# BEGIN iThemes Security - Do not modify or remove this line
# iThemes Security Config Details: 2
	# Pass through Authorization header.
	<IfModule mod_rewrite.c>
		RewriteEngine On
		RewriteCond %{HTTP:Authorization} ^(.*)
		RewriteRule .* - [e=HTTP_AUTHORIZATION:%1]
	</IfModule>

	# Enable HackRepair.com's blocklist feature - Security > Settings > Banned Users > Default Blocklist
	# Start HackRepair.com Blacklist
	RewriteEngine on
	# Start Abuse Agent Blocking
	RewriteCond %{HTTP_USER_AGENT} "^Mozilla.*Indy" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Mozilla.*NEWT" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^$" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Maxthon$" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^SeaMonkey$" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Acunetix" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^binlar" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^BlackWidow" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Bolt 0" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^BOT for JCE" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Bot mailto\:craftbot@yahoo\.com" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^casper" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^checkprivacy" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^ChinaClaw" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^clshttp" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^cmsworldmap" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Custo" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Default Browser 0" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^diavol" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^DIIbot" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^DISCo" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^dotbot" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Download Demon" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^eCatch" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^EirGrabber" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^EmailCollector" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^EmailSiphon" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^EmailWolf" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Express WebPictures" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^extract" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^ExtractorPro" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^EyeNetIE" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^feedfinder" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^FHscan" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^FlashGet" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^flicky" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^g00g1e" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^GetRight" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^GetWeb\!" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Go\!Zilla" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Go\-Ahead\-Got\-It" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^grab" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^GrabNet" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Grafula" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^harvest" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^HMView" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Image Stripper" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Image Sucker" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^InterGET" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Internet Ninja" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^InternetSeer\.com" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^jakarta" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Java" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^JetCar" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^JOC Web Spider" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^kanagawa" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^kmccrew" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^larbin" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^LeechFTP" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^libwww" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Mass Downloader" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^microsoft\.url" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^MIDown tool" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^miner" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Mister PiX" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^MSFrontPage" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Navroad" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^NearSite" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Net Vampire" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^NetAnts" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^NetSpider" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^NetZIP" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^nutch" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Octopus" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Offline Explorer" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Offline Navigator" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^PageGrabber" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Papa Foto" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^pavuk" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^pcBrowser" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^PeoplePal" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^planetwork" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^psbot" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^purebot" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^pycurl" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^RealDownload" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^ReGet" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Rippers 0" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^sitecheck\.internetseer\.com" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^SiteSnagger" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^skygrid" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^SmartDownload" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^sucker" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^SuperBot" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^SuperHTTP" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Surfbot" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^tAkeOut" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Teleport Pro" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Toata dragostea mea pentru diavola" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^turnit" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^vikspider" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^VoidEYE" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Web Image Collector" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^WebAuto" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^WebBandit" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^WebCopier" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^WebFetch" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^WebGo IS" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^WebLeacher" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^WebReaper" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^WebSauger" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Website eXtractor" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Website Quester" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^WebStripper" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^WebWhacker" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^WebZIP" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Widow" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^WPScan" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^WWW\-Mechanize" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^WWWOFFLE" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Xaldon WebSpider" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^Zeus" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "^zmeu" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "360Spider" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "CazoodleBot" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "discobot" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "EasouSpider" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "ecxi" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "GT\:\:WWW" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "heritrix" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "HTTP\:\:Lite" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "HTTrack" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "ia_archiver" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "id\-search" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "IDBot" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "Indy Library" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "IRLbot" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "ISC Systems iRc Search 2\.1" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "LinksCrawler" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "LinksManager\.com_bot" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "linkwalker" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "lwp\-trivial" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "MFC_Tear_Sample" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "Microsoft URL Control" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "Missigua Locator" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "MJ12bot" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "panscient\.com" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "PECL\:\:HTTP" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "PHPCrawl" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "PleaseCrawl" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "SBIder" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "SearchmetricsBot" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "Snoopy" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "Steeler" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "URI\:\:Fetch" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "urllib" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "Web Sucker" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "webalta" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "WebCollage" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "Wells Search II" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "WEP Search" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "XoviBot" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "YisouSpider" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "zermelo" [NC,OR]
	RewriteCond %{HTTP_USER_AGENT} "ZyBorg" [NC,OR]
	# End Abuse Agent Blocking
	# Start Abuse HTTP Referrer Blocking
	RewriteCond %{HTTP_REFERER} "^https?://(?:[^/]+\.)?semalt\.com" [NC,OR]
	RewriteCond %{HTTP_REFERER} "^https?://(?:[^/]+\.)?kambasoft\.com" [NC,OR]
	RewriteCond %{HTTP_REFERER} "^https?://(?:[^/]+\.)?savetubevideo\.com" [NC]
	# End Abuse HTTP Referrer Blocking
	RewriteRule ^.* - [F,L]
	# End HackRepair.com Blacklist, http://pastebin.com/u/hackrepair

