One way to help protect your WordPress Blog is to add a ErrorDocument 410 comment in your .htaccess file. This is done as there are certain files (license.txt, readme.html) that comes with WordPress that will tell Hackers and Script Kiddies what version of WordPress you are running or if your site is actually using WordPress and the path to the default folders that were not renamed.
# [ CP Global ErrorDocument 410 - Open ]
Redirect gone /license.txt
Redirect gone /readme.html
ErrorDocument 410 default
# [ CP Global ErrorDocument 410 - Close ]
Tip: ErrorDocument 410 default can be changed to
# [ CP Global ErrorDocument 410 - Open ]
Redirect gone /license.txt
Redirect gone /readme.html
ErrorDocument 410 http://sub.domain.tld/folder/file.ext
# [ CP Global ErrorDocument 410 - Close ]
This method loads a page on your website such as you home page. I do this clients and to a page that sends me an email alert once triggered so that I can can know what IP Address and range to block immediately with the server’s firewall.
Stephan Pringle
Latest posts by Stephan Pringle (see all)
- Setting Up a New Switch - Monday, April 22, 2024
