API tools faq
paste
Guest User

Untitled

a guest
Aug 16th, 2016
791
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 13.55 KB | None | 0 0
raw download clone embed print report
  1. # BEGIN iThemes Security - Do not modify or remove this line
  2. # iThemes Security Config Details: 2
  3. # Enable HackRepair.com's blacklist feature - Security > Settings > Banned Users > Default Blacklist
  4. # Start HackRepair.com Blacklist
  5. RewriteEngine on
  6. # Start Abuse Agent Blocking
  7. RewriteCond %{HTTP_USER_AGENT} "^Mozilla.*Indy" [NC,OR]
  8. RewriteCond %{HTTP_USER_AGENT} "^Mozilla.*NEWT" [NC,OR]
  9. RewriteCond %{HTTP_USER_AGENT} "^$" [NC,OR]
  10. RewriteCond %{HTTP_USER_AGENT} "^Maxthon$" [NC,OR]
  11. RewriteCond %{HTTP_USER_AGENT} "^SeaMonkey$" [NC,OR]
  12. RewriteCond %{HTTP_USER_AGENT} "^Acunetix" [NC,OR]
  13. RewriteCond %{HTTP_USER_AGENT} "^binlar" [NC,OR]
  14. RewriteCond %{HTTP_USER_AGENT} "^BlackWidow" [NC,OR]
  15. RewriteCond %{HTTP_USER_AGENT} "^Bolt 0" [NC,OR]
  16. RewriteCond %{HTTP_USER_AGENT} "^BOT for JCE" [NC,OR]
  17. RewriteCond %{HTTP_USER_AGENT} "^Bot mailto\:craftbot@yahoo\.com" [NC,OR]
  18. RewriteCond %{HTTP_USER_AGENT} "^casper" [NC,OR]
  19. RewriteCond %{HTTP_USER_AGENT} "^checkprivacy" [NC,OR]
  20. RewriteCond %{HTTP_USER_AGENT} "^ChinaClaw" [NC,OR]
  21. RewriteCond %{HTTP_USER_AGENT} "^clshttp" [NC,OR]
  22. RewriteCond %{HTTP_USER_AGENT} "^cmsworldmap" [NC,OR]
  23. RewriteCond %{HTTP_USER_AGENT} "^comodo" [NC,OR]
  24. RewriteCond %{HTTP_USER_AGENT} "^Custo" [NC,OR]
  25. RewriteCond %{HTTP_USER_AGENT} "^Default Browser 0" [NC,OR]
  26. RewriteCond %{HTTP_USER_AGENT} "^diavol" [NC,OR]
  27. RewriteCond %{HTTP_USER_AGENT} "^DIIbot" [NC,OR]
  28. RewriteCond %{HTTP_USER_AGENT} "^DISCo" [NC,OR]
  29. RewriteCond %{HTTP_USER_AGENT} "^dotbot" [NC,OR]
  30. RewriteCond %{HTTP_USER_AGENT} "^Download Demon" [NC,OR]
  31. RewriteCond %{HTTP_USER_AGENT} "^eCatch" [NC,OR]
  32. RewriteCond %{HTTP_USER_AGENT} "^EirGrabber" [NC,OR]
  33. RewriteCond %{HTTP_USER_AGENT} "^EmailCollector" [NC,OR]
  34. RewriteCond %{HTTP_USER_AGENT} "^EmailSiphon" [NC,OR]
  35. RewriteCond %{HTTP_USER_AGENT} "^EmailWolf" [NC,OR]
  36. RewriteCond %{HTTP_USER_AGENT} "^Express WebPictures" [NC,OR]
  37. RewriteCond %{HTTP_USER_AGENT} "^extract" [NC,OR]
  38. RewriteCond %{HTTP_USER_AGENT} "^ExtractorPro" [NC,OR]
  39. RewriteCond %{HTTP_USER_AGENT} "^EyeNetIE" [NC,OR]
  40. RewriteCond %{HTTP_USER_AGENT} "^feedfinder" [NC,OR]
  41. RewriteCond %{HTTP_USER_AGENT} "^FHscan" [NC,OR]
