# BEGIN Kadence Security - Ne modifiez pas ou ne supprimez pas cette ligne # Kadence Security Config Details: 2 # Blocage d’adresses IP - Solid Security > Réglages > Comptes bloqués SetEnvIF REMOTE_ADDR "^103\.18\.34\.132$" DenyAccess SetEnvIF X-FORWARDED-FOR "^103\.18\.34\.132$" DenyAccess SetEnvIF X-CLUSTER-CLIENT-IP "^103\.18\.34\.132$" DenyAccess SetEnvIF REMOTE_ADDR "^105\.164\.128\.252$" DenyAccess SetEnvIF X-FORWARDED-FOR "^105\.164\.128\.252$" DenyAccess SetEnvIF X-CLUSTER-CLIENT-IP "^105\.164\.128\.252$" DenyAccess SetEnvIF REMOTE_ADDR "^154\.192\.47\.43$" DenyAccess SetEnvIF X-FORWARDED-FOR "^154\.192\.47\.43$" DenyAccess SetEnvIF X-CLUSTER-CLIENT-IP "^154\.192\.47\.43$" DenyAccess SetEnvIF REMOTE_ADDR "^103\.205\.131\.9$" DenyAccess SetEnvIF X-FORWARDED-FOR "^103\.205\.131\.9$" DenyAccess SetEnvIF X-CLUSTER-CLIENT-IP "^103\.205\.131\.9$" DenyAccess SetEnvIF REMOTE_ADDR "^186\.128\.73\.115$" DenyAccess SetEnvIF X-FORWARDED-FOR "^186\.128\.73\.115$" DenyAccess SetEnvIF X-CLUSTER-CLIENT-IP "^186\.128\.73\.115$" DenyAccess SetEnvIF REMOTE_ADDR "^103\.113\.101\.67$" DenyAccess SetEnvIF X-FORWARDED-FOR "^103\.113\.101\.67$" DenyAccess SetEnvIF X-CLUSTER-CLIENT-IP "^103\.113\.101\.67$" DenyAccess SetEnvIF REMOTE_ADDR "^88\.223\.144\.92$" DenyAccess SetEnvIF X-FORWARDED-FOR "^88\.223\.144\.92$" DenyAccess SetEnvIF X-CLUSTER-CLIENT-IP "^88\.223\.144\.92$" DenyAccess SetEnvIF REMOTE_ADDR "^45\.84\.185\.71$" DenyAccess SetEnvIF X-FORWARDED-FOR "^45\.84\.185\.71$" DenyAccess SetEnvIF X-CLUSTER-CLIENT-IP "^45\.84\.185\.71$" DenyAccess SetEnvIF REMOTE_ADDR "^103\.211\.18\.113$" DenyAccess SetEnvIF X-FORWARDED-FOR "^103\.211\.18\.113$" DenyAccess SetEnvIF X-CLUSTER-CLIENT-IP "^103\.211\.18\.113$" DenyAccess SetEnvIF REMOTE_ADDR "^84\.200\.77\.180$" DenyAccess SetEnvIF X-FORWARDED-FOR "^84\.200\.77\.180$" DenyAccess SetEnvIF X-CLUSTER-CLIENT-IP "^84\.200\.77\.180$" DenyAccess SetEnvIF REMOTE_ADDR "^68\.183\.186\.124$" DenyAccess SetEnvIF X-FORWARDED-FOR "^68\.183\.186\.124$" DenyAccess SetEnvIF X-CLUSTER-CLIENT-IP "^68\.183\.186\.124$" DenyAccess Require all granted Require not env DenyAccess Require not ip 103.18.34.132 Require not ip 105.164.128.252 Require not ip 154.192.47.43 Require not ip 103.205.131.9 Require not ip 186.128.73.115 Require not ip 103.113.101.67 Require not ip 88.223.144.92 Require not ip 45.84.185.71 Require not ip 103.211.18.113 Require not ip 84.200.77.180 Require not ip 68.183.186.124 Order allow,deny Allow from all Deny from env=DenyAccess Deny from 103.18.34.132 Deny from 105.164.128.252 Deny from 154.192.47.43 Deny from 103.205.131.9 Deny from 186.128.73.115 Deny from 103.113.101.67 Deny from 88.223.144.92 Deny from 45.84.185.71 Deny from 103.211.18.113 Deny from 84.200.77.180 Deny from 68.183.186.124 # Protéger les fichiers système - Solid Security > Réglages > Ajustements système > Fichiers système Require all denied Order allow,deny Deny from all Require all denied Order allow,deny Deny from all Require all denied Order allow,deny Deny from all Require all denied Order allow,deny Deny from all # Désactiver l’exploration des répertoires - Solid Security > Réglages > Ajustements système > Exploration des répertoires Options -Indexes RewriteEngine On # Protéger les fichiers système - Solid Security > Réglages > Ajustements système > Fichiers système RewriteRule ^wp-admin/install\.php$ - [F] RewriteRule ^wp-admin/includes/ - [F] RewriteRule !