Hi,
Sucuri recommends the following ( info available on their site as well in their wordpress plugin that offers an option to do these ) :
block php executions in /wp-includes/ and /wp-content/uploads/ folders
it is done using htaccess in those folders, something like this
# Backdoor Protection Apache 2.2
<Files *.php>
deny from all
</Files>
# Backdoor Protection Apache 2.4
<FilesMatch “.+\.php$”>
Require all denied
</FilesMatch>
Will these options interfere with your theme ? Does your theme need to run php in those locations at certain times?
Another recommendation would be to disable the wordpress editor
define(‘DISALLOW_FILE_EDIT’, true);
As well, will this interfere with your theme ?
Thank you
Claudiu
Hello,
Unfortunately we do not recommend adding those lines as the theme needs access to the WordPress files in order to work properly. We did get few reports of these issues.
define(‘DISALLOW_FILE_EDIT’, true); seems to have affected the sidebars and the htaccess code broke the tagdiv composer functionality. But these were isolated cases and quite some time ago. Try it out as it could work fine on your end with the codes active. You know now what to check. Sidebars – create new sidebar, add options to it and after the htaccess code implementation, please test by creating a new page in the tagdiv composer and add a column text to it. See if you can edit and save the text in that element.
Thank you!