  42. RewriteCond %{HTTP_USER_AGENT} "^FlashGet" [NC,OR]
  43. RewriteCond %{HTTP_USER_AGENT} "^flicky" [NC,OR]
  44. RewriteCond %{HTTP_USER_AGENT} "^g00g1e" [NC,OR]
  45. RewriteCond %{HTTP_USER_AGENT} "^GetRight" [NC,OR]
  46. RewriteCond %{HTTP_USER_AGENT} "^GetWeb\!" [NC,OR]
  47. RewriteCond %{HTTP_USER_AGENT} "^Go\!Zilla" [NC,OR]
  48. RewriteCond %{HTTP_USER_AGENT} "^Go\-Ahead\-Got\-It" [NC,OR]
  49. RewriteCond %{HTTP_USER_AGENT} "^grab" [NC,OR]
  50. RewriteCond %{HTTP_USER_AGENT} "^GrabNet" [NC,OR]
  51. RewriteCond %{HTTP_USER_AGENT} "^Grafula" [NC,OR]
  52. RewriteCond %{HTTP_USER_AGENT} "^harvest" [NC,OR]
  53. RewriteCond %{HTTP_USER_AGENT} "^HMView" [NC,OR]
  54. RewriteCond %{HTTP_USER_AGENT} "^ia_archiver" [NC,OR]
  55. RewriteCond %{HTTP_USER_AGENT} "^Image Stripper" [NC,OR]
  56. RewriteCond %{HTTP_USER_AGENT} "^Image Sucker" [NC,OR]
  57. RewriteCond %{HTTP_USER_AGENT} "^InterGET" [NC,OR]
  58. RewriteCond %{HTTP_USER_AGENT} "^Internet Ninja" [NC,OR]
  59. RewriteCond %{HTTP_USER_AGENT} "^InternetSeer\.com" [NC,OR]
  60. RewriteCond %{HTTP_USER_AGENT} "^jakarta" [NC,OR]
  61. RewriteCond %{HTTP_USER_AGENT} "^Java" [NC,OR]
  62. RewriteCond %{HTTP_USER_AGENT} "^JetCar" [NC,OR]
  63. RewriteCond %{HTTP_USER_AGENT} "^JOC Web Spider" [NC,OR]
  64. RewriteCond %{HTTP_USER_AGENT} "^kanagawa" [NC,OR]
  65. RewriteCond %{HTTP_USER_AGENT} "^kmccrew" [NC,OR]
  66. RewriteCond %{HTTP_USER_AGENT} "^larbin" [NC,OR]
  67. RewriteCond %{HTTP_USER_AGENT} "^LeechFTP" [NC,OR]
  68. RewriteCond %{HTTP_USER_AGENT} "^libwww" [NC,OR]
  69. RewriteCond %{HTTP_USER_AGENT} "^Mass Downloader" [NC,OR]
  70. RewriteCond %{HTTP_USER_AGENT} "^microsoft\.url" [NC,OR]
  71. RewriteCond %{HTTP_USER_AGENT} "^MIDown tool" [NC,OR]
  72. RewriteCond %{HTTP_USER_AGENT} "^miner" [NC,OR]
  73. RewriteCond %{HTTP_USER_AGENT} "^Mister PiX" [NC,OR]
  74. RewriteCond %{HTTP_USER_AGENT} "^MSFrontPage" [NC,OR]
  75. RewriteCond %{HTTP_USER_AGENT} "^Navroad" [NC,OR]
  76. RewriteCond %{HTTP_USER_AGENT} "^NearSite" [NC,OR]
  77. RewriteCond %{HTTP_USER_AGENT} "^Net Vampire" [NC,OR]
  78. RewriteCond %{HTTP_USER_AGENT} "^NetAnts" [NC,OR]
  79. RewriteCond %{HTTP_USER_AGENT} "^NetSpider" [NC,OR]
  80. RewriteCond %{HTTP_USER_AGENT} "^NetZIP" [NC,OR]
  81. RewriteCond %{HTTP_USER_AGENT} "^nutch" [NC,OR]
  82. RewriteCond %{HTTP_USER_AGENT} "^Octopus" [NC,OR]
  83. RewriteCond %{HTTP_USER_AGENT} "^Offline Explorer" [NC,OR]
  84. RewriteCond %{HTTP_USER_AGENT} "^Offline Navigator" [NC,OR]
  85. RewriteCond %{HTTP_USER_AGENT} "^PageGrabber" [NC,OR]
