# BEGIN All In One WP Security
#AIOWPS_BASIC_HTACCESS_RULES_START
<Files .htaccess>
<IfModule mod_authz_core.c>
Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
Order deny,allow
Deny from all
</IfModule>
</Files>
ServerSignature Off
LimitRequestBody 10485760
<Files wp-config.php>
<IfModule mod_authz_core.c>
Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
Order deny,allow
Deny from all
</IfModule>
</Files>
#AIOWPS_BASIC_HTACCESS_RULES_END
#AIOWPS_BLOCK_SPAMBOTS_START
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteCond %{REQUEST_METHOD} POST
RewriteCond %{REQUEST_URI} ^(.*)?wp-comments-post\.php(.*)$
RewriteCond %{HTTP_REFERER} !^http(s)?://functionalgenomics\.org\.uk [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^$
RewriteRule .* http://127.0.0.1 [L]
</IfModule>
#AIOWPS_BLOCK_SPAMBOTS_END
#AIOWPS_LOGIN_WHITELIST_START
<FilesMatch "^(wp-login\.php)">
<IfModule !mod_authz_core.c>
Order Allow,Deny
Allow from functionalgenomics.org.uk
Allow from 51.75.165.86
Allow from 185.175.113.72
</IfModule>
<IfModule mod_authz_core.c>
Require all denied
Require local
Require ip 127.0.0.1
Require host functionalgenomics.org.uk
Require ip 185.175.113.72
</IfModule>
</FilesMatch>
#AIOWPS_LOGIN_WHITELIST_END
# END All In One WP Security

<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>

# BEGIN ZOTYA htaccess protect
# The directives (lines) between "BEGIN ZOTYA htaccess protect" and "END ZOTYA htaccess protect" are
# dynamically generated, and should only be modified via WordPress filters.
# Any changes to the directives between these markers will be overwritten.
	# Stop Apache from serving .ht* files
	<Files ~ "^\.ht">
	Order allow,deny
	Deny from all
	</Files>
	# Protect wp-login
	<Files wp-login.php>
	AuthUserFile /home/functionalgenomics.org.uk/public_html/.htpasswd
	AuthType basic
	AuthName "Restricted"
	require valid-user
	ErrorDocument 401 "Authorization Required"
	</Files>
	<Files admin-ajax.php>
	order allow,deny
	allow from all
	</Files>
# END ZOTYA htaccess protect

# Wordfence WAF
<Files ".user.ini">
<IfModule mod_authz_core.c>
	Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
	Order deny,allow
	Deny from all
</IfModule>
</Files>

# END Wordfence WAF