# BEGIN HMWP_RULES
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteRule ^([_0-9a-zA-Z-]+/)?sadmin/(.*) /wp-admin/$2 [QSA,NC,L]
RewriteRule ^([_0-9a-zA-Z-]+/)?slogin$ /wp-login.php [QSA,NC,L]
RewriteRule ^([_0-9a-zA-Z-]+/)?slogin/(.*) /wp-login.php$2 [QSA,NC,L]
RewriteRule ^([_0-9a-zA-Z-]+/)?lostpass$ /wp-login.php?action=lostpassword [QSA,NC,L]
RewriteRule ^([_0-9a-zA-Z-]+/)?register$ /wp-login.php?action=register [QSA,NC,L]
RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/d0f4711431/(.*) /wp-content/plugins/hide-my-wp/$2 [QSA,NC,L]
RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/7102ae65e9/(.*) /wp-content/plugins/checkout-field-editor-and-manager-for-woocommerce/$2 [QSA,NC,L]
RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/434b8996f4/(.*) /wp-content/plugins/classic-editor/$2 [QSA,NC,L]
RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/fabe3a944a/(.*) /wp-content/plugins/classic-widgets/$2 [QSA,NC,L]
RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/d51aa4f719/(.*) /wp-content/plugins/code-profiler/$2 [QSA,NC,L]
RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/8516d2654f/(.*) /wp-content/plugins/contact-form-7/$2 [QSA,NC,L]
RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/e23d266be8/(.*) /wp-content/plugins/duracelltomi-google-tag-manager/$2 [QSA,NC,L]
RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/ccc473c329/(.*) /wp-content/plugins/elementor-pro/$2 [QSA,NC,L]
RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/f65f29574d/(.*) /wp-content/plugins/elementor/$2 [QSA,NC,L]
RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/485c463dd9/(.*) /wp-content/plugins/ewww-image-optimizer/$2 [QSA,NC,L]
RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/a544797095/(.*) /wp-content/plugins/facebook-for-woocommerce/$2 [QSA,NC,L]
RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/697351d7e6/(.*) /wp-content/plugins/jetpack/$2 [QSA,NC,L]
RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/8c6b2640d1/(.*) /wp-content/plugins/mailchimp-for-wp/$2 [QSA,NC,L]
RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/5f34ee9c2c/(.*) /wp-content/plugins/mailpoet/$2 [QSA,NC,L]
RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/ffd833025d/(.*) /wp-content/plugins/product-questions-answers-for-woocommerce/$2 [QSA,NC,L]
RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/7720e7c12b/(.*) /wp-content/plugins/product-recommendation-quiz-for-ecommerce/$2 [QSA,NC,L]
RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/f5fee5c6aa/(.*) /wp-content/plugins/safe-svg/$2 [QSA,NC,L]
RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/f73730c2cd/(.*) /wp-content/plugins/seo-by-rank-math/$2 [QSA,NC,L]
RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/e58184468a/(.*) /wp-content/plugins/steadfast-api/$2 [QSA,NC,L]
RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/39d10ee62c/(.*) /wp-content/plugins/woocommerce/$2 [QSA,NC,L]
RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/bda9c184df/(.*) /wp-content/plugins/woodmart-core/$2 [QSA,NC,L]
RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/87d83299e0/(.*) /wp-content/plugins/woodmart-images-optimizer/$2 [QSA,NC,L]
RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/ffee7df689/(.*) /wp-content/plugins/wp-rocket/$2 [QSA,NC,L]
RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/3f8ffb94f6/(.*) /wp-content/plugins/wpnotif/$2 [QSA,NC,L]
RewriteRule ^([_0-9a-zA-Z-]+/)?core/modules/(.*) /wp-content/plugins/$2 [QSA,NC,L]
RewriteRule ^([_0-9a-zA-Z-]+/)?core/templates/1fd4f1ee5c/design.css$ /wp-content/themes/extendable/style.css [QSA,NC,L]