  86. RewriteCond %{HTTP_USER_AGENT} "^Papa Foto" [NC,OR]
  87. RewriteCond %{HTTP_USER_AGENT} "^pavuk" [NC,OR]
  88. RewriteCond %{HTTP_USER_AGENT} "^pcBrowser" [NC,OR]
  89. RewriteCond %{HTTP_USER_AGENT} "^PeoplePal" [NC,OR]
  90. RewriteCond %{HTTP_USER_AGENT} "^planetwork" [NC,OR]
  91. RewriteCond %{HTTP_USER_AGENT} "^psbot" [NC,OR]
  92. RewriteCond %{HTTP_USER_AGENT} "^purebot" [NC,OR]
  93. RewriteCond %{HTTP_USER_AGENT} "^pycurl" [NC,OR]
  94. RewriteCond %{HTTP_USER_AGENT} "^RealDownload" [NC,OR]
  95. RewriteCond %{HTTP_USER_AGENT} "^ReGet" [NC,OR]
  96. RewriteCond %{HTTP_USER_AGENT} "^Rippers 0" [NC,OR]
  97. RewriteCond %{HTTP_USER_AGENT} "^sitecheck\.internetseer\.com" [NC,OR]
  98. RewriteCond %{HTTP_USER_AGENT} "^SiteSnagger" [NC,OR]
  99. RewriteCond %{HTTP_USER_AGENT} "^skygrid" [NC,OR]
  100. RewriteCond %{HTTP_USER_AGENT} "^SmartDownload" [NC,OR]
  101. RewriteCond %{HTTP_USER_AGENT} "^sucker" [NC,OR]
  102. RewriteCond %{HTTP_USER_AGENT} "^SuperBot" [NC,OR]
  103. RewriteCond %{HTTP_USER_AGENT} "^SuperHTTP" [NC,OR]
  104. RewriteCond %{HTTP_USER_AGENT} "^Surfbot" [NC,OR]
  105. RewriteCond %{HTTP_USER_AGENT} "^tAkeOut" [NC,OR]
  106. RewriteCond %{HTTP_USER_AGENT} "^Teleport Pro" [NC,OR]
  107. RewriteCond %{HTTP_USER_AGENT} "^Toata dragostea mea pentru diavola" [NC,OR]
  108. RewriteCond %{HTTP_USER_AGENT} "^turnit" [NC,OR]
  109. RewriteCond %{HTTP_USER_AGENT} "^vikspider" [NC,OR]
  110. RewriteCond %{HTTP_USER_AGENT} "^VoidEYE" [NC,OR]
  111. RewriteCond %{HTTP_USER_AGENT} "^Web Image Collector" [NC,OR]
  112. RewriteCond %{HTTP_USER_AGENT} "^Web Sucker" [NC,OR]
  113. RewriteCond %{HTTP_USER_AGENT} "^WebAuto" [NC,OR]
  114. RewriteCond %{HTTP_USER_AGENT} "^WebBandit" [NC,OR]
  115. RewriteCond %{HTTP_USER_AGENT} "^WebCopier" [NC,OR]
  116. RewriteCond %{HTTP_USER_AGENT} "^WebFetch" [NC,OR]
  117. RewriteCond %{HTTP_USER_AGENT} "^WebGo IS" [NC,OR]
  118. RewriteCond %{HTTP_USER_AGENT} "^WebLeacher" [NC,OR]
  119. RewriteCond %{HTTP_USER_AGENT} "^WebReaper" [NC,OR]
  120. RewriteCond %{HTTP_USER_AGENT} "^WebSauger" [NC,OR]
  121. RewriteCond %{HTTP_USER_AGENT} "^Website eXtractor" [NC,OR]
  122. RewriteCond %{HTTP_USER_AGENT} "^Website Quester" [NC,OR]
  123. RewriteCond %{HTTP_USER_AGENT} "^WebStripper" [NC,OR]
  124. RewriteCond %{HTTP_USER_AGENT} "^WebWhacker" [NC,OR]
  125. RewriteCond %{HTTP_USER_AGENT} "^WebZIP" [NC,OR]
  126. RewriteCond %{HTTP_USER_AGENT} "^Wget" [NC,OR]
  127. RewriteCond %{HTTP_USER_AGENT} "^Widow" [NC,OR]
  128. RewriteCond %{HTTP_USER_AGENT} "^WPScan" [NC,OR]
