ꦫꦣꦺꦤ꧀ꦄꦤ꧀ꦠꦱꦺꦤ

PATH: home / njujpgyl / wowcallgirls.in

# =====================================================
# SECURITY
# =====================================================

# Disable directory listing
Options -Indexes

# Hide Apache version
ServerSignature Off

# Protect wp-config.php
<Files wp-config.php>
    Require all denied
</Files>

# Block access to hidden files (.htaccess, .git, .env, etc.)
<FilesMatch "^\.">
    Require all denied
</FilesMatch>

# =====================================================
# WORDPRESS + HTTPS + WWW
# =====================================================

<IfModule mod_rewrite.c>
RewriteEngine On

# Block TRACE/TRACK
RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK)$ [NC]
RewriteRule .* - [F,L]

# Force HTTPS + WWW
RewriteCond %{HTTPS} !=on [OR]
RewriteCond %{HTTP_HOST} ^wowcallgirls\.in$ [NC]
RewriteRule ^ https://www.wowcallgirls.in%{REQUEST_URI} [R=301,L]

# WordPress
RewriteBase /
RewriteRule ^index\.php$ - [L]

RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>

# =====================================================
# SECURITY HEADERS
# =====================================================

<IfModule mod_headers.c>
Header always set X-Frame-Options "SAMEORIGIN"
Header always set X-Content-Type-Options "nosniff"
Header always set Referrer-Policy "strict-origin-when-cross-origin"
Header always set Permissions-Policy "geolocation=(), microphone=(), camera=()"
Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains"
Header unset X-Powered-By
</IfModule>

# =====================================================
# GZIP COMPRESSION
# =====================================================

<IfModule mod_deflate.c>
AddOutputFilterByType DEFLATE text/html
AddOutputFilterByType DEFLATE text/plain
AddOutputFilterByType DEFLATE text/css
AddOutputFilterByType DEFLATE application/javascript
AddOutputFilterByType DEFLATE application/json
AddOutputFilterByType DEFLATE application/xml
AddOutputFilterByType DEFLATE image/svg+xml
</IfModule>

# =====================================================
# BROWSER CACHE
# =====================================================

<IfModule mod_expires.c>
ExpiresActive On

ExpiresByType text/html "access plus 1 hour"
ExpiresByType text/css "access plus 1 month"
ExpiresByType application/javascript "access plus 1 month"

ExpiresByType image/jpeg "access plus 1 year"
ExpiresByType image/png "access plus 1 year"
ExpiresByType image/gif "access plus 1 year"
ExpiresByType image/webp "access plus 1 year"
ExpiresByType image/svg+xml "access plus 1 year"
ExpiresByType font/woff "access plus 1 year"
ExpiresByType font/woff2 "access plus 1 year"
</IfModule>

[+] ..
[+] cgi-bin
[-] license.txt [edit]
[-] readme.html [edit]
[-] wp-activate.php [edit]
[-] wp-blog-header.php [edit]
[-] wp-comments-post.php [edit]
[-] wp-config.php [edit]
[-] wp-config-sample.php [edit]
[-] wp-cron.php [edit]
[-] wp-links-opml.php [edit]
[-] wp-load.php [edit]
[-] wp-login.php [edit]
[-] wp-mail.php [edit]
[-] wp-settings.php [edit]
[-] wp-signup.php [edit]
[-] wp-trackback.php [edit]
[-] xmlrpc.php [edit]
[+] .well-known
[+] .wp-cli
[+] wp-admin
[+] wp-content
[+] wp-includes
[+] tmp_acd028659968871f
[-] themes.php [edit]
[+] images
[-] index.php [edit]
[-] robots.txt [edit]
[-] .htaccess [edit]