Security

🔒 Security Rules

Disable Directory ListingHides file lists in directories with no index file Block HotlinkingPrevents other sites from embedding your images Protect .htaccessDeny direct access to the .htaccess file Block xmlrpc.phpBlocks brute-force attacks via WordPress XML-RPC Hide DotfilesDeny access to hidden .env, .git, etc. files Block PHP in UploadsPrevents PHP execution in upload directories

Performance

⚡ Performance & Caching

Enable GZIP CompressionCompresses HTML, CSS, JS for faster loads Browser CachingSets expiry headers for static assets Disable ETagsReduces header overhead for cached resources Enable Keep-AliveReuses connections for multiple requests

Redirects

↪️ Redirects & Rewrites

Force HTTPSRedirect all HTTP traffic to HTTPS Force wwwRedirect non-www URLs to www version Remove wwwRedirect www URLs to non-www version Remove Trailing SlashStrips trailing slashes from URLs

Custom 301 Redirect (old path → new path)

Error Pages

🚫 Custom Error Pages

404 Not Found

403 Forbidden

500 Server Error

503 Unavailable

Access Control

🚷 IP Block / Allow

Block these IPs (one per line)

Allow only these IPs (leave blank to allow all)

General

⚙️ General Settings

Default Charset

Directory Index File

Server Signature

PHP Max Upload Size

.htaccess Generator

Stef's Newsletter