#flood,check logs deny from 136.243.111.17 # sgs xmlrpc disable service <files xmlrpc.php>order deny,allow deny from all </files># sgs xmlrpc disable service end # sgs hsts header service header set strict-transport-security "max-age=10886400; preload" # sgs hsts header service end # https forced by sg-optimizer <ifmodule mod_rewrite.c>rewriteengine on rewritecond %{http:X-Forwarded-Proto}!https rewritecond %{HTTPS}off rewriterule ^ https://%{HTTP_HOST}%{REQUEST_URI}[L,R=301] </ifmodule># end https # begin wordpress # the directives (lines) between "BEGIN WordPress" and "END WordPress" are # dynamically generated,and should only be modified via wordpress filters. # Any changes to the directives between these markers will be overwritten. <IfModule mod_rewrite.c>rewriteengine on rewriterule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}] RewriteBase / rewriterule ^index\.php$ - [L] rewritecond %{REQUEST_FILENAME}!-f rewritecond %{REQUEST_FILENAME}!-d RewriteRule . /index.php [L] </IfModule><ifModule mod_headers.c>Header set Strict-Transport-Security "max-age=31536000" env=HTTPS Header set X-XSS-Protection "1; mode=block" Header set X-Content-Type-Options nosniff Header set X-Frame-Options DENY Header set Referrer-Policy: no-referrer-when-downgrade </ifModule># END WordPress # SGO Unset Vary Header unset Vary # SGO Unset Vary END