search

chesio / bc-security

Helps keeping WordPress websites secure.
The Unlicense
14 stars 3 forks source link

Sync internal blocklist with .htaccess file #142

Closed chesio closed 10 months ago

chesio commented 10 months ago

This way blocking of access on website level will be truly functional.

Implementation thoughts:

  1. Feature is turned off by default.
  2. The .htaccess file in root directory must exist already for the feature to be available.
  3. WP-Cron must be invoked by true cron, ie. define('DISABLE_WP_CRON', true); must be set.
  4. No Apache version guessing - leave it to user to decide what type of rules should be saved to .htaccess: Apache 2.3 and older, Apache 2.3 and newer or both.