WordPress安全防护指南:防护网站的文件和数据库

$table_prefix = ‘wp_’;
更改为
$table_prefix = ‘inl_wp_’;

<?php
/**
 * The base configuration for WordPress
 *
 * The wp-config.php creation script uses this file during the installation.
 * You don't have to use the web site, you can copy this file to "wp-config.php"
 * and fill in the values.
 *
 * This file contains the following configurations:
 *
 * * Database settings
 * * Secret keys
 * * Database table prefix
 * * Localized language
 * * ABSPATH
 *
 * @link https://wordpress.org/support/article/editing-wp-config-php/
 *
 * @package WordPress
 */

// ** Database settings - You can get this info from your web host ** //
/** The name of the database for WordPress */
define( 'DB_NAME', 'dbiolkxxxxx' );

/** Database username */
define( 'DB_USER', 'ulqpdsdvxxxxx' );

/** Database password */
define( 'DB_PASSWORD', '7c8fsghxxxxx' );

/** Database hostname */
define( 'DB_HOST', '127.0.0.1' );

/** Database charset to use in creating database tables. */
define( 'DB_CHARSET', 'utf8' );

/** The database collate type. Don't change this if in doubt. */
define( 'DB_COLLATE', '' );

/**#@+
 * Authentication unique keys and salts.
 *
 * Change these to different unique phrases! You can generate these using
 * the {@link https://api.wordpress.org/secret-key/1.1/salt/ WordPress.org secret-key service}.
 *
 * You can change these at any point in time to invalidate all existing cookies.
 * This will force all users to have to log in again.
 *
 * @since 2.6.0
 */
define( 'AUTH_KEY',          'G]3an,<I}ldxxxi3r[JGP8?Le@(~:/~n2<&L47<JRyzL_oi|<eNIs`vx7)P@u]OIv' );
define( 'SECURE_AUTH_KEY',   'c68.3L A&]-xxx2/NfW-Zy:S;!Ft[BnJ0q|,3{.*TH>2=nR+Mq3f+doR8qWg<Mj}' );
define( 'LOGGED_IN_KEY',     'g,MMeRHE>(>v22+ ON,UwKtd%lNOo~.c]CA.PKHYQ6l[:YxJES5CMQGG`xxx9[Qh' );
define( 'NONCE_KEY',         'bS%cBi/XH>xxx}OG,8 yMq4^oFA}o`E2VV|$[r+oAo>$e){I&].,pT5vxp_,=s9v' );
define( 'AUTH_SALT',         ',*|3BhAs|8~Rxxxx:N-`lYt|.HAJa`<90*sz^no3R2>H,[TlWzcZLOiTyh{>19<!' );
define( 'SECURE_AUTH_SALT',  'DRydHuVXVO@_xxxF.Zp3pI?/5N| 1X(cVr7}ltDO2I7xMmQYo,`+1YAnu,}zcqui' );
define( 'LOGGED_IN_SALT',    ',&S_!hq@}X>`LG?Y;*S-XR18F!987Gp^tNd{#MWX=S;2uStGEk!q_fd{;Q3xxxx1' );
define( 'NONCE_SALT',        '4DCQWtWO_6yxxxx]4hE?7)ijWaN|i(ZstrA|;#<P8bn]cGV:$XP.G_eV0=5W+mi8' );
define( 'WP_CACHE_KEY_SALT', '}mKtPylp@ml7xxxxyXhDoB$v]U=/|bC:=iR)- Q5d^m;`J%?ERMiv:BZCFm(D!Xd' );

/**#@-*/

/**
 * WordPress database table prefix.
 *
 * You can have multiple installations in one database if you give each
 * a unique prefix. Only numbers, letters, and underscores please!
 */
$table_prefix = 'inl_';

/* Add any custom values between this line and the "stop editing" line. */

/**
 * For developers: WordPress debugging mode.
 *
 * Change this to true to enable the display of notices during development.
 * It is strongly recommended that plugin and theme developers use WP_DEBUG
 * in their development environments.
 *
 * For information on other constants that can be used for debugging,
 * visit the documentation.
 *
 * @link https://wordpress.org/support/article/debugging-in-wordpress/
 */
if ( ! defined( 'WP_DEBUG' ) ) {
    define( 'WP_DEBUG', false );
}

/* That's all, stop editing! Happy publishing. */

/** Absolute path to the WordPress directory. */
if ( ! defined( 'ABSPATH' ) ) {
    define( 'ABSPATH', __DIR__ . '/' );
}

/** Sets up WordPress vars and included files. */
@include_once('/var/lib/sec/wp-settings-pre.php'); // Added by SiteGround WordPress management system
require_once ABSPATH . 'wp-settings.php';
@include_once('/var/lib/sec/wp-settings.php'); // Added by SiteGround WordPress management system

#Deny Directory Listing
Options - Indexes
#Block sensitive files
<Files .htaccess>
    Order deny,allow
    allow from 10.10.9.232
    Deny from all
</files>

<Files wp-config.php>
    Order deny,allow
    allow from 10.10.9.232
    Deny from all
</files>

在上述操作之前记得先备份.htaccess文件，且你充分了解.htaccess语法，否则不要操作

#Block installation files<Files install.php>

<Files install.php>
    Order deny,allow
    allow from 10.10.9.232
    Deny from all
</Files>

<Files setup-config.php>
    Order deny,allow
    allow from 10.10.9.232
    Deny from all
</Files>

在上述操作之前记得先备份.htaccess文件，且你充分了解.htaccess语法，否则不要操作

/wp-content/uploads
/wp-content/plugins
/wp-content/themes

<Files *.php>
    deny from all
</Files>

define( 'DISALLOW_FILE_EDIT', true ); 

define( 'DISALLOW_FILE_MODS', true );