Notes

# BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>
# wp sonu

#-----------------------------BENIM AYARLAR

RewriteEngine On
RewriteCond %{SERVER_PORT} 80
RewriteCond %{REQUEST_URI} !wp-content/cache/(all|wpfc-mobile-cache)
RewriteCond %{REQUEST_URI} !^/[0-9]+..+.cpaneldcv$
RewriteCond %{REQUEST_URI} !^/.well-known/acme-challenge/[0-9a-zA-Z_-]+$
RewriteCond %{REQUEST_URI} !^/.well-known/pki-validation/[A-F0-9]{32}.txt(?: Comodo DCV)?$
RewriteCond %{REQUEST_URI} !^/.well-known/cpanel-dcv/[0-9a-zA-Z_-]+$
RewriteCond %{REQUEST_URI} !^/.well-known/pki-validation/(?: Ballot169)?
RewriteRule ^(.*)$ http://www.radyo-dinle.biz/$1 [R,L]

# Remove .HTML from url
#redirectMatch 301 ^(.*).html $1
# END .HTML Remover

<IfModule mod_headers.c>
# Set XSS Protection header
Header set X-XSS-Protection "1; mode=block"
</IfModule>

<ifModule mod_gzip.c>
mod_gzip_on Yes
mod_gzip_dechunk Yes
mod_gzip_item_include file .(html?|txt|css|js|php|pl)$
mod_gzip_item_include handler ^cgi-script$
mod_gzip_item_include mime ^text/.*
mod_gzip_item_include mime ^application/x-javascript.*
mod_gzip_item_exclude mime ^image/.*
mod_gzip_item_exclude rspheader ^Content-Encoding:.*gzip.*
</ifModule>

## EXPIRES CACHING ##
<IfModule mod_expires.c>
ExpiresActive On
# Images
ExpiresByType image/jpeg "access plus 1 year"
ExpiresByType image/gif "access plus 1 year"
ExpiresByType image/png "access plus 1 year"
ExpiresByType image/webp "access plus 1 year"
ExpiresByType image/svg+xml "access plus 1 year"
ExpiresByType image/x-icon "access plus 1 year"
# Video
ExpiresByType video/mp4 "access plus 1 year"
ExpiresByType video/mpeg "access plus 1 year"
# CSS, JavaScript
ExpiresByType text/css "access plus 1 month"
ExpiresByType text/javascript "access plus 1 month"
ExpiresByType application/javascript "access plus 1 month"
# Others
ExpiresByType application/pdf "access plus 1 month"
ExpiresByType application/x-shockwave-flash "access plus 1 month"
</IfModule>
## EXPIRES CACHING ##

# 1 Month for most static assets
<filesMatch ".(css|jpg|jpeg|png|gif|js|ico)$">
Header set Cache-Control "max-age=2592000, public"
</filesMatch>

<IfModule mod_headers.c>
# Unset Server Signature header
ServerSignature Off
# Unset Server Technology header
Header unset X-Powered-By
</IfModule>

## INDEXLEMEYI KAPATMA ##
Options All -Indexes

# BEGIN block author scans
RewriteEngine On
RewriteBase /
RewriteCond %{QUERY_STRING} (author=d+) [NC]
RewriteCond %{REQUEST_URI} !^/[0-9]+..+.cpaneldcv$
RewriteCond %{REQUEST_URI} !^/.well-known/acme-challenge/[0-9a-zA-Z_-]+$
RewriteCond %{REQUEST_URI} !^/.well-known/pki-validation/[A-F0-9]{32}.txt(?: Comodo DCV)?$
RewriteCond %{REQUEST_URI} !^/.well-known/cpanel-dcv/[0-9a-zA-Z_-]+$
RewriteCond %{REQUEST_URI} !^/.well-known/pki-validation/(?: Ballot169)?
RewriteRule .* - [F]
# END block author scans

# Block WordPress xmlrpc.php requests
<Files xmlrpc.php>
order deny,allow
deny from all
</Files>

## ETAG KAPATMA ##
<ifModule mod_headers.c>
Header set Cache-Control "max-age=29030400, public"
Header set Cache-Control "max-age=29030400, public"
Header set Cache-Control "max-age=29030400, private"
Header set Cache-Control "max-age=29030400, private, must-revalidate"
Header unset ETag
Header unset Last-Modified
</ifModule>

FileETag None
php_value max_input_vars 2000

# ##############################################################################
# # SECURITY #
# ##############################################################################

# ------------------------------------------------------------------------------
# | Clickjacking |
# ------------------------------------------------------------------------------
<IfModule mod_headers.c>
Header set X-Frame-Options "DENY"
<FilesMatch "">
Header unset X-Frame-Options
</FilesMatch>
</IfModule>

# ------------------------------------------------------------------------------
# | Content Security Policy (CSP) |
# ------------------------------------------------------------------------------
<IfModule mod_headers.c>
Header set Content-Security-Policy ""
<FilesMatch ".(appcache|crx|css|cur|eot|gif|htc|ico|jpe?g|js|m4a|m4v|manifest|mp4|oex|oga|ogg|ogv|otf|pdf|png|safariextz|svgz?|ttf|vcf|webapp|webm|webp|woff|xml|xpi)$">
Header unset Content-Security-Policy
</FilesMatch>
</IfModule>

# ------------------------------------------------------------------------------
# | Reducing MIME-type security risks |
# ------------------------------------------------------------------------------
<IfModule mod_headers.c>
Header set X-Content-Type-Options "nosniff"
</IfModule>

# ------------------------------------------------------------------------------
# | HTTP Strict Transport Security (HSTS) |
# ------------------------------------------------------------------------------
<IfModule mod_headers.c>
Header set Strict-Transport-Security "max-age=16070400; includeSubDomains"
</IfModule>

# ------------------------------------------------------------------------------
# | Referrer & Feature Policy |
# ------------------------------------------------------------------------------
<IfModule headers_module>
RequestHeader set X-HTTPS 1
Header set Referrer-Policy "no-referrer-when-downgrade"
Header set Feature-Policy "geolocation none;midi none;sync-xhr none;camera none;magnetometer none;gyroscope none;speaker self;fullscreen self"
</IfModule>

# ------------------------------------------------------------------------------
# | BAN LIST |
# ------------------------------------------------------------------------------
<Limit GET POST>
order allow,deny
deny from 217.23.10.44
deny from 104.28.18.94
deny from 213.186.33.5
deny from 62.112.9.56
deny from 99-reasons-for-seo.com
deny from 15-reasons-for-seo.com
deny from 16-reasons-for-seo.com
deny from 9-reasons-for-seo.com
deny from best-seo-service.tk
deny from free-seo-analyze.tk
deny from seo-service.ml
deny from seo-servisi.tk
deny from ucretsiz-seo-analizi.tk
deny from web-siteni-yukselt.tk
deny from 7-best-seo.com
deny from 9-best-seo.com
deny from 1-best-seo.com
deny from autoseo-expert.com
deny from bestecommerceseo.com
deny from seogoodhelper.com
deny from autoseotips.com
deny from backlinks-fast-top.com
deny from fast-seo-links.com
deny from get-links-seo.com
deny from seo-on-auto.com
deny from your-good-links.com
deny from ai-seo-service.com
deny from ai-seo-services.com
allow from all
</Limit>

# ------------------------------------------------------------------------------
# | SPAMMER URL BAN |
# ------------------------------------------------------------------------------
RedirectMatch 403 ^/h/10065941.html$

# END WordPress