So I'm trying to secure my wordpress site because it's been infected multiple times with malware. One of the suggested steps is to basically prevent php execution in the wp-content directory via .htaccess. However, one of my themes being utilized (running on WP multi-site) is Thesis. When I add the following to .htaccess:
Order deny,allow Deny from all <Files ~ ".(xml|css|jpe?g|png|gif|js)$"> Allow from all </Files>
It completely strips the site running on thesis of all aesthetics and formatting. Any suggestions on a workaround?