.htaccess

Featured Articles

Red and white barrier tape crossed over a metal fence

Useful

Are you in my blocklist?

With just a few manual steps you create your own little IP blocklist for WordPress in .htaccess or web.config. Here are the IP addresses I blocked.

Latest articles
Spider

GNU/Linux, Web applications

Last updated:

Blocking bad bots and search engines using .htaccess

Take control of your server resources by learning how to block aggressive bots and unwanted search engines using .htaccess and mod_rewrite. This guide provides copy-paste ready configurations to prevent bandwidth theft, stop scrapers, and ensure that only relevant search engines crawl your website.

Apache HTTP server logo

GNU/Linux

Last updated:

Force HSTS in Apache .htaccess

Learn how to enable HSTS (HTTP Strict Transport Security) in Linux Apache .htaccess. I wrote about enabling HTTP Strict Transport Security (HSTS) in IIS earlier. But what about enabling HSTS in Apache .htaccess? Here is how.

Lego security officer keeping your sites secure

Security

Last updated:

.htaccess security best practices in Apache 2.4.6+

Since Apache 2.4.6, a new module is used to configure and set up access control for websites: mod_authz_core. This means you have to use a different syntax for allowing or blocking hosts and IP addresses to your website. Apache Access Controle done right in WordPress .htaccess.

Windows Server

Last updated:

RewriteProxy with .htaccess in IIS

How to proxy HTTP requests from one IIS web server to another with a RewriteProxy rule in an .htaccess file, handled by Helicon Ape.

Windows Server

Last updated:

Mod_evasive on IIS

Website DDoS protection with mod_evasive on Windows Server IIS, using Helicon Ape: how to configure it, exclude websites, and where it falls short.

WordPress XMLRPC API

WordPress

Last updated:

Huge increase in WordPress xmlrpc.php POST requests

How to identify, block, mitigate and leverage xmlrpc.php scans, brute-force, and user enumeration attacks on WordPress sites... Secure WordPress xmlprc.php interface and reduce service disruption.

Microsoft Internet Information Services (IIS) logo

Windows Server

Last updated:

Remove IIS Server version from HTTP response headers

Windows Server IIS loves to tell the world that a website runs on IIS. It does so with the "Server:" header in the HTTP response, as shown below. In this post I'll show you how to remove HTTP response headers in Windows Server IIS. You don't want to give hackers too much information about your servers, right?.

Useful

Last updated:

Redirect HTTP to HTTPS

In this post I provide you various HTTP to HTTPS redirection methods, for Windows Server IIS and Linux Apache. Use these examples to your advantage to secure the traffic between your visitors and your website.

Web applications

Last updated:

Create your own PHP based Origin Pull CDN

The advantage of having your website content hosted on a Content Delivery Network (CDN) is having your content distributed and stored across the Globe. Utilizing the network of the Content Delivery Network provider.

Microsoft Internet Information Services (IIS) logo

Windows Server

Last updated:

Convert .htaccess to web.config

This post describes some of the IIS URL Rewrite Module web.config equivalents of commonly used Apache .htaccess settings. You'll learn how to translate .htaccess content to IIS web.config, this is useful when you need to migrate your website from Apache to Windows Server IIS.

Helico Ape htaccess in IIS flow_landscape

Windows Server

Last updated:

How to use .htaccess files on Windows Server IIS

Learn how to use .htaccess in Windows Server IIS. Before IIS 7 and the URL Rewrite module, you had to rely on third party extensions to IIS for URL rewriting with .htaccess files.

If you like this site or encourage its development, you can transfer a direct donation via Paypal or bank wire-transfer IBAN: NL31 ABNA 0432217258 (Jan Reilink). Thanks! :-)
Start trading Bitcoin ₿ through Bitvavo.

© 2026 Sysadmins of the North

Privacy Policy Terms of Service