# BULLETPROOF 6.9 SECURE .HTACCESS # CUSTOM CODE TOP PHP/PHP.INI HANDLER/CACHE CODE # BEGIN W3TC Browser Cache AddType text/css .css AddType text/x-component .htc AddType application/x-javascript .js AddType application/javascript .js2 AddType text/javascript .js3 AddType text/x-js .js4 AddType video/asf .asf .asx .wax .wmv .wmx AddType video/avi .avi AddType image/avif .avif AddType image/avif-sequence .avifs AddType image/bmp .bmp AddType application/java .class AddType video/divx .divx AddType application/msword .doc .docx AddType application/vnd.ms-fontobject .eot AddType application/x-msdownload .exe AddType image/gif .gif AddType application/x-gzip .gz .gzip AddType image/x-icon .ico AddType image/jpeg .jpg .jpeg .jpe AddType image/webp .webp AddType application/json .json AddType application/vnd.ms-access .mdb AddType audio/midi .mid .midi AddType video/quicktime .mov .qt AddType audio/mpeg .mp3 .m4a AddType video/mp4 .mp4 .m4v AddType video/mpeg .mpeg .mpg .mpe AddType video/webm .webm AddType application/vnd.ms-project .mpp AddType application/x-font-otf .otf AddType application/vnd.ms-opentype ._otf AddType application/vnd.oasis.opendocument.database .odb AddType application/vnd.oasis.opendocument.chart .odc AddType application/vnd.oasis.opendocument.formula .odf AddType application/vnd.oasis.opendocument.graphics .odg AddType application/vnd.oasis.opendocument.presentation .odp AddType application/vnd.oasis.opendocument.spreadsheet .ods AddType application/vnd.oasis.opendocument.text .odt AddType audio/ogg .ogg AddType video/ogg .ogv AddType application/pdf .pdf AddType image/png .png AddType application/vnd.ms-powerpoint .pot .pps .ppt .pptx AddType audio/x-realaudio .ra .ram AddType image/svg+xml .svg .svgz AddType application/x-shockwave-flash .swf AddType application/x-tar .tar AddType image/tiff .tif .tiff AddType application/x-font-ttf .ttf .ttc AddType application/vnd.ms-opentype ._ttf AddType audio/wav .wav AddType audio/wma .wma AddType application/vnd.ms-write .wri AddType application/font-woff .woff AddType application/font-woff2 .woff2 AddType application/vnd.ms-excel .xla .xls .xlsx .xlt .xlw AddType application/zip .zip ExpiresActive On ExpiresByType text/css A31536000 ExpiresByType text/x-component A31536000 ExpiresByType application/x-javascript A31536000 ExpiresByType application/javascript A31536000 ExpiresByType text/javascript A31536000 ExpiresByType text/x-js A31536000 ExpiresByType video/asf A31536000 ExpiresByType video/avi A31536000 ExpiresByType image/avif A31536000 ExpiresByType image/avif-sequence A31536000 ExpiresByType image/bmp A31536000 ExpiresByType application/java A31536000 ExpiresByType video/divx A31536000 ExpiresByType application/msword A31536000 ExpiresByType application/vnd.ms-fontobject A31536000 ExpiresByType application/x-msdownload A31536000 ExpiresByType image/gif A31536000 ExpiresByType application/x-gzip A31536000 ExpiresByType image/x-icon A31536000 ExpiresByType image/jpeg A31536000 ExpiresByType image/webp A31536000 ExpiresByType application/json A31536000 ExpiresByType application/vnd.ms-access A31536000 ExpiresByType audio/midi A31536000 ExpiresByType video/quicktime A31536000 ExpiresByType audio/mpeg A31536000 ExpiresByType video/mp4 A31536000 ExpiresByType video/mpeg A31536000 ExpiresByType video/webm A31536000 ExpiresByType application/vnd.ms-project A31536000 ExpiresByType application/x-font-otf A31536000 ExpiresByType application/vnd.ms-opentype A31536000 ExpiresByType application/vnd.oasis.opendocument.database A31536000 ExpiresByType application/vnd.oasis.opendocument.chart A31536000 ExpiresByType application/vnd.oasis.opendocument.formula A31536000 ExpiresByType application/vnd.oasis.opendocument.graphics A31536000 ExpiresByType application/vnd.oasis.opendocument.presentation A31536000 ExpiresByType application/vnd.oasis.opendocument.spreadsheet