	# Ban Hosts - Security > Settings > Banned Users
	SetEnvIF REMOTE_ADDR "^85\.31\.248\.254$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^85\.31\.248\.254$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^85\.31\.248\.254$" DenyAccess

	SetEnvIF REMOTE_ADDR "^36\.71\.239\.21$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^36\.71\.239\.21$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^36\.71\.239\.21$" DenyAccess

	SetEnvIF REMOTE_ADDR "^49\.145\.102\.51$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^49\.145\.102\.51$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^49\.145\.102\.51$" DenyAccess

	SetEnvIF REMOTE_ADDR "^43\.250\.158\.30$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^43\.250\.158\.30$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^43\.250\.158\.30$" DenyAccess

	SetEnvIF REMOTE_ADDR "^88\.17\.50\.158$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^88\.17\.50\.158$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^88\.17\.50\.158$" DenyAccess

	SetEnvIF REMOTE_ADDR "^80\.29\.23\.114$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^80\.29\.23\.114$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^80\.29\.23\.114$" DenyAccess

	SetEnvIF REMOTE_ADDR "^42\.188\.68\.114$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^42\.188\.68\.114$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^42\.188\.68\.114$" DenyAccess

	SetEnvIF REMOTE_ADDR "^203\.189\.225\.194$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^203\.189\.225\.194$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^203\.189\.225\.194$" DenyAccess

	SetEnvIF REMOTE_ADDR "^186\.12\.92\.15$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^186\.12\.92\.15$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^186\.12\.92\.15$" DenyAccess

	SetEnvIF REMOTE_ADDR "^190\.225\.202\.255$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^190\.225\.202\.255$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^190\.225\.202\.255$" DenyAccess

	SetEnvIF REMOTE_ADDR "^218\.22\.148\.105$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^218\.22\.148\.105$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^218\.22\.148\.105$" DenyAccess

	SetEnvIF REMOTE_ADDR "^103\.58\.66\.19$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^103\.58\.66\.19$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^103\.58\.66\.19$" DenyAccess

	SetEnvIF REMOTE_ADDR "^1\.9\.26\.62$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^1\.9\.26\.62$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^1\.9\.26\.62$" DenyAccess

	SetEnvIF REMOTE_ADDR "^144\.217\.69\.91$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^144\.217\.69\.91$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^144\.217\.69\.91$" DenyAccess

	SetEnvIF REMOTE_ADDR "^192\.145\.239\.35$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^192\.145\.239\.35$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^192\.145\.239\.35$" DenyAccess

	SetEnvIF REMOTE_ADDR "^47\.88\.63\.69$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^47\.88\.63\.69$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^47\.88\.63\.69$" DenyAccess

	SetEnvIF REMOTE_ADDR "^213\.183\.51\.163$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^213\.183\.51\.163$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^213\.183\.51\.163$" DenyAccess

	SetEnvIF REMOTE_ADDR "^185\.224\.132\.115$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^185\.224\.132\.115$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^185\.224\.132\.115$" DenyAccess

