{"id":77,"date":"2023-04-19T18:27:59","date_gmt":"2023-04-19T18:27:59","guid":{"rendered":"https:\/\/www.roadomain.com\/web\/blog\/?p=77"},"modified":"2023-04-23T09:21:29","modified_gmt":"2023-04-23T09:21:29","slug":"9-tricks-you-can-use-in-the-htaccess-file-for-wordpress","status":"publish","type":"post","link":"https:\/\/www.roadomain.com\/web\/blog\/9-tricks-you-can-use-in-the-htaccess-file-for-wordpress\/","title":{"rendered":"9 tricks you can use in the htaccess file for WordPress"},"content":{"rendered":"

make site faster<\/strong>
\nEnable gzip compression: Gzip compresses your website files before sending them to the user’s browser, which reduces the file size and makes your site load faster. Add the following code to your .htaccess file:<\/p>\n

<IfModule mod_deflate.c>
\n# Compress HTML, CSS, JavaScript, Text, XML and fonts
\nAddOutputFilterByType DEFLATE application\/javascript
\nAddOutputFilterByType DEFLATE application\/rss+xml
\nAddOutputFilterByType DEFLATE application\/vnd.ms-fontobject
\nAddOutputFilterByType DEFLATE application\/x-font
\nAddOutputFilterByType DEFLATE application\/x-font-opentype
\nAddOutputFilterByType DEFLATE application\/x-font-otf
\nAddOutputFilterByType DEFLATE application\/x-font-truetype
\nAddOutputFilterByType DEFLATE application\/x-font-ttf
\nAddOutputFilterByType DEFLATE application\/x-javascript
\nAddOutputFilterByType DEFLATE application\/xhtml+xml
\nAddOutputFilterByType DEFLATE application\/xml
\nAddOutputFilterByType DEFLATE font\/opentype
\nAddOutputFilterByType DEFLATE font\/otf
\nAddOutputFilterByType DEFLATE font\/ttf
\nAddOutputFilterByType DEFLATE image\/svg+xml
\nAddOutputFilterByType DEFLATE image\/x-icon
\nAddOutputFilterByType DEFLATE text\/css
\nAddOutputFilterByType DEFLATE text\/html
\nAddOutputFilterByType DEFLATE text\/javascript
\nAddOutputFilterByType DEFLATE text\/plain
\nAddOutputFilterByType DEFLATE text\/xml<\/p>\n

# Remove browser bugs (only needed for really old browsers)
\nBrowserMatch ^Mozilla\/4 gzip-only-text\/html
\nBrowserMatch ^Mozilla\/4\\.0[678] no-gzip
\nBrowserMatch \\bMSIE !no-gzip !gzip-only-text\/html
\nHeader append Vary User-Agent
\n<\/IfModule><\/p>\n

Leverage browser caching: This instructs the user’s browser to store certain files (such as images, CSS, and JavaScript) in its cache, so they don’t have to be downloaded again on subsequent visits. Add the following code to your .htaccess file:<\/p>\n

<IfModule mod_expires.c>
\nExpiresActive On
\nExpiresByType image\/jpg “access 1 year”
\nExpiresByType image\/jpeg “access 1 year”
\nExpiresByType image\/gif “access 1 year”
\nExpiresByType image\/png “access 1 year”
\nExpiresByType text\/css “access 1 month”
\nExpiresByType text\/html “access 1 month”
\nExpiresByType application\/pdf “access 1 month”
\nExpiresByType text\/x-javascript “access 1 month”
\nExpiresByType application\/x-shockwave-flash “access 1 month”
\nExpiresByType image\/x-icon “access 1 year”
\nExpiresDefault “access 1 month”
\n<\/IfModule><\/p>\n

 <\/p>\n

Enable caching headers: This sets HTTP headers that instruct the user’s browser to cache certain files for a specific amount of time. Add the following code to your .htaccess file:<\/p>\n

<IfModule mod_headers.c>
\n<FilesMatch “\\.(ico|jpe?g|png|gif|swf|css|js)$”>
\nHeader set Cache-Control “max-age=2592000, public”
\n<\/FilesMatch>
\n<\/IfModule><\/p>\n

