Quantcast
Channel: 500 – WordPress.org Forums
Viewing all articles
Browse latest Browse all 2443

Lwangaman on "[Plugin: iThemes Security (formerly Better WP Security)] htaccess causing Internal Server Error 500"

$
0
0

Some features of the iThemes Security plugin cause my site to be unavailable making it give an Internal Server Error.

If I delete this section of htaccess my site becomes available again:

# Rules to disable directory browsing
		Options -Indexes

		<IfModule mod_rewrite.c>
			RewriteEngine On

			# Rules to protect wp-includes
			RewriteRule ^wp-admin/includes/ - [F]
			RewriteRule !^wp-includes/ - [S=3]
			RewriteCond %{SCRIPT_FILENAME} !^(.*)wp-includes/ms-files.php
			RewriteRule ^wp-includes/[^/]+\.php$ - [F]
			RewriteRule ^wp-includes/js/tinymce/langs/.+\.php - [F]
			RewriteRule ^wp-includes/theme-compat/ - [F]

			# Rules to help reduce spam
			RewriteCond %{REQUEST_METHOD} POST
			RewriteCond %{REQUEST_URI} ^(.*)wp-comments-post\.php*
			RewriteCond %{HTTP_REFERER} !^(.*)cappellaniauniromatre.org.*
			RewriteCond %{HTTP_REFERER} !^http://jetpack\.wordpress\.com/jetpack-comment/ [OR]
			RewriteCond %{HTTP_USER_AGENT} ^$
			RewriteRule ^(.*)$ - [F]

			# Rules to prevent php execution in uploads
			RewriteRule ^(.*)/uploads/(.*).php(.?) - [F]

			# Rules to block unneeded HTTP methods
			RewriteCond %{REQUEST_METHOD} ^(TRACE|DELETE|TRACK) [NC]
			RewriteRule ^(.*)$ - [F]

		</IfModule>

I tried deleting just one section or another inside of this, but the site remains unavailable either with a 500 error code or with a 430 error code (you are not authorized to access). Deleting the whole section causes the site to become available again.

https://wordpress.org/plugins/better-wp-security/


Viewing all articles
Browse latest Browse all 2443

Trending Articles