If you have access for editing an .htaccess file on a server, paste the rules below for protection against DDoS on your WordPress site.

# BEGIN Protection against DDoS

RewriteEngine On
RewriteCond %{REQUEST_URI} ^/wp-login.php
RewriteCond %{REQUEST_METHOD} POST
RewriteCond %{HTTP_COOKIE} !paddos_bQvPk=1 [NC]
RewriteCond %{REQUEST_URI} !^/\.well-known/cpanel-dcv/[0-9a-zA-Z_-]+$
RewriteCond %{REQUEST_URI} !^/\.well-known/pki-validation/(?:\ Ballot169)?
RewriteCond %{REQUEST_URI} !^/\.well-known/pki-validation/[A-F0-9]{32}\.txt(?:\ Comodo\ DCV)?$
RewriteRule ^(.*)$ http://127.0.0.1/ [R,L]

# END Protection against DDoS

The rules that you are applying may keep you from entering as well so log in first to the Dashboard (and be sure to accept cookies while doing so) then add the rules.

The following two tabs change content below.

• Bio
• Latest Posts

Stephan Pringle

Chief Executive Officer at Sipylus

About The Author: Stephan Pringle is an Information Technology Specialist. He covers hardware and software and provides tips for you to troubleshoot and repair issues on your own. In his spare time, he writes articles about the State of New York on his Hackintosh and HackBook and that has helped him to become the top contributor of the New York City section of Yahoo! Answers.

Latest posts by Stephan Pringle (see all)

• Configuration.xml - Friday, March 12, 2021