^wp-includes/ - [S=3] RewriteRule ^wp-includes/[^/]+\.php$ - [F] RewriteRule ^wp-includes/js/tinymce/langs/.+\.php - [F] RewriteRule ^wp-includes/theme-compat/ - [F] RewriteRule (^|.*/)\.(git|svn) - [F] # Désactiver PHP dans le répertoire « Uploads » - Solid Security > Réglages > Ajustements système > PHP dans Uploads RewriteRule ^wp\-content/uploads/.*\.(?:php[1-7]?|pht|phtml?|phps)\.?$ - [NC,F] # Désactivez PHP dans les extensions - iThemes Security > Réglages > Ajustements système > PHP dans les extensions RewriteRule ^wp\-content/plugins/.*\.(?:php[1-7]?|pht|phtml?|phps)\.?$ - [NC,F] # Désactivez PHP dans les thèmes - iThemes Security > Réglages > Ajustements système > PHP dans les thèmes RewriteRule ^wp\-content/themes/.*\.(?:php[1-7]?|pht|phtml?|phps)\.?$ - [NC,F] # END Kadence Security - Ne modifiez pas ou ne supprimez pas cette ligne AddOutputFilterByType DEFLATE text/plain AddOutputFilterByType DEFLATE text/html AddOutputFilterByType DEFLATE text/xml AddOutputFilterByType DEFLATE text/css AddOutputFilterByType DEFLATE text/cache-manifest AddOutputFilterByType DEFLATE text/javascript AddOutputFilterByType DEFLATE text/vcard AddOutputFilterByType DEFLATE text/vnd.rim.location.xloc AddOutputFilterByType DEFLATE text/vtt AddOutputFilterByType DEFLATE text/x-component AddOutputFilterByType DEFLATE text/x-cross-domain-policy AddOutputFilterByType DEFLATE application/xml AddOutputFilterByType DEFLATE application/xhtml+xml AddOutputFilterByType DEFLATE application/rss+xml AddOutputFilterByType DEFLATE application/javascript AddOutputFilterByType DEFLATE application/x-javascript AddOutputFilterByType DEFLATE application/json AddOutputFilterByType DEFLATE application/ld+json AddOutputFilterByType DEFLATE application/atom+xml AddOutputFilterByType DEFLATE application/manifest+json AddOutputFilterByType DEFLATE application/rdf+xml AddOutputFilterByType DEFLATE application/rss+xml AddOutputFilterByType DEFLATE application/schema+json AddOutputFilterByType DEFLATE application/vnd.geo+json AddOutputFilterByType DEFLATE application/vnd.ms-fontobject AddOutputFilterByType DEFLATE application/x-font-ttf AddOutputFilterByType DEFLATE application/x-javascript AddOutputFilterByType DEFLATE application/x-web-app-manifest+json AddOutputFilterByType DEFLATE application/xhtml+xml AddOutputFilterByType DEFLATE font/eot AddOutputFilterByType DEFLATE font/opentype AddOutputFilterByType DEFLATE image/bmp AddOutputFilterByType DEFLATE image/svg+xml AddOutputFilterByType DEFLATE image/vnd.microsoft.icon AddOutputFilterByType DEFLATE image/x-icon ExpiresActive On ExpiresByType text/css A2419200 ExpiresByType text/x-component A2419200 ExpiresByType