\n
\nThis is easy, add this code to your .htacess in main directory:<\/p>\n# PREVENT DIRECTORY LISTINGS\r\nOptions \u2013Indexes<\/code><\/pre>\n<\/li>\n<!DOCTYPE>\r\n<html xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\">\r\n<head>\r\n<meta http-equiv=\"Content-Type\" content=\"text\/html; charset=UTF-8\" \/>\r\n<title>Untitled Document<\/title>\r\n<\/head>\r\n<body>\r\n<h1>Directory Listing Disabled!<\/h1>\r\n<\/body>\r\n<\/html><\/code><\/pre>\n<\/li>\n<\/ul>\n
\nWe must to protect wp-admin from another people because they do not need it! How we can do it? By adding .htaccess file to this folder (wp-admin). You must get your IP<\/em> and add to this .htaccess:<\/p>\n# SECURE WP-ADMIN \r\n<FilesMatch \".*\"> \r\nOrder Deny,Allow \r\nDeny from all \r\nAllow from 123.456.78.9\r\n <\/FilesMatch><\/code><\/pre>\n
\nYou can add several IP that you want to have access to your admin.<\/p>\n
\nOne of the biggest part for secure site and keep out from bad boy is that block sensitive information such as WordPress version.<\/em>
\nWhen you see code of site in 3 places you will see WordPress version in header:<\/p>\n\n
\/\/ remove version number from head & feeds\r\nfunction disable_version() { return ''; }\r\nadd_filter('the_generator','disable_version');\r\nremove_action('wp_head', 'wp_generator');<\/code><\/pre>\n
\nAs you know link in your site meaning hotlink<\/span> that may be file, picture, video or another things \u2026from another site. How we can avoid hotlink in our site?
\nYou can add code bellow to your .htaccess<\/em> file (in main directory of files):<\/p>\n# HOTLINK PROTECTION \r\n<IfModule mod_rewrite.c>\r\n RewriteEngine on\r\n RewriteCond %{HTTP_REFERER} !^$\r\n RewriteCond %{REQUEST_FILENAME} -f\r\n RewriteCond %{REQUEST_FILENAME} \\.(gif|jpe?g?|png|docx)$ [NC]\r\n RewriteCond %{HTTP_REFERER} !^https?:\/\/([^.]+\\.)?example<\/span>\\. [NC]\r\n RewriteRule \\.(gif|jpe?g?|png)$ - [F,NC,L]\r\n<\/IfModule><\/code><\/pre>\n