# BEGIN WP Rocket # Use UTF-8 encoding for anything served text/plain or text/html AddDefaultCharset UTF-8 # Force UTF-8 for a number of file formats <IfModule mod_mime.c> AddCharset UTF-8 .atom .css .js .json .rss .vtt .xml </IfModule> # FileETag None is not enough for every server. <IfModule mod_headers.c> Header unset ETag </IfModule> # Since we’re sending far-future expires, we don’t need ETags for static content. # developer.yahoo.com/performance/rules.html#etags FileETag None <IfModule mod_alias.c> <FilesMatch "\.(html|htm|rtf|rtx|txt|xsd|xsl|xml)$"> <IfModule mod_headers.c> Header set X-Powered-By "WP Rocket/3.16.3" Header unset Pragma Header append Cache-Control "public" Header unset Last-Modified </IfModule> </FilesMatch> <FilesMatch "\.(css|htc|js|asf|asx|wax|wmv|wmx|avi|bmp|class|divx|doc|docx|eot|exe|gif|gz|gzip|ico|jpg|jpeg|jpe|json|mdb|mid|midi|mov|qt|mp3|m4a|mp4|m4v|mpeg|mpg|mpe|mpp|otf|odb|odc|odf|odg|odp|ods|odt|ogg|pdf|png|pot|pps|ppt|pptx|ra|ram|svg|svgz|swf|tar|tif|tiff|ttf|ttc|wav|wma|wri|xla|xls|xlsx|xlt|xlw|zip)$"> <IfModule mod_headers.c> Header unset Pragma Header append Cache-Control "public" </IfModule> </FilesMatch> </IfModule> <IfModule mod_mime.c> AddType image/avif avif AddType image/avif-sequence avifs </IfModule> # Expires headers (for better cache control) <IfModule mod_expires.c> ExpiresActive on ExpiresDefault "access plus 1 month" # cache.appcache needs re-requests in FF 3.6 (thanks Remy ~Introducing HTML5) ExpiresByType text/cache-manifest "access plus 0 seconds" # Your document html ExpiresByType text/html "access plus 0 seconds" # Data ExpiresByType text/xml "access plus 0 seconds" ExpiresByType application/xml "access plus 0 seconds" ExpiresByType application/json "access plus 0 seconds" # Feed ExpiresByType application/rss+xml "access plus 1 hour" ExpiresByType application/atom+xml "access plus 1 hour" # Favicon (cannot be renamed) ExpiresByType image/x-icon "access plus 1 week" # Media: images, video, audio ExpiresByType image/gif "access plus 4 months" ExpiresByType image/png "access plus 4 months" ExpiresByType image/jpeg "access plus 4 months" ExpiresByType image/webp "access plus 4 months" ExpiresByType video/ogg "access plus 4 months" ExpiresByType audio/ogg "access plus 4 months" ExpiresByType video/mp4 "access plus 4 months" ExpiresByType video/webm "access plus 4 months" ExpiresByType image/avif "access plus 4 months" ExpiresByType image/avif-sequence "access plus 4 months" # HTC files (css3pie) ExpiresByType text/x-component "access plus 1 month" # Webfonts ExpiresByType font/ttf "access plus 4 months" ExpiresByType font/otf "access plus 4 months" ExpiresByType font/woff "access plus 4 months" ExpiresByType font/woff2 "access plus 4 months" ExpiresByType image/svg+xml "access plus 4 months" ExpiresByType application/vnd.ms-fontobject "access plus 1 month" # CSS and JavaScript ExpiresByType text/css "access plus 1 year" ExpiresByType application/javascript "access plus 1 year" </IfModule> # Gzip compression <IfModule mod_deflate.c> # Active compression SetOutputFilter DEFLATE # Force deflate for mangled headers <IfModule mod_setenvif.c> <IfModule mod_headers.c> SetEnvIfNoCase ^(Accept-EncodXng|X-cept-Encoding|X{15}|~{15}|-{15})$ ^((gzip|deflate)\s*,?\s*)+|[X~-]{4,13}$ HAVE_Accept-Encoding RequestHeader append Accept-Encoding "gzip,deflate" env=HAVE_Accept-Encoding # Don’t compress images and other uncompressible content SetEnvIfNoCase Request_URI \ \.