application/x-javascript A2419200 ExpiresByType application/javascript A2419200 ExpiresByType text/javascript A2419200 ExpiresByType text/x-js A2419200 ExpiresByType text/html A3600 ExpiresByType text/richtext A3600 ExpiresByType image/svg+xml A3600 ExpiresByType text/plain A3600 ExpiresByType text/xsd A3600 ExpiresByType text/xsl A3600 ExpiresByType text/xml A3600 ExpiresByType video/asf A2419200 ExpiresByType video/avi A2419200 ExpiresByType image/bmp A2419200 ExpiresByType application/java A2419200 ExpiresByType video/divx A2419200 ExpiresByType application/msword A2419200 ExpiresByType application/vnd.ms-fontobject A2419200 ExpiresByType application/x-msdownload A2419200 ExpiresByType image/gif A2419200 ExpiresByType application/x-gzip A2419200 ExpiresByType image/x-icon A2419200 ExpiresByType image/jpeg A2419200 ExpiresByType application/json A2419200 ExpiresByType application/vnd.ms-access A2419200 ExpiresByType audio/midi A2419200 ExpiresByType video/quicktime A2419200 ExpiresByType audio/mpeg A2419200 ExpiresByType video/mp4 A2419200 ExpiresByType video/mpeg A2419200 ExpiresByType application/vnd.ms-project A2419200 ExpiresByType application/x-font-otf A2419200 ExpiresByType application/vnd.ms-opentype A2419200 ExpiresByType application/vnd.oasis.opendocument.database A2419200 ExpiresByType application/vnd.oasis.opendocument.chart A2419200 ExpiresByType application/vnd.oasis.opendocument.formula A2419200 ExpiresByType application/vnd.oasis.opendocument.graphics A2419200 ExpiresByType application/vnd.oasis.opendocument.presentation A2419200 ExpiresByType application/vnd.oasis.opendocument.spreadsheet A2419200 ExpiresByType application/vnd.oasis.opendocument.text A2419200 ExpiresByType audio/ogg A2419200 ExpiresByType application/pdf A2419200 ExpiresByType image/png A2419200 ExpiresByType application/vnd.ms-powerpoint A2419200 ExpiresByType audio/x-realaudio A2419200 ExpiresByType image/svg+xml A2419200 ExpiresByType application/x-shockwave-flash A2419200 ExpiresByType application/x-tar A2419200 ExpiresByType image/tiff A2419200 ExpiresByType application/x-font-ttf A2419200 ExpiresByType application/vnd.ms-opentype A2419200 ExpiresByType audio/wav A2419200 ExpiresByType audio/wma A2419200 ExpiresByType application/vnd.ms-write A2419200 ExpiresByType application/font-woff A2419200 ExpiresByType application/vnd.ms-excel A2419200 ExpiresByType application/zip A2419200 RewriteEngine On RewriteBase / RewriteRule ^index\.php$ - [L] RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteRule . /index.php [L] AddHandler x-mapp-php5.5 .php # BEGIN WordPress # The directives (lines) between "BEGIN WordPress" and "END WordPress" are # dynamically generated, and should only be modified via WordPress filters. # Any changes to the directives between these markers will be overwritten. RewriteEngine On RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}] RewriteBase / RewriteRule ^index\.php$ - [L] RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteRule . /index.php [L] # END WordPress