RewriteRule ^([_0-9a-zA-Z-]+/)?core/templates/1fd4f1ee5c/(.*) /wp-content/themes/extendable/$2 [QSA,NC,L]
RewriteRule ^([_0-9a-zA-Z-]+/)?core/templates/ff55dedaeb/design.css$ /wp-content/themes/twentytwentyfive/style.css [QSA,NC,L]
RewriteRule ^([_0-9a-zA-Z-]+/)?core/templates/ff55dedaeb/(.*) /wp-content/themes/twentytwentyfive/$2 [QSA,NC,L]
RewriteRule ^([_0-9a-zA-Z-]+/)?core/templates/51a12ba5b2/design.css$ /wp-content/themes/twentytwentyfour/style.css [QSA,NC,L]
RewriteRule ^([_0-9a-zA-Z-]+/)?core/templates/51a12ba5b2/(.*) /wp-content/themes/twentytwentyfour/$2 [QSA,NC,L]
RewriteRule ^([_0-9a-zA-Z-]+/)?core/templates/a37e87dcf0/design.css$ /wp-content/themes/twentytwentythree/style.css [QSA,NC,L]
RewriteRule ^([_0-9a-zA-Z-]+/)?core/templates/a37e87dcf0/(.*) /wp-content/themes/twentytwentythree/$2 [QSA,NC,L]
RewriteRule ^([_0-9a-zA-Z-]+/)?core/templates/99d4497777/design.css$ /wp-content/themes/woodmart-child/style.css [QSA,NC,L]
RewriteRule ^([_0-9a-zA-Z-]+/)?core/templates/99d4497777/(.*) /wp-content/themes/woodmart-child/$2 [QSA,NC,L]
RewriteRule ^([_0-9a-zA-Z-]+/)?core/templates/333853c80f/design.css$ /wp-content/themes/woodmart/style.css [QSA,NC,L]
RewriteRule ^([_0-9a-zA-Z-]+/)?core/templates/333853c80f/(.*) /wp-content/themes/woodmart/$2 [QSA,NC,L]
RewriteRule ^([_0-9a-zA-Z-]+/)?core/templates/(.*) /wp-content/themes/$2 [QSA,NC,L]
RewriteRule ^([_0-9a-zA-Z-]+/)?storage/(.*) /wp-content/uploads/$2 [QSA,NC,L]
RewriteRule ^([_0-9a-zA-Z-]+/)?core/(.*) /wp-content/$2 [QSA,NC,L]
RewriteRule ^([_0-9a-zA-Z-]+/)?lib/(.*) /wp-includes/$2 [QSA,NC,L]
RewriteRule ^([_0-9a-zA-Z-]+/)?comments/(.*) /wp-comments-post.php$2 [QSA,NC,L]
RewriteRule ^([_0-9a-zA-Z-]+/)?profile/(.*) /author/$2 [QSA,NC,L]
RewriteRule ^([_0-9a-zA-Z-]+/)?json/(.*) /wp-json/$2 [QSA,NC,L]
</IfModule>
# END HMWP_RULES
# BEGIN HMWP_VULNERABILITY
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteCond %{REQUEST_URI} !/wp-admin [NC]
RewriteCond %{QUERY_STRING} ^author=\d+ [NC]
RewriteRule ^(.*)$ - [L,R=404]
</IfModule>
Options -Indexes
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteCond %{REMOTE_ADDR} ^35.214.130.87$ [NC,OR]
RewriteCond %{REMOTE_ADDR} ^192.185.4.40$ [NC,OR]
RewriteCond %{REMOTE_ADDR} ^15.235.50.223$ [NC,OR]
RewriteCond %{REMOTE_ADDR} ^172.105.48.130$ [NC,OR]
RewriteCond %{REMOTE_ADDR} ^167.99.233.123$ [NC,OR]
RewriteCond %{HTTP_USER_AGENT} (wpthemedetector|builtwith|isitwp|wappalyzer|Wappalyzer|mShots|WhatCMS|gochyu|wpdetector|scanwp) [NC]
RewriteRule ^(.*)$ - [L,R=404]
</IfModule>
<IfModule mod_headers.c>
Header always unset x-powered-by
Header always unset server
ServerSignature Off
</IfModule>
<IfModule mod_headers.c>
Header set Strict-Transport-Security "max-age=15768000;includeSubdomains"
Header set Content-Security-Policy "object-src 'none'"
Header set X-XSS-Protection "1; mode=block"
</IfModule>
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteCond %{HTTP:Cookie} !(wordpress_logged_in_|hmwp_logged_in_) [NC]
RewriteCond %{REQUEST_URI} !/cache/min/ [NC]
RewriteCond %{THE_REQUEST} /([_0-9a-zA-Z-]+/)?(wp-config\.php|readme\.html|readme\.txt|license\.txt) [NC]
RewriteRule ^(.*)$ - [L,R=404]
</IfModule>
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteCond %{REQUEST_URI} /(wp-config\.php|readme\.html|readme\.txt|license\.txt) [NC]
RewriteRule ^(.*)$ - [L,R=404]
</IfModule>
# END HMWP_VULNERABILITY
# BEGIN WP Rocket
# Use UTF-8 encoding for anything served text/plain or text/html
AddDefaultCharset UTF-8
# Force UTF-8 for a number of file formats
<IfModule mod_mime.c>
AddCharset UTF-8 .atom .css .js .json .rss .vtt .xml
</IfModule>