	SetEnvIF REMOTE_ADDR "^192\.187\.111\.146$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^192\.187\.111\.146$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^192\.187\.111\.146$" DenyAccess

	SetEnvIF REMOTE_ADDR "^52\.36\.83\.226$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^52\.36\.83\.226$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^52\.36\.83\.226$" DenyAccess

	SetEnvIF REMOTE_ADDR "^94\.102\.52\.85$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^94\.102\.52\.85$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^94\.102\.52\.85$" DenyAccess

	SetEnvIF REMOTE_ADDR "^80\.14\.91\.141$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^80\.14\.91\.141$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^80\.14\.91\.141$" DenyAccess

	SetEnvIF REMOTE_ADDR "^190\.187\.163\.113$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^190\.187\.163\.113$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^190\.187\.163\.113$" DenyAccess

	SetEnvIF REMOTE_ADDR "^82\.223\.26\.19$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^82\.223\.26\.19$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^82\.223\.26\.19$" DenyAccess

	SetEnvIF REMOTE_ADDR "^151\.80\.230\.141$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^151\.80\.230\.141$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^151\.80\.230\.141$" DenyAccess

	SetEnvIF REMOTE_ADDR "^118\.163\.51\.166$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^118\.163\.51\.166$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^118\.163\.51\.166$" DenyAccess

	SetEnvIF REMOTE_ADDR "^149\.202\.89\.239$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^149\.202\.89\.239$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^149\.202\.89\.239$" DenyAccess

	SetEnvIF REMOTE_ADDR "^119\.74\.208\.193$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^119\.74\.208\.193$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^119\.74\.208\.193$" DenyAccess

	SetEnvIF REMOTE_ADDR "^193\.201\.227\.133$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^193\.201\.227\.133$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^193\.201\.227\.133$" DenyAccess

	SetEnvIF REMOTE_ADDR "^5\.45\.97\.63$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^5\.45\.97\.63$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^5\.45\.97\.63$" DenyAccess

	SetEnvIF REMOTE_ADDR "^178\.137\.86\.15$" DenyAccess
	SetEnvIF X-FORWARDED-FOR "^178\.137\.86\.15$" DenyAccess
	SetEnvIF X-CLUSTER-CLIENT-IP "^178\.137\.86\.15$" DenyAccess

	<IfModule mod_authz_core.c>
		<RequireAll>
			Require all granted
			Require not env DenyAccess
			Require not ip 85.31.248.254
			Require not ip 36.71.239.21
			Require not ip 49.145.102.51
			Require not ip 43.250.158.30
			Require not ip 88.17.50.158
			Require not ip 80.29.23.114
			Require not ip 42.188.68.114
			Require not ip 203.189.225.194
			Require not ip 186.12.92.15
			Require not ip 190.225.202.255
			Require not ip 218.22.148.105
			Require not ip 103.58.66.19
			Require not ip 1.9.26.62
			Require not ip 144.217.69.91
			Require not ip 192.145.239.35
			Require not ip 47.88.63.69
			Require not ip 213.183.51.163
			Require not ip 185.224.132.115
			Require not ip 192.187.111.146
			Require not ip 52.36.83.226
			Require not ip 94.102.52.85
			Require not ip 80.14.91.141
			Require not ip 190.187.163.113
			Require not ip 82.223.26.19
			Require not ip 151.80.230.141
			Require not ip 118.163.51.166
			Require not ip 149.202.89.239
			Require not ip 119.74.208.193
			Require not ip 193.201.227.133
			Require not ip 5.45.97.63
			Require not ip 178.137.86.15
		</RequireAll>
	</IfModule>
	<IfModule !mod_authz_core.c>
		Order allow,deny
		Allow from all
		Deny from env=DenyAccess
		Deny from 85.31.248.254
		Deny from 36.71.239.21
		Deny from 49.145.102.51
		Deny from 43.250.158.30
		Deny from 88.17.50.158
		Deny from 80.29.23.114
		Deny from 42.188.68.114
		Deny from 203.189.225.194
		Deny from 186.12.92.15
		Deny from 190.225.202.255
		Deny from 218.22.148.105
		Deny from 103.58.66.19
		Deny from 1.9.26.62
		Deny from 144.217.69.91
		Deny from 192.145.239.35
		Deny from 47.88.63.69
		Deny from 213.183.51.163
		Deny from 185.224.132.115
		Deny from 192.187.111.146
		Deny from 52.36.83.226
		Deny from 94.102.52.85
		Deny from 80.14.91.141
		Deny from 190.187.163.113
		Deny from 82.223.26.19
		Deny from 151.80.230.141
		Deny from 118.163.51.166
		Deny from 149.202.89.239
		Deny from 119.74.208.193
		Deny from 193.201.227.133
		Deny from 5.45.97.63
		Deny from 178.137.86.15
	</IfModule>

