Home/ Questions/Q 6044967
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-23T07:04:21+00:00

I have a WordPress deployment and I want to ignore all external accesses to

  • 0

I have a WordPress deployment and I want to ignore all external accesses to resources that exists (i.e. files and directories) but I want to accept all internal redirects. The idea is to not reveal to external users that /wp* exists. I know that I will have to rename wp-content for this to work (as well as tweak some things in wp-config.php, but the bottom line is:

How do I configure my .htaccess file to only accept internal redirects and to ignore all other requests?

I think there’s %{ENV_VAR} somewhere that would let me create a RewriteCond but I couldn’t find it in the apache docs.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    I tried both IVA and hakre’s suggested methods. They didn’t work for what I was trying to do. The way that I got this to work was similar to what hakre suggested but instead of defining my own variable I use one that is already defined: %{ENV:REDIRECT_STATUS}. Do something similar to this:

      # If the resource requested is a `wp*` file or directory AND it's NOT from a redirect 
  # (notice that the 'match' is an empty string, poop to a 403.
  RewriteCond %{REQUEST_FILENAME} wp-.*$ [NC]
  RewriteCond %{ENV:REDIRECT_STATUS} ^$
  RewriteCond %{REQUEST_FILENAME} -f [NC,OR]
  RewriteCond %{REQUEST_FILENAME} -d [NC]
  RewriteRule .* - [F,L]
    • 0