  129. RewriteCond %{HTTP_USER_AGENT} "^WWW\-Mechanize" [NC,OR]
  130. RewriteCond %{HTTP_USER_AGENT} "^WWWOFFLE" [NC,OR]
  131. RewriteCond %{HTTP_USER_AGENT} "^Xaldon WebSpider" [NC,OR]
  132. RewriteCond %{HTTP_USER_AGENT} "^Zeus" [NC,OR]
  133. RewriteCond %{HTTP_USER_AGENT} "^zmeu" [NC,OR]
  134. RewriteCond %{HTTP_USER_AGENT} "360Spider" [NC,OR]
  135. RewriteCond %{HTTP_USER_AGENT} "AhrefsBot" [NC,OR]
  136. RewriteCond %{HTTP_USER_AGENT} "CazoodleBot" [NC,OR]
  137. RewriteCond %{HTTP_USER_AGENT} "discobot" [NC,OR]
  138. RewriteCond %{HTTP_USER_AGENT} "EasouSpider" [NC,OR]
  139. RewriteCond %{HTTP_USER_AGENT} "ecxi" [NC,OR]
  140. RewriteCond %{HTTP_USER_AGENT} "GT\:\:WWW" [NC,OR]
  141. RewriteCond %{HTTP_USER_AGENT} "heritrix" [NC,OR]
  142. RewriteCond %{HTTP_USER_AGENT} "HTTP\:\:Lite" [NC,OR]
  143. RewriteCond %{HTTP_USER_AGENT} "HTTrack" [NC,OR]
  144. RewriteCond %{HTTP_USER_AGENT} "ia_archiver" [NC,OR]
  145. RewriteCond %{HTTP_USER_AGENT} "id\-search" [NC,OR]
  146. RewriteCond %{HTTP_USER_AGENT} "IDBot" [NC,OR]
  147. RewriteCond %{HTTP_USER_AGENT} "Indy Library" [NC,OR]
  148. RewriteCond %{HTTP_USER_AGENT} "IRLbot" [NC,OR]
  149. RewriteCond %{HTTP_USER_AGENT} "ISC Systems iRc Search 2\.1" [NC,OR]
  150. RewriteCond %{HTTP_USER_AGENT} "LinksCrawler" [NC,OR]
  151. RewriteCond %{HTTP_USER_AGENT} "LinksManager\.com_bot" [NC,OR]
  152. RewriteCond %{HTTP_USER_AGENT} "linkwalker" [NC,OR]
  153. RewriteCond %{HTTP_USER_AGENT} "lwp\-trivial" [NC,OR]
  154. RewriteCond %{HTTP_USER_AGENT} "MFC_Tear_Sample" [NC,OR]
  155. RewriteCond %{HTTP_USER_AGENT} "Microsoft URL Control" [NC,OR]
  156. RewriteCond %{HTTP_USER_AGENT} "Missigua Locator" [NC,OR]
  157. RewriteCond %{HTTP_USER_AGENT} "MJ12bot" [NC,OR]
  158. RewriteCond %{HTTP_USER_AGENT} "panscient\.com" [NC,OR]
  159. RewriteCond %{HTTP_USER_AGENT} "PECL\:\:HTTP" [NC,OR]
  160. RewriteCond %{HTTP_USER_AGENT} "PHPCrawl" [NC,OR]
  161. RewriteCond %{HTTP_USER_AGENT} "PleaseCrawl" [NC,OR]
  162. RewriteCond %{HTTP_USER_AGENT} "SBIder" [NC,OR]
  163. RewriteCond %{HTTP_USER_AGENT} "SearchmetricsBot" [NC,OR]
  164. RewriteCond %{HTTP_USER_AGENT} "SeznamBot" [NC,OR]
  165. RewriteCond %{HTTP_USER_AGENT} "Snoopy" [NC,OR]
  166. RewriteCond %{HTTP_USER_AGENT} "Steeler" [NC,OR]
  167. RewriteCond %{HTTP_USER_AGENT} "URI\:\:Fetch" [NC,OR]
  168. RewriteCond %{HTTP_USER_AGENT} "urllib" [NC,OR]
  169. RewriteCond %{HTTP_USER_AGENT} "Web Sucker" [NC,OR]
  170. RewriteCond %{HTTP_USER_AGENT} "webalta" [NC,OR]
  171. RewriteCond %{HTTP_USER_AGENT} "WebCollage" [NC,OR]
