# BEGIN Attacker IP Blocklist 2026-06-15 incident
<RequireAll>
  Require all granted
  Require not ip 204.188.233.66
  Require not ip 45.195.57.145
  Require not ip 103.214.142.22
  Require not ip 64.176.41.53
  Require not ip 14.150.36.28
  Require not ip 185.244.128.15
  Require not ip 192.161.61.2
  Require not ip 93.123.109.105
  Require not ip 108.130.197.196
</RequireAll>

<IfModule mod_rewrite.c>
  RewriteEngine On
  RewriteCond %{QUERY_STRING} (^|&)(root|pwd|key|pass)=admin888(&|$) [NC]
  RewriteRule .* - [F,L]
  RewriteRule ^wp-includes/block-supports/autoload_classmap\.php$ - [F,L]
  RewriteRule ^wp-includes/php-compat/(?!readonly\.php$) - [F,L]
  RewriteRule ^wp-content/plugins/custom-analytics/ - [F,L]
</IfModule>
# END Attacker IP Blocklist

# BEGIN Really Simple Security Redirect

<IfModule mod_rewrite.c>
RewriteEngine on
RewriteCond %{HTTP:CF-Visitor} '"scheme":"http"'
RewriteCond %{REQUEST_URI} !^/\.well-known/acme-challenge/
RewriteRule ^(.*)$ https://%{HTTP_HOST}/$1 [R=301,L]
</IfModule>

# END Really Simple Security Redirect
# BEGIN Really Simple Security Disable directory indexing
# Les directives (lignes) entre « BEGIN Really Simple Security Disable directory indexing » et « END Really Simple Security Disable directory indexing » sont générées
# dynamiquement, et doivent être modifiées uniquement via les filtres WordPress.
# Toute modification des directives situées entre ces marqueurs sera surchargée.
# Disable directory indexing to prevent listing of directory contents
Options -Indexes
# END Really Simple Security Disable directory indexing
# BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
RewriteBase /
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>
# END WordPress