Tag Info

New answers tagged

0

All the config were good, the problem was with my host provider. For the record, the htaccess for the site in the subfolder, when everything is ok : # BEGIN WordPress <IfModule mod_rewrite.c> RewriteEngine On RewriteBase / RewriteRule ^index\.php$ - [L] RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteRule . /index.php ...


0

There are actually 3 users that IIS access files with on .NET sites: IIS_IUSRS, IUSR, and NETWORK SERVICE Grant all 3 IIS users Read & Execute, List Folder Contents, Read permissions on the entire WP folder For file management (e.g. plugin/theme installation & updates), grant all 3 of the IIS users Full Control on the wp_content folder.


0

Try adding Options +FollowSymLinks to the top of the .htaccess file. If that doesn't work, verify that the host has AllowOverride enabled. Verify what they have the AllowOverride set to. mod_rewrite can be used to simulate a symbolic link. This is why mod_rewrite requires FollowSymLinks to be enabled, because it's a similar security thing. So if your host ...


3

Just to add to the answer by @birgire, check this post on how to hide the fact that you are using Wordpress. I also think that no post basically covers this, but it really help nothing following and applying everything to hide the fact you are using Wordpress and to secure Wordpress, and your code in itself is a security risk. Hackers are stubborn and ...


3

So you're asking if you install WordPress in a subdirectory, like example.tld/secretwp/ and have the site pointing to example.tld, it will keep "evil" users and bots from knowing about the subdirectory? I don't think it will hold as a security advise, because your site can give away the subdirectory name in many ways. For example from: the use of ...


0

Are you sure the rewrite module is enabled? Type: a2enmod rewrite If you are on Linux or equivalent for your platform/setup. You can also try: ls /etc/apache2/mods-enabled/ and look for the rewrite module in there?


0

Well, what do you know -- there's a plugin for that: https://wordpress.org/plugins/redirection/ Under the "redirects" tab in the plugin's settings you can set as many redirect rules as you'd like.


0

I like your solution checking the coockie from the .htaccess this will give a much quicker loading solution then my solution. .htaccess <IfModule mod_rewrite.c> RewriteEngine On # Rules to prevent php execution in uploads RewriteRule ^(.*)/uploads/(.*).php(.?) - [F] #redirect all FILES for login check (excluding PHP) RewriteCond ...


0

In your subdirectory, open your access and change it to the stock setting. root/subfolder: # BEGIN WordPress <IfModule mod_rewrite.c> RewriteEngine On RewriteBase / RewriteRule ^index\.php$ - [L] RewriteCond. %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteRule . /index.php [L] </IfModule> # END WordPress That should work. ...


1

The short answer is no, WordPress does not refer to any files outside of the main install folder. When WordPress loads (via /wp-load.php), it sets the constant ABSPATH to the current directory path and points all further includes relative to that. However, since you are asking, there are some notable special cases: If you install WP in its own directory, ...


0

Found a solution for anyone who may stumble upon this. Basically, each part of a standard WordPress htaccess now has two RewriteConds: one for when it is in a subfolder, and another for when its not. Depending on that evaluation, the appropriate RewriteRule is applied. # BEGIN WordPress RewriteEngine On RewriteBase / RewriteRule ^index\.php$ - [L] # add a ...



Top 50 recent answers are included