htaccess - Read For Learn

You can use the define(‘FORCE_SSL_LOGIN’, true); options provided by WP. You just have to add the line in wp-config.php. Here is the link to wordpress codex, in case that you need more examples.

.htaccess for wordpress in separate folder

Rather than change .htaccess, move the index.php up to root, open it, and change: require( dirname( __FILE__ ) . ‘/wp-blog-header.php’ ); to: require( dirname( __FILE__ ) . ‘/wp/wp-blog-header.php’ ); In Settings, your WordPress address should be http://example.com/wp, and Site address should be http://example.com. This process is outlined in the Codex page Giving WordPress Its Own … Read more

Prevent users from browsing through the media galleries

I had similar question this morning I recommended this plugin

How can I code my plugin to safely modify .htaccess?

/wp-admin/includes/misc.php includes the function insert_with_markers() : /** * Inserts an array of strings into a file (.htaccess ), placing it between * BEGIN and END markers. * * Replaces existing marked info. Retains surrounding * data. Creates file if none exists. * * @since 1.5.0 * * @param string $filename Filename to alter. * @param … Read more

Is it possible to dynamically redirect URL using htaccess?

StackOverflow has already an answer for your question: https://stackoverflow.com/questions/2551553/htaccess-redirecting-dynamic-url I guess that this should do the trick: RewriteRule ^(\d+)$ /?p=$1 [R=302,L]

Remove File Extension for Page Outside of WordPress

…but that still didn’t remove the extension. To be clear, the extension should already be removed in the HTML anchor/link. The purpose of .htaccess is primarily to rewrite the extensionless URL back to the underlying filesystem path (which contains the file extension). RewriteCond %{REQUEST_FILENAME} !-f RewriteRule ^([^\.]+)$ $1.php [NC,L] Apart from rewriting to .php, not … Read more

How have I misconfigured basic auth for my wordpress site?

Ok editing the default-ssl.conf as described here (or in my case /etc/apache2/sites-enabled/mysite.com-le-ssl.conf) to add auth settings to the end of the Virtual Host block works fine now. So it’s now: <IfModule mod_ssl.c> <VirtualHost *:443> ServerName mysite.com ServerAlias www.mysite.com ServerAdmin webmaster@localhost DocumentRoot /var/www/mysite.com ErrorLog ${APACHE_LOG_DIR}/error.log CustomLog ${APACHE_LOG_DIR}/access.log combined Include /etc/letsencrypt/options-ssl-apache.conf SSLCertificateFile /etc/letsencrypt/live/mysite.com/fullchain.pem SSLCertificateKeyFile /etc/letsencrypt/live/mysite.com/privkey.pem <Directory “/var/www/mysite.com”> … Read more

Protect Upload Folder Files With Ampersand Problem

As you’ve stated, the B flag is required in this case. But this should be [B,L], not [BNC] as you’ve quoted a couple of times? Not sure where you got [BNC] from, but that’s wholly invalid and would break an Apache server (500 Internal Server Error response). If you don’t see an error, using this … Read more

+ More

WordPress trims off the forward slash when import

WordPress URL/Folder ReWrite using Htaccess

How to modify the .htaccess to force ssl on login and admin pages