.htaccess password protect all but one page
Put this in your .htaccess file after your password protection on the entire site: <Files “page.php”> Allow from all Satisfy any
htaccess
.htaccess ‘down for maitenance’ and WordPress
How do we add a second IP address that is allowed to see the site in development? We can just append just second REMOTE_ADDR like this since the default flag is [AND] # BEGIN Maintenance <IfModule mod_rewrite.c> RewriteEngine On RewriteBase / RewriteCond %{REMOTE_ADDR} !^11\.111\.111\.11$ #First Address RewriteCond %{REMOTE_ADDR} !^123\.45\.67\.89$ #Second Address RewriteCond %{REQUEST_URI} !^/maintenance\.html$ RewriteRule … Read more
Restricting user login by IP address
IP address validation during authentication – for a selected user only Here’s a way to hook into the authenticate filter and validate the IP address for a given user during authentication. The user can see the invalid IP address error like shown here: /** * Validate IP Address During Authentication – For A Given User … Read more
WildCard SSL with wordpress subdomain
I found a simple plugin that did the job for me. This is what my .htaccess file looks like now for my sub-domain: <IfModule mod_rewrite.c> RewriteEngine on RewriteCond %{HTTPS} !=on [NC] RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [R=301,L] # BEGIN WordPress #RewriteEngine On RewriteBase / RewriteRule ^index\.php$ – [L] RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteRule . /index.php … Read more
Missing slash after moving site to subfolder
I solved it by logging in into admin panel and saving site URL with a trailing slash at the end.
Why does a directive only work when it is included inside WordPress directives?
When the directive is included as part of the WordPress directives It simply needs to go before the WordPress front-controller. In fact, you should not include this as “part of the WordPress directives” as WP itself tries to maintain this block of code and could override your custom directives in a future update. You should … Read more
Cache policy not updated according to PageSpeed
ExpiresByType text/x-javascript “access plus 1 month” ExpiresByType text/javascript “access plus 1 month” ExpiresByType application/x-javascript “access plus 14 days” In order to determine the correct mime-type to use you need to look at the Content-Type HTTP response header from your server (using your browser). The default for JavaScript files is application/javascript – which you’ve not included … Read more
Corrupt .htaccess file
You appear to be denying access to PHP files, which would explain why you are denied access to PHP files: <FilesMatch “.(py|exe|php)$”> Order allow,deny Deny from all </FilesMatch> What is the purpose of this?
Only expose routes with prefix /wp-json on WordPress using Apache
Try the following mod_rewrite directives instead at the top of your root .htaccess file (before the # BEGIN WordPress section): # Reject any user requests that are not prefixed “/wp-json” RewriteCond %{ENV:REDIRECT_STATUS} ^$ RewriteRule !wp-json($|/) – [F] Requested URLs that are not prefixed /wp-json (or /wp-json/) are rejected with a 403 Forbidden. The RewriteCond directive … Read more
XMLRPC filtering through htaccess not working
The directives in .htaccess (on your application server) would seem to be working as expected. Yet I keep getting requests on that file. Blocking the request in .htaccess doesn’t stop the request reaching your server (and being logged). As you can see from the log entry, it is being “blocked” and your server is responding … Read more