  172. RewriteCond %{HTTP_USER_AGENT} "Wells Search II" [NC,OR]
  173. RewriteCond %{HTTP_USER_AGENT} "WEP Search" [NC,OR]
  174. RewriteCond %{HTTP_USER_AGENT} "XoviBot" [NC,OR]
  175. RewriteCond %{HTTP_USER_AGENT} "YisouSpider" [NC,OR]
  176. RewriteCond %{HTTP_USER_AGENT} "zermelo" [NC,OR]
  177. RewriteCond %{HTTP_USER_AGENT} "ZyBorg" [NC,OR]
  178. # End Abuse Agent Blocking
  179. # Start Abuse HTTP Referrer Blocking
  180. RewriteCond %{HTTP_REFERER} "^https?://(?:[^/]+\.)?semalt\.com" [NC,OR]
  181. RewriteCond %{HTTP_REFERER} "^https?://(?:[^/]+\.)?kambasoft\.com" [NC,OR]
  182. RewriteCond %{HTTP_REFERER} "^https?://(?:[^/]+\.)?savetubevideo\.com" [NC]
  183. # End Abuse HTTP Referrer Blocking
  184. RewriteRule ^.* - [F,L]
  185. # End HackRepair.com Blacklist, http://pastebin.com/u/hackrepair
  186.  
  187. <IfModule mod_rewrite.c>
  188. RewriteEngine On
  189.  
  190. # Reduce Comment Spam - Security > Settings > WordPress Tweaks > Comment Spam
  191. RewriteCond %{REQUEST_METHOD} POST
  192. RewriteCond %{REQUEST_URI} /wp-comments-post\.php$
  193. RewriteCond %{HTTP_USER_AGENT} ^$ [OR]
  194. RewriteCond %{HTTP_REFERER} !^https?://(([^/]+\.)?articlemarketing-news\.com|jetpack\.wordpress\.com/jetpack-comment)(/|$) [NC]
  195. RewriteRule ^.* - [F]
  196. </IfModule>
  197.  
  198. # Protect System Files - Security > Settings > System Tweaks > System Files
  199. <files .htaccess>
  200. <IfModule mod_authz_core.c>
  201. Require all denied
  202. </IfModule>
  203. <IfModule !mod_authz_core.c>
  204. Order allow,deny
  205. Deny from all
  206. </IfModule>
  207. </files>
  208. <files readme.html>
  209. <IfModule mod_authz_core.c>
  210. Require all denied
  211. </IfModule>
  212. <IfModule !mod_authz_core.c>
  213. Order allow,deny
  214. Deny from all
  215. </IfModule>
  216. </files>
  217. <files readme.txt>
  218. <IfModule mod_authz_core.c>
  219. Require all denied
  220. </IfModule>
  221. <IfModule !mod_authz_core.c>
  222. Order allow,deny
  223. Deny from all
  224. </IfModule>
  225. </files>
  226. <files install.php>
  227. <IfModule mod_authz_core.c>
  228. Require all denied
  229. </IfModule>
  230. <IfModule !mod_authz_core.c>
  231. Order allow,deny
  232. Deny from all
  233. </IfModule>
  234. </files>
  235. <files wp-config.php>
  236. <IfModule mod_authz_core.c>
  237. Require all denied
  238. </IfModule>
  239. <IfModule !mod_authz_core.c>
  240. Order allow,deny
  241. Deny from all
  242. </IfModule>
  243. </files>
  244.  