 <\/p>\n

make site more secure<\/strong>
\nBlock directory browsing: This prevents anyone from being able to browse the contents of your website’s directories. Add the following code to your .htaccess file:<\/p>\n

Options -Indexes<\/p>\n

Prevent hotlinking: This prevents other websites from using your images and other media files by linking to them directly. Add the following code to your .htaccess file:<\/p>\n

RewriteEngine On
\nRewriteCond %{HTTP_REFERER} !^$
\nRewriteCond %{HTTP_REFERER} !^http(s)?:\/\/(www\\.)?yourwebsite.com [NC]
\nRewriteRule \\.(jpg|jpeg|png|gif)$ – [NC,F,L]<\/p>\n

Make sure to replace “yourwebsite.com” with your actual website URL.
\nSet proper file permissions: This prevents unauthorized users from accessing your website files. The following code sets the correct file permissions for your WordPress installation:<\/p>\n

<Files wp-config.php>
\nOrder allow,deny
\nDeny from all
\n<\/Files><\/p>\n

# Block the include-only files.
\n<IfModule mod_rewrite.c>
\nRewriteEngine On
\nRewriteBase \/
\nRewriteRule ^wp-admin\/includes\/ – [F,L]
\nRewriteRule !^wp-includes\/ – [S=3]
\nRewriteRule ^wp-includes\/[^\/]+\\.php$ – [F,L]
\nRewriteRule ^wp-includes\/js\/tinymce\/langs\/.+\\.php – [F,L]
\nRewriteRule ^wp-includes\/theme-compat\/ – [F,L]
\n<\/IfModule><\/p>\n

 <\/p>\n

Limit login attempts: This prevents hackers from brute-forcing their way into your WordPress dashboard by limiting the number of login attempts. Add the following code to your .htaccess file:<\/p>\n

<IfModule mod_authz_core.c>
\n<FilesMatch “wp-login.php”>
\nAuthName “WordPress Login”
\nAuthType Basic
\nAuthUserFile \/dev\/null
\nRequire valid-user
\nLimitRequestBody 102400
\n<\/FilesMatch>
\n<\/IfModule>
\n<Files wp-login.php>
\nLimitRequestBody 102400
\n<\/Files><\/p>\n

# Limit Login Attempts
\n<IfModule mod_security.c>
\nSecFilterEngine Off
\nSecFilterScanPOST Off
\n<\/IfModule>
\n<IfModule mod_limitipconn.c>
\n<Location “\/wp-login.php”>
\n# Increase timeout for client IP
\nLimitIPConnRemTime 3600
\n# Lock out the client IP after x failed attempts
\nLimitIPConn max 10
\n<\/Location>
\n<\/IfModule><\/p>\n","protected":false},"excerpt":{"rendered":"

make site faster Enable gzip compression: Gzip compresses your website files before sending them to the user’s browser, which reduces the file size and makes your site load faster. Add the following code to your .htaccess file: <IfModule mod_deflate.c> # Compress HTML, CSS, JavaScript, Text, XML and fonts AddOutputFilterByType DEFLATE application\/javascript AddOutputFilterByType DEFLATE application\/rss+xml AddOutputFilterByType […]<\/p>\n","protected":false},"author":1,"featured_media":390,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-77","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/www.roadomain.com\/web\/blog\/wp-json\/wp\/v2\/posts\/77","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.roadomain.com\/web\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.roadomain.com\/web\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.roadomain.com\/web\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.roadomain.com\/web\/blog\/wp-json\/wp\/v2\/comments?post=77"}],"version-history":[{"count":2,"href":"https:\/\/www.roadomain.com\/web\/blog\/wp-json\/wp\/v2\/posts\/77\/revisions"}],"predecessor-version":[{"id":80,"href":"https:\/\/www.roadomain.com\/web\/blog\/wp-json\/wp\/v2\/posts\/77\/revisions\/80"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.roadomain.com\/web\/blog\/wp-json\/wp\/v2\/media\/390"}],"wp:attachment":[{"href":"https:\/\/www.roadomain.com\/web\/blog\/wp-json\/wp\/v2\/media?parent=77"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.roadomain.com\/web\/blog\/wp-json\/wp\/v2\/categories?post=77"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.roadomain.com\/web\/blog\/wp-json\/wp\/v2\/tags?post=77"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}