(?:gif|jpe?g|png|rar|zip|exe|flv|mov|wma|mp3|avi|swf|mp?g|mp4|webm|webp|pdf)$ no-gzip dont-vary </IfModule> </IfModule> # Compress all output labeled with one of the following MIME-types <IfModule mod_filter.c> AddOutputFilterByType DEFLATE application/atom+xml \ application/javascript \ application/json \ application/rss+xml \ application/vnd.ms-fontobject \ application/x-font-ttf \ application/xhtml+xml \ application/xml \ font/opentype \ image/svg+xml \ image/x-icon \ text/css \ text/html \ text/plain \ text/x-component \ text/xml </IfModule> <IfModule mod_headers.c> Header append Vary: Accept-Encoding </IfModule> </IfModule> <IfModule mod_mime.c> AddType text/html .html_gzip AddEncoding gzip .html_gzip </IfModule> <IfModule mod_setenvif.c> SetEnvIfNoCase Request_URI \.html_gzip$ no-gzip </IfModule> <IfModule mod_rewrite.c> RewriteEngine On RewriteBase / RewriteCond %{HTTPS} on [OR] RewriteCond %{SERVER_PORT} ^443$ [OR] RewriteCond %{HTTP:X-Forwarded-Proto} https RewriteRule .* - [E=WPR_SSL:-https] RewriteCond %{HTTP:Accept-Encoding} gzip RewriteRule .* - [E=WPR_ENC:_gzip] RewriteCond %{REQUEST_METHOD} GET RewriteCond %{QUERY_STRING} ="" RewriteCond %{HTTP:Cookie} !(wordpress_logged_in_.+|wp-postpass_|wptouch_switch_toggle|comment_author_|comment_author_email_) [NC] RewriteCond %{REQUEST_URI} !^(/(?:.+/)?feed(?:/(?:.+/?)?)?$|/(?:.+/)?embed/|/(index.php/)?(.*)wp-json(/.*|$)|/newlogin)$ [NC] RewriteCond %{HTTP:X-Wap-Profile} !^[a-z0-9\"]+ [NC] RewriteCond %{HTTP:Profile} !^[a-z0-9\"]+ [NC] RewriteCond %{HTTP_USER_AGENT} !^.*(2.0\ MMP|240x320|400X240|AvantGo|BlackBerry|Blazer|Cellphone|Danger|DoCoMo|Elaine/3.0|EudoraWeb|Googlebot-Mobile|hiptop|IEMobile|KYOCERA/WX310K|LG/U990|MIDP-2.|MMEF20|MOT-V|NetFront|Newt|Nintendo\ Wii|Nitro|Nokia|Opera\ Mini|Palm|PlayStation\ Portable|portalmmm|Proxinet|ProxiNet|SHARP-TQ-GX10|SHG-i900|Small|SonyEricsson|Symbian\ OS|SymbianOS|TS21i-10|UP.Browser|UP.Link|webOS|Windows\ CE|WinWAP|YahooSeeker/M1A1-R2D2|iPhone|iPod|Android|BlackBerry9530|LG-TU915\ Obigo|LGE\ VX|webOS|Nokia5800).* [NC] RewriteCond %{HTTP_USER_AGENT} !^(w3c\ |w3c-|acs-|alav|alca|amoi|audi|avan|benq|bird|blac|blaz|brew|cell|cldc|cmd-|dang|doco|eric|hipt|htc_|inno|ipaq|ipod|jigs|kddi|keji|leno|lg-c|lg-d|lg-g|lge-|lg/u|maui|maxo|midp|mits|mmef|mobi|mot-|moto|mwbp|nec-|newt|noki|palm|pana|pant|phil|play|port|prox|qwap|sage|sams|sany|sch-|sec-|send|seri|sgh-|shar|sie-|siem|smal|smar|sony|sph-|symb|t-mo|teli|tim-|tosh|tsm-|upg1|upsi|vk-v|voda|wap-|wapa|wapi|wapp|wapr|webc|winw|winw|xda\ |xda-).* [NC] RewriteCond %{HTTP_USER_AGENT} !^(facebookexternalhit|WhatsApp).* [NC] RewriteCond "%{DOCUMENT_ROOT}/wp-content/cache/wp-rocket/%{HTTP_HOST}%{REQUEST_URI}/index%{ENV:WPR_SSL}%{ENV:WPR_WEBP}.html%{ENV:WPR_ENC}" -f RewriteRule .* "/wp-content/cache/wp-rocket/%{HTTP_HOST}%{REQUEST_URI}/index%{ENV:WPR_SSL}%{ENV:WPR_WEBP}.html%{ENV:WPR_ENC}" [L] </IfModule> # END WP Rocket # BEGIN HMWP_RULES <IfModule mod_rewrite.c> RewriteEngine On RewriteRule ^([_0-9a-zA-Z-]+/)?manager/(.*) /wp-admin/$2 [QSA,L] RewriteRule ^([_0-9a-zA-Z-]+/)?newlogin$ /wp-login.php [QSA,L] RewriteRule ^([_0-9a-zA-Z-]+/)?newlogin/(.*) /wp-login.php$2 [QSA,L] RewriteRule ^([_0-9a-zA-Z-]+/)?lostpass$ /wp-login.php?action=lostpassword [QSA,L] RewriteRule ^([_0-9a-zA-Z-]+/)?register$ /wp-login.php?action=register [QSA,L] RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/d183b32d96/(.*) /wp-content/plugins/admin-site-enhancements-pro/$2 [QSA,L] RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/aae1153a78/(.*) /wp-content/plugins/admin-menu-editor/$2 [QSA,L] RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/e39123425b/(.*) /wp-content/plugins/all-in-one-wp-migration/$2 [QSA,L] RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/1e06e6f5cf/(.*) /wp-content/plugins/all-in-one-wp-migration-unlimited-extension/$2 [QSA,L] RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/ab5b68f4b8/(.*) /wp-content/plugins/breadcrumb-navxt/$2 [QSA,L] RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/c57e50951b/(.