A31536000 ExpiresByType application/vnd.oasis.opendocument.text A31536000 ExpiresByType audio/ogg A31536000 ExpiresByType video/ogg A31536000 ExpiresByType application/pdf A31536000 ExpiresByType image/png A31536000 ExpiresByType application/vnd.ms-powerpoint A31536000 ExpiresByType audio/x-realaudio A31536000 ExpiresByType image/svg+xml A31536000 ExpiresByType application/x-shockwave-flash A31536000 ExpiresByType application/x-tar A31536000 ExpiresByType image/tiff A31536000 ExpiresByType application/x-font-ttf A31536000 ExpiresByType application/vnd.ms-opentype A31536000 ExpiresByType audio/wav A31536000 ExpiresByType audio/wma A31536000 ExpiresByType application/vnd.ms-write A31536000 ExpiresByType application/font-woff A31536000 ExpiresByType application/font-woff2 A31536000 ExpiresByType application/vnd.ms-excel A31536000 ExpiresByType application/zip A31536000 AddOutputFilterByType DEFLATE text/css text/x-component application/x-javascript application/javascript text/javascript text/x-js text/html text/richtext text/plain text/xsd text/xsl text/xml image/bmp application/java application/msword application/vnd.ms-fontobject application/x-msdownload image/x-icon application/json application/vnd.ms-access video/webm application/vnd.ms-project application/x-font-otf application/vnd.ms-opentype application/vnd.oasis.opendocument.database application/vnd.oasis.opendocument.chart application/vnd.oasis.opendocument.formula application/vnd.oasis.opendocument.graphics application/vnd.oasis.opendocument.presentation application/vnd.oasis.opendocument.spreadsheet application/vnd.oasis.opendocument.text audio/ogg application/pdf application/vnd.ms-powerpoint image/svg+xml application/x-shockwave-flash image/tiff application/x-font-ttf application/vnd.ms-opentype audio/wav application/vnd.ms-write application/font-woff application/font-woff2 application/vnd.ms-excel # DEFLATE by extension AddOutputFilter DEFLATE js css htm html xml FileETag MTime Size Header unset Set-Cookie FileETag MTime Size FileETag MTime Size Header unset Set-Cookie Header set Referrer-Policy "" # END W3TC Browser Cache # BEGIN W3TC Page Cache core RewriteEngine On RewriteBase / RewriteRule ^ - [E=W3TC_QUERY_STRING:%{QUERY_STRING}] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)ScCid(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)_branch_match_id(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)_bta_c(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)_bta_tid(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)_ga(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)_gl(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)_ke(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)adgroupid(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)adid(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)age\-verified(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)ao_noptimize(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)campaignid(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)campid(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)click_id(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)cn\-reloaded(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)customid(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)dicbo(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)dm_i(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)ef_id(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)epik(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)fb_action_ids(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)fb_action_types(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)fb_source(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)fbclid(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)gclid(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