  245. # Disable Directory Browsing - Security > Settings > System Tweaks > Directory Browsing
  246. Options -Indexes
  247.  
  248. <IfModule mod_rewrite.c>
  249. RewriteEngine On
  250.  
  251. # Protect System Files - Security > Settings > System Tweaks > System Files
  252. RewriteRule ^wp-admin/includes/ - [F]
  253. RewriteRule !^wp-includes/ - [S=3]
  254. RewriteCond %{SCRIPT_FILENAME} !^(.*)wp-includes/ms-files.php
  255. RewriteRule ^wp-includes/[^/]+\.php$ - [F]
  256. RewriteRule ^wp-includes/js/tinymce/langs/.+\.php - [F]
  257. RewriteRule ^wp-includes/theme-compat/ - [F]
  258.  
  259. # Disable PHP in Uploads - Security > Settings > System Tweaks > Uploads
  260. RewriteRule ^wp\-content/uploads/.*\.(?:php[1-6]?|pht|phtml?)$ - [NC,F]
  261.  
  262. # Filter Request Methods - Security > Settings > System Tweaks > Request Methods
  263. RewriteCond %{REQUEST_METHOD} ^(TRACE|DELETE|TRACK) [NC]
  264. RewriteRule ^.* - [F]
  265.  
  266. # Filter Suspicious Query Strings in the URL - Security > Settings > System Tweaks > Suspicious Query Strings
  267. RewriteCond %{QUERY_STRING} \.\.\/ [NC,OR]
  268. RewriteCond %{QUERY_STRING} ^.*\.(bash|git|hg|log|svn|swp|cvs) [NC,OR]
  269. RewriteCond %{QUERY_STRING} etc/passwd [NC,OR]
  270. RewriteCond %{QUERY_STRING} boot\.ini [NC,OR]
  271. RewriteCond %{QUERY_STRING} ftp\: [NC,OR]
  272. RewriteCond %{QUERY_STRING} http\: [NC,OR]
  273. RewriteCond %{QUERY_STRING} https\: [NC,OR]
  274. RewriteCond %{QUERY_STRING} (\<|%3C).*script.*(\>|%3E) [NC,OR]
  275. RewriteCond %{QUERY_STRING} mosConfig_[a-zA-Z_]{1,21}(=|%3D) [NC,OR]
  276. RewriteCond %{QUERY_STRING} base64_encode.*\(.*\) [NC,OR]
  277. RewriteCond %{QUERY_STRING} ^.*(%24&x).* [NC,OR]
  278. RewriteCond %{QUERY_STRING} ^.*(127\.0).* [NC,OR]
  279. RewriteCond %{QUERY_STRING} ^.*(globals|encode|localhost|loopback).* [NC,OR]
  280. RewriteCond %{QUERY_STRING} ^.*(request|concat|insert|union|declare).* [NC]
  281. RewriteCond %{QUERY_STRING} !^loggedout=true
  282. RewriteCond %{QUERY_STRING} !^action=jetpack-sso
  283. RewriteCond %{QUERY_STRING} !^action=rp
  284. RewriteCond %{HTTP_COOKIE} !^.*wordpress_logged_in_.*$
  285. RewriteCond %{HTTP_REFERER} !^http://maps\.googleapis\.com(.*)$
  286. RewriteRule ^.* - [F]
  287. </IfModule>
  288.  
  289. # Enable the hide backend feature - Security > Settings > Hide Login Area > Hide Backend
  290. RewriteRule ^(/)?entrinos/?$ /wp-login.php [QSA,L]
  291. RewriteRule ^(/)?wp-register-php/?$ /wplogin?action=register [QSA,L]
  292. # END iThemes Security - Do not modify or remove this line
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!