*) /wp-content/plugins/minimal-coming-soon-maintenance-mode/$2 [QSA,L] RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/ca27edc232/(.*) /wp-content/plugins/database-cleaner-pro/$2 [QSA,L] RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/fcd7b63e81/(.*) /wp-content/plugins/enable-media-replace/$2 [QSA,L] RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/c006642256/(.*) /wp-content/plugins/filebird-pro/$2 [QSA,L] RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/21ea5f5263/(.*) /wp-content/plugins/filester/$2 [QSA,L] RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/d0f4711431/(.*) /wp-content/plugins/hide-my-wp/$2 [QSA,L] RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/7273edb58d/(.*) /wp-content/plugins/media-file-renamer-pro/$2 [QSA,L] RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/93864448cf/(.*) /wp-content/plugins/option-tree/$2 [QSA,L] RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/8c385603a8/(.*) /wp-content/plugins/wp-retina-2x/$2 [QSA,L] RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/dbae37eed9/(.*) /wp-content/plugins/plazart-installation/$2 [QSA,L] RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/f73730c2cd/(.*) /wp-content/plugins/seo-by-rank-math/$2 [QSA,L] RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/f1cef74f41/(.*) /wp-content/plugins/seo-by-rank-math-pro/$2 [QSA,L] RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/83bdf6afb7/(.*) /wp-content/plugins/robin-image-optimizer/$2 [QSA,L] RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/94970ec5bd/(.*) /wp-content/plugins/shortcodes-ultimate/$2 [QSA,L] RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/036ccde0fc/(.*) /wp-content/plugins/simple-custom-post-order/$2 [QSA,L] RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/4b36101dcc/(.*) /wp-content/plugins/revslider/$2 [QSA,L] RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/5ecafef50a/(.*) /wp-content/plugins/bluehost-wordpress-plugin/$2 [QSA,L] RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/d2202d8ea0/(.*) /wp-content/plugins/tz-filmcampaign/$2 [QSA,L] RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/0bf1c7f2c9/(.*) /wp-content/plugins/vafpress-post-formats-ui-develop/$2 [QSA,L] RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/c225c0d3c6/(.*) /wp-content/plugins/wphave-admin/$2 [QSA,L] RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/ea0788bc52/(.*) /wp-content/plugins/wordpress-importer/$2 [QSA,L] RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/1cfbc00119/(.*) /wp-content/plugins/honeypot/$2 [QSA,L] RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/1f3c81b0dd/(.*) /wp-content/plugins/wp-armour-extended/$2 [QSA,L] RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/041dc5d622/(.*) /wp-content/plugins/js_composer/$2 [QSA,L] RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/8e5c0bb2a1/(.*) /wp-content/plugins/wpc-admin-columns-premium/$2 [QSA,L] RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/e191c26f97/(.*) /wp-content/plugins/wpcode-premium/$2 [QSA,L] RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/(.*) /wp-content/plugins/$2 [QSA,L] RewriteRule ^([_0-9a-zA-Z-]+/)?core/views/08f25b8b38/design.css$ /wp-content/themes/film-campaign-child/style.css [QSA,L] RewriteRule ^([_0-9a-zA-Z-]+/)?core/views/08f25b8b38/(.*) /wp-content/themes/film-campaign-child/$2 [QSA,L] RewriteRule ^([_0-9a-zA-Z-]+/)?core/views/(.*) /wp-content/themes/$2 [QSA,L] RewriteRule ^([_0-9a-zA-Z-]+/)?storage/(.*) /wp-content/uploads/$2 [QSA,L] RewriteRule ^([_0-9a-zA-Z-]+/)?core/(.*) /wp-content/$2 [QSA,L] RewriteRule ^([_0-9a-zA-Z-]+/)?lib/(.*) /wp-includes/$2 [QSA,L] RewriteRule ^([_0-9a-zA-Z-]+/)?comments/(.*) /wp-comments-post.php$2 [QSA,L] RewriteRule ^([_0-9a-zA-Z-]+/)?writer/(.