Although a little clunky I’ve found a passable solution to this problem using mod_security. To implement this, enable modsecurity in Apache (presumably with a2enmod security). Then edit the config file. On my Ubuntu based systems this is at /etc/modsecurity/modsecurity.conf and as follows: Ensure SecRequestBodyAccess is On (and I assume SecRuleEngine to DetectionOnly). You may also … Read more
That directive blocks access to any Python, PHP or exe files. If your site has been compromised, delete the whole thing and restore it from a known good backup. There are thousands of files, and going through them all trying to detect tampering by someone better with the language than you simply isn’t feasible.
Ok, I figured this out: RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteRule . /index.php [L] The single dot in the 3rd line matches any single character, but the replacement applies to the whole string. So, whatever URL you asked for, if it doesn’t match an existing file or directory name, is turned into a request … Read more
Proper way to host WordPress behind a load balancer with TLS offloading and the PROXY protocol
It seems you need to change language on Apache config itself as it dictates which language to use for logging and other stuff. There seems to be no relation with WordPress language settings as it only translate content for selected language by gettext utility. So both are different and need to set differently. You can … Read more
If the goal is to have a PHP file where you can insert CSS into the header of all pages then what you need is a plugin, one of your own creation, not one you install. Create a .php file in the plugins folder, e.g. templaters-plugin.php and insert this: <?php /* Plugin name: Templaters test … Read more
I created new instance from snapshot of wordpress instance. now default page loads as default apache page not wordpress page
To ensure that your URLs have a consistent trailing slash and avoid duplicate content, you can use the following .htaccess rules. These rules will enforce a single trailing slash for URLs and redirect any URLs without or with multiple trailing slashes to their correct form. Here’s the updated .htaccess code: # Enable rewrite engine RewriteEngine … Read more
Should servers be POSTing my wp-load.php file?
403 forbidden error in the admin panel as well as on the admin-ajax.php file