)gclsrc(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)gdffi(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)gdfms(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)gdftrk(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)hsa_acc(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)hsa_ad(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)hsa_cam(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)hsa_grp(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)hsa_kw(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)hsa_mt(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)hsa_net(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)hsa_src(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)hsa_tgt(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)hsa_ver(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)igshid(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)li_fat_id(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)matomo_campaign(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)matomo_cid(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)matomo_content(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)matomo_group(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)matomo_keyword(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)matomo_medium(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)matomo_placement(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)matomo_source(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)mc_cid(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)mc_eid(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)mkcid(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)mkevt(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)mkrid(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)mkwid(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)msclkid(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)mtm_campaign(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)mtm_cid(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)mtm_content(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)mtm_group(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)mtm_keyword(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)mtm_medium(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)mtm_placement(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)mtm_source(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)pcrid(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)piwik_campaign(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)piwik_keyword(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)piwik_kwd(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)pk_campaign(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)pk_cid(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)pk_content(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)pk_keyword(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)pk_kwd(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)pk_medium(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)pk_source(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)pp(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)redirect_log_mongo_id(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)redirect_mongo_id(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)ref(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)s_kwcid(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)sb_referer_host(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)si(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)sscid(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)tblci(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)toolid(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)trk_contact(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)trk_module(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)trk_msg(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)trk_sid(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)ttclid(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)twclid(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)usqp(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)utm_campaign(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)utm_content(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)utm_expid(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)utm_id(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)utm_medium(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)utm_source(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)utm_term(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^(.*?&|)wbraid(=[^&]*)?(&.*|)$ [NC] RewriteRule ^ - [E=W3TC_QUERY_STRING:%1%3] RewriteCond %{ENV:W3TC_QUERY_STRING} ^&+$ RewriteRule ^ - [E=W3TC_QUERY_STRING] RewriteCond %{HTTP:Accept-Encoding} gzip RewriteRule .* - [E=W3TC_ENC:_gzip] RewriteCond %{HTTP_COOKIE} w3tc_preview [NC] RewriteRule .* - [E=W3TC_PREVIEW:_preview] RewriteCond %{REQUEST_URI} \/$ RewriteRule .* - [E=W3TC_SLASH:_slash] RewriteCond %{REQUEST_METHOD} !=POST RewriteCond %{ENV:W3TC_QUERY_STRING} ="" RewriteCond %{HTTP_COOKIE} !(comment_author|wp\-postpass|w3tc_logged_out|wordpress_logged_in|wptouch_switch_toggle) [NC] RewriteCond "%{DOCUMENT_ROOT}/wp-content/cache/page_enhanced/%{HTTP_HOST}/%{REQUEST_URI}/_index%{ENV:W3TC_SLASH}%{ENV:W3TC_PREVIEW}.html%{ENV:W3TC_ENC}" -f RewriteRule .* "/wp-content/cache/page_enhanced/%{HTTP_HOST}/%{REQUEST_URI}/_index%{ENV:W3TC_SLASH}%{ENV:W3TC_PREVIEW}.html%{ENV:W3TC_ENC}" [L] RewriteCond %{REQUEST_METHOD} !=POST RewriteCond %{ENV:W3TC_QUERY_STRING} ="" RewriteCond %{HTTP_COOKIE} !(comment_author|wp\-postpass|w3tc_logged_out|wordpress_logged_in|wptouch_switch_toggle) [NC] RewriteCond "%{DOCUMENT_ROOT}/wp-content/cache/page_enhanced/%{HTTP_HOST}/%{REQUEST_URI}/_index%{ENV:W3TC_SLASH}%{ENV:W3TC_PREVIEW}.xml%{ENV:W3TC_ENC}" -f RewriteRule .* "/wp-content/cache/page_enhanced/%{HTTP_HOST}/%{REQUEST_URI}/_index%{ENV:W3TC_SLASH}%{ENV:W3TC_PREVIEW}.xml%{ENV:W3TC_ENC}" [L] # END W3TC Page Cache core # TURN OFF YOUR SERVER SIGNATURE # Suppresses the footer line server version number and ServerName of the serving virtual host ServerSignature Off # DO NOT SHOW DIRECTORY LISTING # Disallow mod_autoindex from displaying a directory listing # If a 500 Internal Server Error occurs when activating Root BulletProof Mode # copy the entire DO NOT SHOW DIRECTORY LISTING and DIRECTORY INDEX sections of code # and paste it into BPS Custom Code and comment out Options -Indexes # by adding a # sign in front of it. # Example: #Options -Indexes Options -Indexes # DIRECTORY INDEX FORCE INDEX.PHP # Use index.php as default directory index file. index.html will be ignored. # If a 500 Internal Server Error occurs when activating Root BulletProof Mode # copy the entire DO NOT SHOW DIRECTORY LISTING and DIRECTORY INDEX sections of code # and paste it into BPS Custom Code and comment out DirectoryIndex # by adding a # sign in front of it. # Example: #DirectoryIndex index.php index.html /index.php DirectoryIndex index.php index.html /index.php # BRUTE FORCE LOGIN PAGE PROTECTION # PLACEHOLDER ONLY # Use BPS Custom Code to add Brute Force Login protection code and to save it permanently. # See this link: https://forum.ait-pro.com/forums/topic/protect-login-page-from-brute-force-login-attacks/ # for more information. # BPS ERROR LOGGING AND TRACKING # Use BPS Custom Code to modify/edit/change this code and to save it permanently. # BPS has premade 400 Bad Request, 403 Forbidden, 404 Not Found, 405 Method Not Allowed and # 410 Gone template logging files that are used to track and log 400, 403, 