Forum
Htaccess giúp bảo mật tốt hơn
# BEGIN NgocNguyen Security
<IfModule mod_rewrite.c>
RewriteEngine On
# --- Chặn XML-RPC ---
RewriteRule ^xmlrpc\.php$ - [F,L,NC]
# --- Chặn trang đăng ký mặc định ---
RewriteCond %{QUERY_STRING} action=register [NC]
RewriteRule ^wp-login\.php$ - [F,L,NC]
# --- Chống brute-force login (POST không có test cookie) ---
RewriteCond %{REQUEST_METHOD} POST
RewriteCond %{HTTP_COOKIE} !wordpress_test_cookie [NC]
RewriteRule ^wp-login\.php$ - [F,L,NC]
# --- Chặn file ẩn / file nhạy cảm ---
RewriteCond %{REQUEST_URI} !^/\.well-known/
RewriteRule (^|/)\.(git|svn|env|ht|user\.ini|DS_Store) - [F,L,NC]
RewriteRule (^|/)(wp-config\.php|wp-config-sample\.php|readme\.html|license\.txt|php\.ini|error_log|debug\.log)$ - [F,L,NC]
# --- Chặn chạy PHP trong uploads ---
RewriteRule ^wp-content/uploads/.+\.(php[0-9]?|phtml|phar)$ - [F,L,NC]
# --- Chặn truy cập trực tiếp các thư mục/file nguy hiểm ---
RewriteRule ^wp-admin/includes/ - [F,L]
RewriteRule ^wp-includes/[^/]+\.php$ - [F,L]
RewriteRule ^wp-includes/js/tinymce/langs/.+\.php$ - [F,L]
RewriteRule ^wp-includes/theme-compat/ - [F,L]
# --- Chặn install/upgrade lại ---
RewriteRule ^wp-admin/install\.php$ - [F,L,NC]
RewriteRule ^wp-admin/upgrade\.php$ - [F,L,NC]
# --- Chặn author enumeration ---
RewriteCond %{REQUEST_URI} !^/wp-admin/
RewriteCond %{QUERY_STRING} (^|&)author=[0-9]+ [NC]
RewriteRule ^ - [F,L]
# --- Chặn REST API user enumeration ---
RewriteCond %{HTTP_COOKIE} !wordpress_logged_in_ [NC]
RewriteRule ^/*wp-json/wp/v2/users - [F,L,NC]
RewriteCond %{HTTP_COOKIE} !wordpress_logged_in_ [NC]
RewriteCond %{QUERY_STRING} rest_route=/*wp/v2/users [NC]
RewriteRule ^ - [F,L]
# --- Chặn User-Agent scanner ---
RewriteCond %{HTTP_USER_AGENT} (sqlmap|nikto|wpscan|nmap|masscan|zgrab|nuclei|acunetix|netsparker|dirbuster|gobuster|ffuf|httrack|jorgee) [NC]
RewriteRule ^ - [F,L]
</IfModule>
# END NgocNguyen Security