# FileETag None is not enough for every server.
<IfModule mod_headers.c>
Header unset ETag
</IfModule>

# Since we’re sending far-future expires, we don’t need ETags for static content.
# developer.yahoo.com/performance/rules.html#etags
FileETag None

# Send CORS headers if browsers request them; enabled by default for images.
<IfModule mod_setenvif.c>
<IfModule mod_headers.c>
# mod_headers, y u no match by Content-Type?!
<FilesMatch "\.(avifs?|cur|gif|png|jpe?g|svgz?|ico|webp)$">
SetEnvIf Origin ":" IS_CORS
Header set Access-Control-Allow-Origin "*" env=IS_CORS
</FilesMatch>
</IfModule>
</IfModule>

# Allow access to web fonts from all domains.
<FilesMatch "\.(eot|otf|tt[cf]|woff2?)$">
<IfModule mod_headers.c>
Header set Access-Control-Allow-Origin "*"
</IfModule>
</FilesMatch>

<IfModule mod_alias.c>
<FilesMatch "\.(html|htm|rtf|rtx|txt|xsd|xsl|xml)$">
<IfModule mod_headers.c>
Header set X-Powered-By "WP Rocket/3.23.1"
Header unset Pragma
Header append Cache-Control "public"
Header unset Last-Modified
</IfModule>
</FilesMatch>

<FilesMatch "\.(css|htc|js|asf|asx|wax|wmv|wmx|avi|bmp|class|divx|doc|docx|eot|exe|gif|gz|gzip|ico|jpg|jpeg|jpe|json|mdb|mid|midi|mov|qt|mp3|m4a|mp4|m4v|mpeg|mpg|mpe|mpp|otf|odb|odc|odf|odg|odp|ods|odt|ogg|pdf|png|pot|pps|ppt|pptx|ra|ram|svg|svgz|swf|tar|tif|tiff|ttf|ttc|wav|wma|wri|xla|xls|xlsx|xlt|xlw|zip)$">
<IfModule mod_headers.c>
Header unset Pragma
Header append Cache-Control "public"
</IfModule>
</FilesMatch>
</IfModule>