404, 405 and 410 errors # that occur on your website. When a hacker attempts to hack your website the hackers IP address, # Host name, Request Method, Referering link, the file name or requested resource, the user agent # of the hacker and the query string used in the hack attempt are logged. # All BPS log files are htaccess protected so that only you can view them. # The 400.php, 403.php, 404.php, 405.php and 410.php files are located in /wp-content/plugins/bulletproof-security/ # The 400, 403, 405 and 410 Error logging files are already set up and will automatically start logging errors # after you install BPS and have activated BulletProof Mode for your Root folder. # If you would like to log 404 errors you will need to copy the logging code in the BPS 404.php file # to your Theme's 404.php template file. Simple instructions are included in the BPS 404.php file. # You can open the BPS 404.php file using the WP Plugins Editor or manually editing the file. # NOTE: By default WordPress automatically looks in your Theme's folder for a 404.php Theme template file. ErrorDocument 400 /wp-content/plugins/bulletproof-security/400.php ErrorDocument 401 default ErrorDocument 403 /wp-content/plugins/bulletproof-security/403.php ErrorDocument 404 /404.php ErrorDocument 405 /wp-content/plugins/bulletproof-security/405.php ErrorDocument 410 /wp-content/plugins/bulletproof-security/410.php # DENY ACCESS TO PROTECTED SERVER FILES AND FOLDERS # Use BPS Custom Code to modify/edit/change this code and to save it permanently. # Files and folders starting with a dot: .htaccess, .htpasswd, .errordocs, .logs RedirectMatch 403 \.(htaccess|htpasswd|errordocs|logs)$ # WP-ADMIN/INCLUDES # Use BPS Custom Code to remove this code permanently. RewriteEngine On RewriteBase / RewriteRule ^wp-admin/includes/ - [F] RewriteRule !^wp-includes/ - [S=3] RewriteRule ^wp-includes/[^/]+\.php$ - [F] RewriteRule ^wp-includes/js/tinymce/langs/.+\.php - [F] RewriteRule ^wp-includes/theme-compat/ - [F] # WP REWRITE LOOP START RewriteEngine On RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}] RewriteBase / RewriteRule ^index\.php$ - [L] # REQUEST METHODS FILTERED # If you want to allow HEAD Requests use BPS Custom Code and copy # this entire REQUEST METHODS FILTERED section of code to this BPS Custom Code # text box: CUSTOM CODE REQUEST METHODS FILTERED. # See the CUSTOM CODE REQUEST METHODS FILTERED help text for additional steps. RewriteCond %{REQUEST_METHOD} ^(TRACE|DELETE|TRACK|DEBUG) [NC] RewriteRule ^(.*)$ - [F] RewriteCond %{REQUEST_METHOD} ^(HEAD) [NC] RewriteRule ^(.*)$ /wp-content/plugins/bulletproof-security/405.php [L] # PLUGINS/THEMES AND VARIOUS EXPLOIT FILTER SKIP RULES # To add plugin/theme skip/bypass rules use BPS Custom Code. # The [S] flag is used to skip following rules. Skip rule [S=12] will skip 12 following RewriteRules. # The skip rules MUST be in descending consecutive number order: 12, 11, 10, 9... # If you delete a skip rule, change the other skip rule numbers accordingly. # Examples: If RewriteRule [S=5] is deleted than change [S=6] to [S=5], [S=7] to [S=6], etc. # If you add a new skip rule above skip rule 12 it will be skip rule 13: [S=13] # CUSTOM CODE PLUGIN/THEME SKIP/BYPASS RULES # WPBakery Visual Composer plugin skip/bypass rule RewriteCond %{REQUEST_URI} ^/wp-content/plugins/js_composer/ [NC] RewriteRule . - [S=15] # WooCommerce shop, cart, checkout & wishlist URI skip/bypass rule RewriteCond %{REQUEST_URI} ^.*/(shop|cart|checkout|wishlist).* [NC] RewriteRule . - [S=14] # WooCommerce order & wc-ajax= Query String skip/bypass rule RewriteCond %{QUERY_STRING} .*(order|wc-ajax=).