<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>

# BEGIN ZOTYA htaccess protect
# The directives (lines) between "BEGIN ZOTYA htaccess protect" and "END ZOTYA htaccess protect" are
# dynamically generated, and should only be modified via WordPress filters.
# Any changes to the directives between these markers will be overwritten.
	# Stop Apache from serving .ht* files
	<Files ~ "^\.ht">
	Order allow,deny
	Deny from all
	</Files>
	# Protect wp-login
	<Files wp-login.php>
	AuthUserFile /home/insiders-view.co.uk/public_html/.htpasswd
	AuthType basic
	AuthName "Restricted"
	require valid-user
	ErrorDocument 401 "Authorization Required"
	</Files>
	<Files admin-ajax.php>
	order allow,deny
	allow from all
	</Files>
# END ZOTYA htaccess protect

# Wordfence WAF
<Files ".user.ini">
<IfModule mod_authz_core.c>
	Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
	Order deny,allow
	Deny from all
</IfModule>
</Files>

# END Wordfence WAF

# Block wp-includes folder and files
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^wp-admin/includes/ - [F,L]
RewriteRule !^wp-includes/ - [S=3]
RewriteRule ^wp-includes/[^/]+\.php$ - [F,L]
RewriteRule ^wp-includes/js/tinymce/langs/.+\.php - [F,L]
RewriteRule ^wp-includes/theme-compat/ - [F,L]
</IfModule>

# Limit logins and admin by IP
<Limit GET POST PUT>
order deny,allow
deny from all
allow from 185.175.113.72
</Limit>


# Deny access to wp-config.php file
<files wp-config.php>
order allow,deny
deny from all
</files>

# directory browsing
    Options All -Indexes

<Files ~ "^.*\.([Hh][Tt][Aa])">
    order allow,deny
    deny from all
    satisfy all
</Files>


# BEGIN WordPress
# The directives (lines) between "BEGIN WordPress" and "END WordPress" are
# dynamically generated, and should only be modified via WordPress filters.
# Any changes to the directives between these markers will be overwritten.
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
RewriteBase /
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>

# END WordPress