How to use the .htaccess file.

• The .htaccess is an important WordPress core file used to add and modify and override server-level configuration security.
• In server-level optional issues and challenges and simple updating and changing roles on WordPress .htaccess file.

What is the .htaccess file?

• The .htaccess file is a control room for your website that contains essential rules that govern all communication with your WordPress web hosting server.
• Your company’s website may be vulnerable due to small oversights such as skipping sanitization and verifications of input fields, or the presence of vulnerable forms. This would allow hackers to run scripts, database queries or even insert malicious files into the system.
• In particular, you can use the .htaccess file on WordPress for tasks such as controlling access to website pages, improving security and performance.

Advantages of a .htaccess file.

• Custom error page: The document error 404-page r is a custom error.
• Redirect: The redirect .htaccess file enables you to direct a user from the old page to a new page without any changes.

Disadvantages of a .htaccess file.

• Speed: the .htaccess page may slow down the website.
• Security: the .htaccess file allows adding and modifying to configure rules in a server.

WordPress firewall Plugin on Level.

Advantages of a website Firewall plugin.

• Can easily enable /disable and allow/block requests.
• Overloading the web server.
Constant configuration of DNS settings.

Disadvantages of a web site Firewall plugin.

• Can do not protect against DDoS attacks.
• Can do not protect against user issues.
• Slow website.

Follow these steps for the .htaccess level :

• Enable the 2FA + Website Security check box.




• Click on the miniOrange 2 Factor >> Firewall from the left side menu.


• Click on the Firewall tab and settings tab.


• Enable the website firewall.htaccess Level.
• IPs blocked by the admin will be blocked on the server only. These IPs won't be able to access the site.
• This will activate WAF before the WordPress load. This will block illegitimate requests before any connection to WordPress. This level does not allow illegal requests before any page gets loaded.
• Click on the conform and Download button.




• We have successfully WAF is disabled.

The default .htaccess file.:

• The .htaccess file comes with every WordPress installation and is generally located in the root directory. Given the importance of the file, it is generally hidden (it doesn’t have any file extension) and does not appear in the file and folder listings, mainly because the file manager hides it for security reasons.
• Go to WordPress localhost >.htaccess file.


• Click on the .htaccess file and open the notepad.

Additional Resources

• What is a Malware Scanner?
• What is a Login Security and Spam Protection?
• What is a broken link Checker/Finder?

If you don't find what you are looking for, please contact us at 2fasupport@xecurify.com or call us at +1 978 658 9387.