* [NC] RewriteRule . - [S=13] # Adminer MySQL management tool data populate RewriteCond %{REQUEST_URI} ^/wp-content/plugins/adminer/ [NC] RewriteRule . - [S=12] # Comment Spam Pack MU Plugin - CAPTCHA images not displaying RewriteCond %{REQUEST_URI} ^/wp-content/mu-plugins/custom-anti-spam/ [NC] RewriteRule . - [S=11] # Peters Custom Anti-Spam display CAPTCHA Image RewriteCond %{REQUEST_URI} ^/wp-content/plugins/peters-custom-anti-spam-image/ [NC] RewriteRule . - [S=10] # Status Updater plugin fb connect RewriteCond %{REQUEST_URI} ^/wp-content/plugins/fb-status-updater/ [NC] RewriteRule . - [S=9] # Stream Video Player - Adding FLV Videos Blocked RewriteCond %{REQUEST_URI} ^/wp-content/plugins/stream-video-player/ [NC] RewriteRule . - [S=8] # XCloner 404 or 403 error when updating settings RewriteCond %{REQUEST_URI} ^/wp-content/plugins/xcloner-backup-and-restore/ [NC] RewriteRule . - [S=7] # BuddyPress Logout Redirect RewriteCond %{QUERY_STRING} action=logout&redirect_to=http%3A%2F%2F(.*) [NC] RewriteRule . - [S=6] # redirect_to= RewriteCond %{QUERY_STRING} redirect_to=(.*) [NC] RewriteRule . - [S=5] # Login Plugins Password Reset And Redirect 1 RewriteCond %{QUERY_STRING} action=resetpass&key=(.*) [NC] RewriteRule . - [S=4] # Login Plugins Password Reset And Redirect 2 RewriteCond %{QUERY_STRING} action=rp&key=(.*) [NC] RewriteRule . - [S=3] # CUSTOM CODE TIMTHUMB FORBID RFI and MISC FILE SKIP/BYPASS RULE # TIMTHUMB FORBID RFI and MISC FILE SKIP/BYPASS RULE # Use BPS Custom Code to modify/edit/change this code and to save it permanently. # Remote File Inclusion (RFI) security rules # Note: Only whitelist your additional domains or files if needed - do not whitelist hacker domains or files RewriteCond %{QUERY_STRING} ^.*(http|https|ftp)(%3A|:)(%2F|/)(%2F|/)(w){0,3}.?(blogger|picasa|blogspot|tsunami|petapolitik|photobucket|imgur|imageshack|wordpress\.com|img\.youtube|tinypic\.com|upload\.wikimedia|kkc|start-thegame).*$ [NC,OR] RewriteCond %{THE_REQUEST} ^.*(http|https|ftp)(%3A|:)(%2F|/)(%2F|/)(w){0,3}.?(blogger|picasa|blogspot|tsunami|petapolitik|photobucket|imgur|imageshack|wordpress\.com|img\.youtube|tinypic\.com|upload\.wikimedia|kkc|start-thegame).*$ [NC] RewriteRule .* index.php [F] # # Example: Whitelist additional misc files: (example\.php|another-file\.php|phpthumb\.php|thumb\.php|thumbs\.php) RewriteCond %{REQUEST_URI} (timthumb\.php|phpthumb\.php|thumb\.php|thumbs\.php) [NC] # Example: Whitelist additional website domains: RewriteCond %{HTTP_REFERER} ^.*(YourWebsite.com|AnotherWebsite.com).* RewriteCond %{HTTP_REFERER} ^.*drivingschoolny.com.* RewriteRule . - [S=1] # CUSTOM CODE BPSQSE BPS QUERY STRING EXPLOITS # BEGIN BPSQSE BPS QUERY STRING EXPLOITS # The libwww-perl User Agent is forbidden - Many bad bots use libwww-perl modules, but some good bots use it too. # Good sites such as W3C use it for their W3C-LinkChecker. # Use BPS Custom Code to add or remove user agents temporarily or permanently from the # User Agent filters directly below or to modify/edit/change any of the other security code rules below. RewriteCond %{HTTP_USER_AGENT} (havij|libwww-perl|wget|python|nikto|curl|scan|winhttp|clshttp|loader) [NC,OR] RewriteCond %{HTTP_USER_AGENT} (%0A|%0D|%27|%3C|%3E|%00) [NC,OR] RewriteCond %{HTTP_USER_AGENT} (;|<|>|'|"|\)|\(|%0A|%0D|%22|%27|%28|%3C|%3E|%00).*(libwww-perl|wget|python|nikto|curl|scan|winhttp|HTTrack|clshttp|archiver|loader|email|harvest|extract|grab|miner) [NC,OR] RewriteCond %{THE_REQUEST} (\?|\*|%2a)+(%20+|\\s+|%20+\\s+|\\s+%20+|\\s+%20+\\s+)(http|https)(:/|/) [NC,OR] RewriteCond %{THE_REQUEST} etc/passwd [NC,OR] RewriteCond %{THE_REQUEST} cgi-bin [NC,OR] RewriteCond %{THE_REQUEST} (%0A|%0D|\\r|\\n) [NC,OR] RewriteCond %{REQUEST_URI} owssvr\.dll [NC,OR] RewriteCond %{HTTP_REFERER} (%0A|%0D|%27|%3C|%3E|%00) [NC,OR] RewriteCond %{HTTP_REFERER} \.opendirviewer\. [NC,OR] RewriteCond %{HTTP_REFERER} users\.skynet\.be.* [NC,OR] RewriteCond %{QUERY_STRING} [a-zA-Z0-9_]=(http|https):// [NC,OR] RewriteCond %{QUERY_STRING} [a-zA-Z0-9_]=(\.\.//?)+ [NC,OR] RewriteCond %{QUERY_STRING} [a-zA-Z0-9_]=/([a-z0-9_.]