	<IfModule mod_rewrite.c>
		RewriteEngine On

		# Reduce Comment Spam - Security > Settings > WordPress Tweaks > Comment Spam
		RewriteCond %{REQUEST_METHOD} POST
		RewriteCond %{REQUEST_URI} /wp-comments-post\.php$
		RewriteCond %{HTTP_USER_AGENT} ^$ [OR]
		RewriteCond %{HTTP_REFERER} !^https?://(([^/]+\.)?specialchildrensfriends\.org|jetpack\.wordpress\.com/jetpack-comment)(/|$) [NC]
		RewriteRule ^.* - [F]
	</IfModule>

	# Protect System Files - Security > Settings > System Tweaks > System Files
	<files .htaccess>
		<IfModule mod_authz_core.c>
			Require all denied
		</IfModule>
		<IfModule !mod_authz_core.c>
			Order allow,deny
			Deny from all
		</IfModule>
	</files>
	<files readme.html>
		<IfModule mod_authz_core.c>
			Require all denied
		</IfModule>
		<IfModule !mod_authz_core.c>
			Order allow,deny
			Deny from all
		</IfModule>
	</files>
	<files readme.txt>
		<IfModule mod_authz_core.c>
			Require all denied
		</IfModule>
		<IfModule !mod_authz_core.c>
			Order allow,deny
			Deny from all
		</IfModule>
	</files>
	<files wp-config.php>
		<IfModule mod_authz_core.c>
			Require all denied
		</IfModule>
		<IfModule !mod_authz_core.c>
			Order allow,deny
			Deny from all
		</IfModule>
	</files>

	# Disable Directory Browsing - Security > Settings > System Tweaks > Directory Browsing
	Options -Indexes

	<IfModule mod_rewrite.c>
		RewriteEngine On

		# Protect System Files - Security > Settings > System Tweaks > System Files
		RewriteRule ^wp-admin/install\.php$ - [F]
		RewriteRule ^wp-admin/includes/ - [F]
		RewriteRule !^wp-includes/ - [S=3]
		RewriteRule ^wp-includes/[^/]+\.php$ - [F]
		RewriteRule ^wp-includes/js/tinymce/langs/.+\.php - [F]
		RewriteRule ^wp-includes/theme-compat/ - [F]
		RewriteCond %{REQUEST_FILENAME} -f
		RewriteRule (^|.*/)\.(git|svn)/.* - [F]

		# Disable PHP in Uploads - Security > Settings > System Tweaks > PHP in Uploads
		RewriteRule ^wp\-content/uploads/.*\.(?:php[1-7]?|pht|phtml?|phps)\.?$ - [NC,F]

		# Disable PHP in Plugins - Security > Settings > System Tweaks > PHP in Plugins
		RewriteRule ^wp\-content/plugins/.*\.(?:php[1-7]?|pht|phtml?|phps)\.?$ - [NC,F]

