In wordpress installation wp-config.php file having all details related to wordpress installation like database user and password. To secure wordpress installation refer following code in .htaccess file present in root of your wordpress installation.
The wordpress blogs mostly injected by the hackers and we can secure wordpress blog from such injection by using following code in wordpress<files wp-config.php>
order allow,deny
deny from all
</files>
Options +FollowSymLinks
RewriteEngine On
RewriteCond %{QUERY_STRING} (\<|%3C).*script.*(\>|%3E) [NC,OR]
RewriteCond %{QUERY_STRING} GLOBALS(=|\[|\%[0-9A-Z]{0,2}) [OR]
RewriteCond %{QUERY_STRING} _REQUEST(=|\[|\%[0-9A-Z]{0,2})
RewriteRule ^(.*)$ index.php [F,L]






Reply With Quote

Bookmarks