2

Yes that's a pretty permalink created with rewrite rules for your posts/pages/CPT's and not a real directory. You can add the nofollow to a page that uses a certain php template (check body class) or to the archive page of your CPT (if users is a CPT) by adding this to your functions.php or in a (mu-)plugin: add_action( 'wp_head', function(){ if( ...


2

User agents can be anything, it's the client that sets them, so I could make a curl request to your site and tell curl that my user agent is going to be "Tom is the best" python-requests/2.23.0python-requests 2.23.0 This particular user agent implies the python requests library is making the request, but no clues as to what's using the library or ...


1

RewriteCond %{REQUEST_URI} ^post/tag/ RewriteRule .* - [F] The REQUEST_URI server var does start with a slash (it is a full root-relative URL-path), although you do say you have tried this "with and without the leading slash", so this should have worked if that is what you are referring to and /post is the first path-segment in the URL-path. ...


1

RewriteRule ^(.*)$ https://%{HTTP_HOST}/$1 [R=301,L] Replace %{HTTP_HOST} with your canonical hostname. For example: RewriteRule ^(.*)$ https://example.com/$1 [R=301,L] You will need to clear your browser cache before testing.


1

What are the python searches? Are they like bad bots? Most probably just "bad bots" searching for potential vulnerabilities. How do I block or prevent them? Well, you are already serving a 404 by the sounds of it, so it's really a non-issue. However, you can prevent the request from going through WordPress by blocking the request early in ....


1

When websites get hacked and you're not used to fixing WordPress websites it's highly recommended to hire a company to do this. The code can go anywhere and spread when you think your website is clean again. To answer your question though, you should replace all the replaceable files and folders like wp-admin, wp-includes and some of the other core files. ...


1

Have you tried clicking Wordfence's button, 'Repair all Repairable Files'? It may be able to replace all the plugin and WP core files with the correct repository versions. You are right that if you back up, wipe the site, and reload the backup, you're not accomplishing anything. That said, you need some kind of backup, so I would do it first. Then you ...


1

# this give internal server error throughout site: <Files ~ "/users/"> Header set X-Robots-Tag "noindex, nofollow" </FilesMatch> This would give an "internal server error" (500 response) because you've used </FilesMatch> to close the <Files> section. It should be </Files>. But as you suggested, ...


1

Yes, basically debug.log, but without deny, with 404 Yes, that directive will serve a "404 Not Found" when attempting to request debug.log. |log? However, because of the ? in the above regex, it will also block debug.lo. Is that intentional? In fact, if that is intentional then you could simply remove the g? part - since it serves no purpose. ...


1

It doesn't work with add_rewrite_rule() because of the ?view= part in the URL (it's the first parameter for the function) — i.e. WordPress strips that query string part, hence it's not included when WordPress finds a matching rewrite rule. how I can remove ?view=12a34b56 after set post name You can't (not on the same page), because that is a query string ...


1

it opens the site in the domain Have you tested inner pages, not just the homepage? A seeming inconsistency in your config is that you have defined DocumentRoot /var/www/html/10_sites/ in your vHost(s) yet you have set RewriteBase /10_sites/ in your .htaccess file. Unless your site files are located in /var/www/html/10_sites/10_sites/ (yes, the last ...


Only top voted, non community-wiki answers of a minimum length are eligible