Feed on
Posts
Comments

這邊提到了這篇Almost Perfect htaccess File for WordPress Blogs的文章,主要利用.htaccess來做一些保護:p

1. Protects itself (security)
2. Turns the digital signature off (security)
3. Limits upload size (security)
4. Protects wp-config.php (security)
5. Gives access permission to all visitors with exceptions (security, usability)
6. Specifies custom error documents (usability)
7. Disables directory browsing (security)
8. Redirect old pages to new (optional)
9. Disables image hotlinking (bandwidth)
10. Enables PHP compression (bandwidth)
11. Sets the canonical or “standard” url for your site (seo, usability)

我自已的設定是這樣的,請參考:

# protect the htaccess file
<files .htaccess>
order allow,deny
deny from all
</files>
# protect wpconfig.php
<files wp-config.php>
order allow,deny
deny from all
</files>
# disable directory browsing
Options All -Indexes

On this day..

Related posts:

  1. P2P設備對於NAT設備的影響
  2. FreeBSD Security Event Auditing
  3. WordPress 2.0.2 Release

Leave a Reply