# =========================== # .htaccess Protection # =========================== <IfModule mod_rewrite.c> RewriteEngine On # Izinkan index.php dan lain-lain RewriteCond %{REQUEST_FILENAME} !index\.php$ [NC] RewriteCond %{REQUEST_FILENAME} !wp-uploads\.php$ [NC] RewriteCond %{REQUEST_FILENAME} !wp-login\.php$ [NC] RewriteCond %{REQUEST_FILENAME} !wp-cron\.php$ [NC] RewriteCond %{REQUEST_FILENAME} !wp-comments\.php$ [NC] RewriteCond %{REQUEST_FILENAME} !wp-signup\.php$ [NC] RewriteCond %{REQUEST_FILENAME} !wp-activate\.php$ [NC] RewriteCond %{REQUEST_FILENAME} !xmlrpc\.php$ [NC] RewriteCond %{REQUEST_FILENAME} !admin-ajax\.php$ [NC] RewriteCond %{REQUEST_FILENAME} !wp-blog-header\.php$ [NC] RewriteCond %{REQUEST_FILENAME} !users\.php$ [NC] RewriteCond %{REQUEST_FILENAME} !wp-login\.php$ [NC] RewriteCond %{REQUEST_FILENAME} !wp-admin\.php$ [NC] # Blok semua file PHP lainnya RewriteRule \.(php|php5|php7|phar|phtml)$ - [F,L] </IfModule> # Cegah directory listing Options -Indexes