*) /author/$2 [QSA,L] </IfModule> # END HMWP_RULES # BEGIN HMWP_VULNERABILITY <IfModule mod_rewrite.c> RewriteEngine On RewriteCond %{REQUEST_URI} !/wp-admin [NC] RewriteCond %{QUERY_STRING} ^author=\d+ [NC] RewriteRule ^(.*)$ - [L,R=404] </IfModule> <IfModule mod_headers.c> Header always unset x-powered-by Header always unset server ServerSignature Off </IfModule> <IfModule mod_headers.c> Header set Strict-Transport-Security "max-age=15768000;includeSubdomains" Header set Content-Security-Policy "object-src 'none'" Header set X-XSS-Protection "1; mode=block" </IfModule> <IfModule mod_rewrite.c> RewriteEngine On RewriteBase / RewriteCond %{HTTP:Cookie} !(wordpress_logged_in_|hmwp_logged_in_|wp-postpass_|wptouch_switch_toggle|comment_author_|comment_author_email_) [NC] RewriteCond %{REQUEST_URI} !/cache/min/ [NC] RewriteCond %{REQUEST_URI} ^/wp-content/?$ [NC,OR] RewriteCond %{REQUEST_URI} ^/wp-content/[^\.]+/?$ [NC,OR] RewriteCond %{THE_REQUEST} /wp-includes/?$ [NC,OR] RewriteCond %{THE_REQUEST} /wp-content/plugins/[^\.]+(\.php|\.htm|\.html|\.rtf|\.rtx|\.txt|\.lock) [NC,OR] RewriteCond %{THE_REQUEST} /wp-content/themes/[^\.]+(\.php|\.htm|\.html|\.rtf|\.rtx|\.txt|\.lock) [NC,OR] RewriteCond %{THE_REQUEST} /wp-content/uploads/[^\.]+(\.php|\.htm|\.html|\.rtf|\.rtx|\.txt|\.lock) [NC,OR] RewriteCond %{THE_REQUEST} /wp-includes/[^\.]+(\.php|\.htm|\.html|\.rtf|\.rtx|\.txt|\.lock) [NC,OR] RewriteCond %{THE_REQUEST} /([_0-9a-zA-Z-]+/)?(wp-config-sample\.php|readme\.html|readme\.txt|install\.php|license\.txt|php\.ini|bb-config\.php|error_log|debug\.log) [NC] RewriteRule ^(.*)$ - [L,R=404] </IfModule> <IfModule mod_rewrite.c> RewriteEngine On RewriteCond %{REQUEST_URI} /(wp-config-sample\.php|readme\.html|readme\.txt|install\.php|license\.txt|php\.ini|bb-config\.php|error_log|debug\.log) [NC] RewriteRule ^(.*)$ - [L,R=404] </IfModule> # END HMWP_VULNERABILITY # BEGIN WordPress # The directives (lines) between "BEGIN WordPress" and "END WordPress" are # dynamically generated, and should only be modified via WordPress filters. # Any changes to the directives between these markers will be overwritten. <IfModule mod_rewrite.c> RewriteEngine On RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}] RewriteBase / RewriteRule ^index\.php$ - [L] RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteRule . /index.php [L] </IfModule> # END WordPress # php -- BEGIN cPanel-generated handler, do not edit # Set the “ea-php74” package as the default “PHP” programming language. <IfModule mime_module> AddHandler application/x-httpd-ea-php74 .php .php7 .phtml </IfModule> # php -- END cPanel-generated handler, do not edit # BEGIN cPanel-generated php ini directives, do not edit # Manual editing of this file may result in unexpected behavior. # To make changes to this file, use the cPanel MultiPHP INI Editor (Home >> Software >> MultiPHP INI Editor) # For more information, read our documentation (https://go.cpanel.net/EA4ModifyINI) <IfModule php7_module> php_flag display_errors Off php_value max_execution_time 900 php_value max_input_time 900 php_value max_input_vars 9000 php_value memory_limit 1440M php_value post_max_size 1440M php_value session.gc_maxlifetime 1440 php_value session.save_path "/var/cpanel/php/sessions/ea-php74" php_value upload_max_filesize 1440M php_flag zlib.output_compression Off </IfModule> <IfModule lsapi_module> php_flag display_errors Off php_value max_execution_time 900 php_value max_input_time 900 php_value max_input_vars 9000 php_value memory_limit 1440M php_value post_max_size 1440M php_value session.gc_maxlifetime 1440 php_value session.save_path "/var/cpanel/php/sessions/ea-php74" php_value upload_max_filesize 1440M php_flag zlib.output_compression Off </IfModule> # END cPanel-generated php ini directives, do not edit