Rules in .htaccess only if the requested URL is /wp-admin

Try something like this instead: <If “%{THE_REQUEST} !~ m#\s/wp-admin#”> Header add Content-Security-Policy “default-src ‘self’;” Header add Content-Security-Policy “script-src ‘self’;” </If> This should set the two headers only when the requested URL does not start with /wp-admin. The check is against THE_REQUEST (as opposed to REQUEST_URI) since REQUEST_URI changes when the URL is rewritten by the … Read more

blocking access to all post/tag URIs via htaccess

RewriteCond %{REQUEST_URI} ^post/tag/ RewriteRule .* – [F] The REQUEST_URI server var does start with a slash (it is a full root-relative URL-path), although you do say you have tried this “with and without the leading slash”, so this should have worked if that is what you are referring to and /post is the first path-segment … Read more

TimThumb & htaccess : clean url

Cadeyrn’s code work probably for 1 specific size ( 200&w=350& etc) , the major problem with timthumb and the reason people use it, is that it allows for many dynamic sizes thus making .htaccess rewrite rules much more difficult, especially if you using friendly WordPress permalink structure. There is a guide here on how to … Read more

mod_rewrite loop, redirecting http to https on certain section of wordpress blog

I am by no means a mod_rewrite expert but would something like this work? <IfModule mod_rewrite.c> RewriteEngine On RewriteBase / # Force HTTPS for /cart/ RewriteCond %{HTTPS} !=on RewriteCond %{THE_REQUEST} ^[A-Z]+\s/cart [NC] RewriteRule ^(cart) https://%{HTTP_HOST}%{REQUEST_URI} [NC,R=301,L] # Force HTTPS for /my-account/ RewriteCond %{HTTPS} !=on RewriteCond %{THE_REQUEST} ^[A-Z]+\s/my-account [NC] RewriteRule ^(my-account) https://%{HTTP_HOST}%{REQUEST_URI} [NC,R=301,L] # Force HTTPS … Read more

what could cause the htaccess file to be modified?

This might happen when the rewrite rules are flushed. The function insert_with_markers() is using fopen(), but not flock(), so when two pieces of code are calling flush_rewrite_rules() almost at the same time, the second process can write to that file before the first one has closed it. Check your plugins and your theme for flush_rewrite_rules(), … Read more

WordPress site not working after move

You need to login to the database and manually edit 2 entries. In the wp_options table you can find siteurl and home. Update those appropriately, you should then be able to login properly. You also need to update your .htaccess file but if you edit your permalink options and then change them back this should … Read more