# BEGIN WordPress
<IfModule mod_rewrite.c>
	RewriteEngine On
	RewriteBase /
	RewriteRule ^index\.php$ - [L]
	RewriteCond %{REQUEST_FILENAME} !-f
	RewriteCond %{REQUEST_FILENAME} !-d
	RewriteRule . /index.php [L]
</IfModule>
# END WordPress

# Block the include-only files.
<IfModule mod_rewrite.c>
	RewriteEngine On
	RewriteBase /
	RewriteRule ^wp-admin/includes/ - [F,L]
	RewriteRule !^wp-includes/ - [S=3]
	RewriteRule ^wp-includes/[^/]+\.php$ - [F,L]
	RewriteRule ^wp-includes/js/tinymce/langs/.+\.php - [F,L]
	RewriteRule ^wp-includes/theme-compat/ - [F,L]
</IfModule>

<files wp-config.php>
	order allow,deny
	deny from all
</files>

<files ~ "^.*\.([Hh][Tt][Aa])">
	order allow,deny
	deny from all
	satisfy all
</files>

<Files wp-login.php>
	order deny,allow
	deny from all
	 
	# whitelist Home address
	allow from 68.147.181.30

	# whitelist Trevor IP Address
	allow from 204.237.80.182
	allow from 204.237.81.179
	allow from 74.214.146.172
	allow from 204.237.81.85
	allow from 207.228.78.206
	
	# whitelist Developer Address
	allow from 122.170.1.35
	allow from 45.126.254.147
	allow from 202.71.18.227
	allow from 175.100.138.38
	allow from 103.132.150.65

	#whitelist Cindy D'Aoust IP Address
	allow from 50.65.85.169
</Files>



# Wordfence WAF

<Files ".user.ini">
<IfModule mod_authz_core.c>
	Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
	Order deny,allow
	Deny from all
</IfModule>
</Files>

# END Wordfence WAF

# php -- BEGIN cPanel-generated handler, do not edit
# Set the “ea-php73” package as the default “PHP” programming language.
<IfModule mime_module>
  AddHandler application/x-httpd-ea-php73 .php .php7 .phtml
</IfModule>
# php -- END cPanel-generated handler, do not edit
