About .htaccess file again

Hi can you provide more information about your Nginx Server explaining which security options you have tested that are not working in your .htaccess file?

Hi.

I dont know what is not working. On Nginx site writing about .htaccess uselessness: https://wiki.nginx.org/LikeApache-htaccess.

Im just asking for confirmation. Im in panic.

If its true, some features are not working (mayby?):

1) #AIOWPS_BLOCK_WP_FILE_ACCESS_START
2) #AIOWPS_BASIC_HTACCESS_RULES_START
3) #AIOWPS_PINGBACK_HTACCESS_RULES_START
4) #AIOWPS_DEBUG_LOG_BLOCK_HTACCESS_RULES_START
5) #AIOWPS_IP_BLACKLIST_START
6) #AIOWPS_USER_AGENT_BLACKLIST_START
7) #AIOWPS_DISABLE_TRACE_TRACK_START
8) #AIOWPS_ADVANCED_CHAR_STRING_FILTER_START
9) #AIOWPS_FIVE_G_BLACKLIST_START
10) # 5G:[QUERY STRINGS]
11) # 5G:[USER AGENTS]
12) # 5G:[REQUEST STRINGS]
13) # 5G:[REQUEST METHOD]
14) #AIOWPS_BLOCK_SPAMBOTS_START
15) #AIOWPS_PREVENT_IMAGE_HOTLINKS_START

All from my .htaccess file. If its not working, its damn problem for me and others on Nginx-based sites.

Im just testing hotlinks prevention. Its not working.

Our firewall rules are not supported for nginx sites.
If you are hosted on an nginx server then you should not be using the firewall rules because they are specifically written for apache-type setups.

What are your recommendations? Disable firewall?

You can protect your login page using the “Rename Login” feature. This will go a long way in protecting you from hackers trying to get into your WP admin pages.

As far as as firewall rules go, yes unfortunately for now they don’t work on nginx.

I think

1) Rename Login
2) Rename DB prefix
3) Login captcha
4) Honeypot
5) File an folder permissions
6) Php editing disabling
7) New account inactivation
8) Incorrect login prevention
9) Admin name checking

are very useful.

And not depend on .htaccess. Isnt it?

Yes that’s right.

Tell me please, what I can to disable without any loss for security. Firewall only?

I think I will delete .htaccess file because its recommended here (https://wiki.nginx.org/LikeApache-htaccess).

Nginx does not use .htaccess rules. Most servers are moving to Nginx as it is faster and more resource efficient.

Personally, I use WordFence – No problems with Nginx.