Reply To: Execute PHP in /wp-content/uploads/

BPS free does not come with an uploads .htaccess file that protects the uploads folder from PHP code/file execution, but BPS Pro does: Uploads Anti-Exploit Guard (UAEG) and has an additional htaccess File Editor window for editing the UAEG htaccess file.  You can use this code below to manually create an .htaccess file for the uploads folder.

# Forbid .php files: example.php, example.PHP, example.php.jpg, example.PHP.jpg
<FilesMatch "\.(php|PHP|\.+(php)|\.+(PHP)).*$">
Order Deny,Allow
Deny from all
</FilesMatch>

• This reply was modified 23 hours, 19 minutes ago by  AITpro Admin.
• This reply was modified 23 hours, 19 minutes ago by  AITpro Admin.