//?)+ [NC,OR] RewriteCond %{QUERY_STRING} \=PHP[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12} [NC,OR] RewriteCond %{QUERY_STRING} (\.\./|%2e%2e%2f|%2e%2e/|\.\.%2f|%2e\.%2f|%2e\./|\.%2e%2f|\.%2e/) [NC,OR] RewriteCond %{QUERY_STRING} ftp\: [NC,OR] RewriteCond %{QUERY_STRING} (http|https)\: [NC,OR] RewriteCond %{QUERY_STRING} \=\|w\| [NC,OR] RewriteCond %{QUERY_STRING} ^(.*)/self/(.*)$ [NC,OR] RewriteCond %{QUERY_STRING} ^(.*)cPath=(http|https)://(.*)$ [NC,OR] RewriteCond %{QUERY_STRING} (\<|%3C).*script.*(\>|%3E) [NC,OR] RewriteCond %{QUERY_STRING} (<|%3C)([^s]*s)+cript.*(>|%3E) [NC,OR] RewriteCond %{QUERY_STRING} (\<|%3C).*embed.*(\>|%3E) [NC,OR] RewriteCond %{QUERY_STRING} (<|%3C)([^e]*e)+mbed.*(>|%3E) [NC,OR] RewriteCond %{QUERY_STRING} (\<|%3C).*object.*(\>|%3E) [NC,OR] RewriteCond %{QUERY_STRING} (<|%3C)([^o]*o)+bject.*(>|%3E) [NC,OR] RewriteCond %{QUERY_STRING} (\<|%3C).*iframe.*(\>|%3E) [NC,OR] RewriteCond %{QUERY_STRING} (<|%3C)([^i]*i)+frame.*(>|%3E) [NC,OR] RewriteCond %{QUERY_STRING} base64_encode.*\(.*\) [NC,OR] RewriteCond %{QUERY_STRING} base64_(en|de)code[^(]*\([^)]*\) [NC,OR] RewriteCond %{QUERY_STRING} GLOBALS(=|\[|\%[0-9A-Z]{0,2}) [OR] RewriteCond %{QUERY_STRING} _REQUEST(=|\[|\%[0-9A-Z]{0,2}) [OR] RewriteCond %{QUERY_STRING} ^.*(\(|\)|<|>|%3c|%3e).* [NC,OR] RewriteCond %{QUERY_STRING} ^.*(\x00|\x04|\x08|\x0d|\x1b|\x20|\x3c|\x3e|\x7f).* [NC,OR] RewriteCond %{QUERY_STRING} (NULL|OUTFILE|LOAD_FILE) [OR] RewriteCond %{QUERY_STRING} (\.{1,}/)+(motd|etc|bin) [NC,OR] RewriteCond %{QUERY_STRING} (localhost|loopback|127\.0\.0\.1) [NC,OR] RewriteCond %{QUERY_STRING} (<|>|'|%0A|%0D|%27|%3C|%3E|%00) [NC,OR] RewriteCond %{QUERY_STRING} concat[^\(]*\( [NC,OR] RewriteCond %{QUERY_STRING} union([^s]*s)+elect [NC,OR] RewriteCond %{QUERY_STRING} union([^a]*a)+ll([^s]*s)+elect [NC,OR] RewriteCond %{QUERY_STRING} \-[sdcr].*(allow_url_include|allow_url_fopen|safe_mode|disable_functions|auto_prepend_file) [NC,OR] RewriteCond %{QUERY_STRING} (;|<|>|'|"|\)|%0A|%0D|%22|%27|%3C|%3E|%00).*(/\*|union|select|insert|drop|delete|update|cast|create|char|convert|alter|declare|order|script|set|md5|benchmark|encode) [NC,OR] RewriteCond %{QUERY_STRING} (sp_executesql) [NC] RewriteRule ^(.*)$ - [F] # END BPSQSE BPS QUERY STRING EXPLOITS RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteRule . /index.php [L] # WP REWRITE LOOP END # DENY BROWSER ACCESS TO THESE FILES # Use BPS Custom Code to modify/edit/change this code and to save it permanently. # wp-config.php, bb-config.php, php.ini, php5.ini, readme.html # To be able to view these files from a Browser, replace 127.0.0.1 with your actual # current IP address. Comment out: #Require all denied and Uncomment: Require ip 127.0.0.1 # Comment out: #Deny from all and Uncomment: Allow from 127.0.0.1 # Note: The BPS System Info page displays which modules are loaded on your server. Require all denied #Require ip 127.0.0.1 Order Allow,Deny Deny from all #Allow from 127.0.0.1 # HOTLINKING/FORBID COMMENT SPAMMERS/BLOCK BOTS/BLOCK IP/REDIRECT CODE # PLACEHOLDER ONLY # Use BPS Custom Code to add custom code and save it permanently here. # BEGIN WordPress # The directives (lines) between "BEGIN WordPress" and "END WordPress" are # dynamically generated, and should only be modified via WordPress filters. # Any changes to the directives between these markers will be overwritten. RewriteEngine On RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}] RewriteBase / RewriteRule ^index\.php$ - [L] RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteRule . /index.php [L] # END WordPress # php -- BEGIN cPanel-generated handler, do not edit # Set the “ea-php83” package as the default “PHP” programming language. AddHandler application/x-httpd-ea-php83___lsphp .php .php8 .phtml # php -- END cPanel-generated handler, do not edit # BEGIN htaccess-phpinfo