		# Disable PHP in Themes - Security > Settings > System Tweaks > PHP in Themes
		RewriteRule ^wp\-content/themes/.*\.(?:php[1-7]?|pht|phtml?|phps)\.?$ - [NC,F]

		# Filter Request Methods - Security > Settings > System Tweaks > Request Methods
		RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK) [NC]
		RewriteRule ^.* - [F]

		# Filter Suspicious Query Strings in the URL - Security > Settings > System Tweaks > Suspicious Query Strings
		RewriteCond %{QUERY_STRING} \.\.\/ [OR]
		RewriteCond %{QUERY_STRING} \.(bash|git|hg|log|svn|swp|cvs) [NC,OR]
		RewriteCond %{QUERY_STRING} etc/passwd [NC,OR]
		RewriteCond %{QUERY_STRING} boot\.ini [NC,OR]
		RewriteCond %{QUERY_STRING} ftp: [NC,OR]
		RewriteCond %{QUERY_STRING} https?: [NC,OR]
		RewriteCond %{QUERY_STRING} (<|%3C)script(>|%3E) [NC,OR]
		RewriteCond %{QUERY_STRING} mosConfig_[a-zA-Z_]{1,21}(=|%3D) [NC,OR]
		RewriteCond %{QUERY_STRING} base64_decode\( [NC,OR]
		RewriteCond %{QUERY_STRING} %24&x [NC,OR]
		RewriteCond %{QUERY_STRING} 127\.0 [NC,OR]
		RewriteCond %{QUERY_STRING} (^|\W)(globals|encode|localhost|loopback)($|\W) [NC,OR]
		RewriteCond %{QUERY_STRING} (^|\W)(concat|insert|union|declare)($|\W) [NC,OR]
		RewriteCond %{QUERY_STRING} %[01][0-9A-F] [NC]
		RewriteCond %{QUERY_STRING} !^loggedout=true
		RewriteCond %{QUERY_STRING} !^action=jetpack-sso
		RewriteCond %{QUERY_STRING} !^action=rp
		RewriteCond %{HTTP_COOKIE} !wordpress_logged_in_
		RewriteCond %{HTTP_REFERER} !^http://maps\.googleapis\.com
		RewriteRule ^.* - [F]

		# Filter Non-English Characters - Security > Settings > System Tweaks > Non-English Characters
		RewriteCond %{QUERY_STRING} %[A-F][0-9A-F] [NC]
		RewriteRule ^.* - [F]
	</IfModule>
# END iThemes Security - Do not modify or remove this line

# BEGIN WordPress
# The directives (lines) between "BEGIN WordPress" and "END WordPress" are
# dynamically generated, and should only be modified via WordPress filters.
# Any changes to the directives between these markers will be overwritten.
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
RewriteBase /
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>

# END WordPress

# BEGIN cPanel-generated php ini directives, do not edit
# Manual editing of this file may result in unexpected behavior.
# To make changes to this file, use the cPanel MultiPHP INI Editor (Home >> Software >> MultiPHP INI Editor)
# For more information, read our documentation (https://go.cpanel.net/EA4ModifyINI)
<IfModule php7_module>
   php_flag display_errors Off
   php_value max_execution_time 300
   php_value max_input_time 600
   php_value max_input_vars 1000
   php_value memory_limit 256M
   php_value post_max_size 64M
   php_value session.gc_maxlifetime 1440
   php_value session.save_path "/var/cpanel/php/sessions/ea-php71"
   php_value upload_max_filesize 64M
   php_flag zlib.output_compression On
</IfModule>
<IfModule lsapi_module>
   php_flag display_errors Off
   php_value max_execution_time 300
   php_value max_input_time 600
   php_value max_input_vars 1000
   php_value memory_limit 256M
   php_value post_max_size 64M
   php_value session.gc_maxlifetime 1440
   php_value session.save_path "/var/cpanel/php/sessions/ea-php71"
   php_value upload_max_filesize 64M
   php_flag zlib.output_compression On
</IfModule>
# END cPanel-generated php ini directives, do not edit
