# Wordfence WAF

# protect wpconfig.php
<files wp-config.php>
order allow,deny
deny from all
</files>

<Files ".user.ini">
<IfModule mod_authz_core.c>
	Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
	Order deny,allow
	Deny from all
</IfModule>
</Files>

# END Wordfence WAF

RewriteEngine on