<IfModule mod_mime.c>
	AddType image/avif                                  avif
    AddType image/avif-sequence                         avifs
</IfModule>
# Expires headers (for better cache control)
<IfModule mod_expires.c>
	ExpiresActive on
	ExpiresDefault                              "access plus 1 month"
	# cache.appcache needs re-requests in FF 3.6 (thanks Remy ~Introducing HTML5)
	ExpiresByType text/cache-manifest           "access plus 0 seconds"
	# Your document html
	ExpiresByType text/html                     "access plus 0 seconds"
	# Data
	ExpiresByType text/xml                      "access plus 0 seconds"
	ExpiresByType application/xml               "access plus 0 seconds"
	ExpiresByType application/json              "access plus 0 seconds"
	# Feed
	ExpiresByType application/rss+xml           "access plus 1 hour"
	ExpiresByType application/atom+xml          "access plus 1 hour"
	# Favicon (cannot be renamed)
	ExpiresByType image/x-icon                  "access plus 1 week"
	# Media: images, video, audio
	ExpiresByType image/gif                     "access plus 4 months"
	ExpiresByType image/png                     "access plus 4 months"
	ExpiresByType image/jpeg                    "access plus 4 months"
	ExpiresByType image/webp                    "access plus 4 months"
	ExpiresByType video/ogg                     "access plus 4 months"
	ExpiresByType audio/ogg                     "access plus 4 months"
	ExpiresByType video/mp4                     "access plus 4 months"
	ExpiresByType video/webm                    "access plus 4 months"
	ExpiresByType image/avif                    "access plus 4 months"
	ExpiresByType image/avif-sequence           "access plus 4 months"
	# HTC files  (css3pie)
	ExpiresByType text/x-component              "access plus 1 month"
	# Webfonts
	ExpiresByType font/ttf                      "access plus 4 months"
	ExpiresByType font/otf                      "access plus 4 months"
	ExpiresByType font/woff                     "access plus 4 months"
	ExpiresByType font/woff2                    "access plus 4 months"
	ExpiresByType image/svg+xml                 "access plus 4 months"
	ExpiresByType application/vnd.ms-fontobject "access plus 1 month"
	# CSS and JavaScript
	ExpiresByType text/css                      "access plus 1 year"
	ExpiresByType text/javascript               "access plus 1 year"
	ExpiresByType application/javascript        "access plus 1 year"
</IfModule>
# Gzip compression
<IfModule mod_deflate.c>
# Active compression
SetOutputFilter DEFLATE
# Force deflate for mangled headers
<IfModule mod_setenvif.c>
<IfModule mod_headers.c>
SetEnvIfNoCase ^(Accept-EncodXng|X-cept-Encoding|X{15}|~{15}|-{15})$ ^((gzip|deflate)\s*,?\s*)+|[X~-]{4,13}$ HAVE_Accept-Encoding
RequestHeader append Accept-Encoding "gzip,deflate" env=HAVE_Accept-Encoding
# Don’t compress images and other uncompressible content
SetEnvIfNoCase Request_URI \
\.(?:gif|jpe?g|png|rar|zip|exe|flv|mov|wma|mp3|avi|swf|mp?g|mp4|webm|webp|pdf)$ no-gzip dont-vary
</IfModule>
</IfModule>

# Compress all output labeled with one of the following MIME-types
<IfModule mod_filter.c>
AddOutputFilterByType DEFLATE application/atom+xml \
		                          application/javascript \
		                          application/json \
		                          application/rss+xml \
		                          application/vnd.ms-fontobject \
		                          application/x-font-ttf \
		                          application/xhtml+xml \
		                          application/xml \
		                          font/opentype \
		                          image/svg+xml \
		                          image/x-icon \
		                          text/css \
		                          text/javascript \
		                          text/html \
		                          text/plain \
		                          text/x-component \
		                          text/xml
</IfModule>
<IfModule mod_headers.c>
Header append Vary: Accept-Encoding
</IfModule>
</IfModule>


# END WP Rocket
# BEGIN LSCACHE
# END LSCACHE
# BEGIN NON_LSCACHE
# END NON_LSCACHE

# BEGIN NamecheapBotBlocker
RewriteEngine On
RewriteCond %{HTTP_USER_AGENT} ^.*GPTBot
RewriteRule .* - [F,L]
# END NamecheapBotBlocker

# BEGIN Security Block
# Block the include-only files.
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^wp-admin/includes/ - [F,L]
RewriteRule !^wp-includes/ - [S=3]
RewriteRule ^wp-includes/[^/]+\.php$ - [F,L]
RewriteRule ^wp-includes/js/tinymce/langs/.+\.php - [F,L]
RewriteRule ^wp-includes/theme-compat/ - [F,L]
</IfModule>

# Disable directory listing
Options All -Indexes

# Remove header with PHP version
Header always unset X-Powered-By
Header unset X-Powered-By
# END Security Block

# BEGIN WordPress
# The directives (lines) between "BEGIN WordPress" and "END WordPress" are
# dynamically generated, and should only be modified via WordPress filters.
# Any changes to the directives between these markers will be overwritten.
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
RewriteBase /
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>

# END WordPress
<Files 403.shtml>
order allow,deny
allow from all
</Files>

deny from 74.7.243.215

# php -- BEGIN cPanel-generated handler, do not edit
# Set the “ea-php82” package as the default “PHP” programming language.
<IfModule mime_module>
  AddHandler application/x-httpd-ea-php82___lsphp .php .php8 .phtml
</IfModule>
# php -- END cPanel-generated handler, do not edit

# BEGIN LiteSpeed
# The directives (lines) between "BEGIN LiteSpeed" and "END LiteSpeed" are
# dynamically generated, and should only be modified via WordPress filters.
# Any changes to the directives between these markers will be overwritten.
<IfModule Litespeed>
	SetEnv noabort 1
</IfModule>
# END LiteSpeed