[{"data":1,"prerenderedAt":10},["ShallowReactive",2],{"$f22fo3r9p5pnht":3},{"slug":4,"title":5,"description":6,"published":7,"updated":7,"thumb":8,"html":9},"1480-2","Securing wp-includes A second layer of protection can be added where","Securing wp-includes A second layer of protection can be added where scripts are generally not intended to be accessed by any user. One way to do that is...","2016-06-17",null,"\u003Cp>Securing wp-includes\u003Cbr \u002F>\nA second layer of protection can be added where scripts are generally not intended to be accessed by any user. One way to do that is to block those scripts using mod_rewrite in the .htaccess file. Note: to ensure the code below is not overwritten by WordPress, place it outside the # BEGIN WordPress and # END WordPress tags in the .htaccess file. WordPress can overwrite anything between these tags.\u003C\u002Fp>\n\u003Cp># Block the include-only files.\u003Cbr \u002F>\n\u003CIfModule mod_rewrite.c>\u003Cbr \u002F>\nRewriteEngine On\u003Cbr \u002F>\nRewriteBase \u002F\u003Cbr \u002F>\nRewriteRule ^wp-admin\u002Fincludes\u002F – [F,L]\u003Cbr \u002F>\nRewriteRule !^wp-includes\u002F – [S=3]\u003Cbr \u002F>\nRewriteRule ^wp-includes\u002F[^\u002F]+.php$ – [F,L]\u003Cbr \u002F>\nRewriteRule ^wp-includes\u002Fjs\u002Ftinymce\u002Flangs\u002F.+.php – [F,L]\u003Cbr \u002F>\nRewriteRule ^wp-includes\u002Ftheme-compat\u002F – [F,L]\u003Cbr \u002F>\n\u003C\u002FIfModule>\u003C\u002Fp>\n\u003Cp># BEGIN WordPress\u003Cbr \u002F>\nNote that this won’t work well on Multisite, as RewriteRule ^wp-includes\u002F[^\u002F]+.php$ – [F,L] would prevent the ms-files.php file from generating images. Omitting that line will allow the code to work, but offers less security.\u003C\u002Fp>",1793901039234]