/ Published in: Apache
In addition to the recommendations on the Wordpress Website.
Limit the amount of PHP files that a writable by Apache. The directory's and files that need to be writable, do not always need to be executed by PHP directly.
This makes it a bit harder for the attacker to upload and execute any PHP commands.
Limit the amount of PHP files that a writable by Apache. The directory's and files that need to be writable, do not always need to be executed by PHP directly.
This makes it a bit harder for the attacker to upload and execute any PHP commands.
Expand |
Embed | Plain Text
Copy this code and paste it in your HTML
<Directory "/example/htdocs/wp-content/uploads/"> php_admin_flag engine off </Directory> <Directory "/example/htdocs/wp-content/themes/"> <Files *php> Order allow,deny Deny from all </Files> </Directory>
URL: http://codex.wordpress.org/Hardening_WordPress