Htaccess terbaru oke

# -----------------------------------------
# Block bots, spiders, crawlers (Kecuali Facebook)
# -----------------------------------------
<IfModule mod_rewrite.c>
RewriteEngine On

# Jangan blokir bot Facebook / Meta
RewriteCond %{HTTP_USER_AGENT} (?i)(facebookexternalhit|facebot|meta-externalagent) [NC]
RewriteRule .* - [L]

# Cek User-Agent untuk bot umum (selain Facebook)
RewriteCond %{HTTP_USER_AGENT} (?i)(bot|spider|crawler|scraper|curl|wget|python|libwww|java|httpclient) [NC]
RewriteRule .* - [F,L]
</IfModule>

# -----------------------------------------
# Blokir bot di level SetEnvIf (Kecuali Facebook)
# -----------------------------------------
<IfModule mod_setenvif.c>
SetEnvIfNoCase User-Agent "facebookexternalhit" !bad_bot
SetEnvIfNoCase User-Agent "facebot" !bad_bot
SetEnvIfNoCase User-Agent "meta-externalagent" !bad_bot

SetEnvIfNoCase User-Agent "bot" bad_bot
SetEnvIfNoCase User-Agent "spider" bad_bot
SetEnvIfNoCase User-Agent "crawler" bad_bot
SetEnvIfNoCase User-Agent "curl" bad_bot
SetEnvIfNoCase User-Agent "wget" bad_bot
SetEnvIfNoCase User-Agent "python" bad_bot

<Limit GET POST HEAD>
    Order Allow,Deny
    Allow from all
    Deny from env=bad_bot
</Limit>
</IfModule>

# -----------------------------------------
# Proteksi Khusus admin-ajax.php
# -----------------------------------------
<Files "admin-ajax.php">
RewriteEngine On
RewriteCond %{HTTP_USER_AGENT} (?i)(badbot|scraper|crawl|bot) [NC]
RewriteRule .* - [F,L]
</Files>

# BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
RewriteBase /
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>
# END WordPress