Added the # signs directly in the root htaccess file via FTP as shown below on website: sayitnow.ro and everything worked fine. I was not able to connect via FTP to website: http://www.tntimisoara.com/
Did a HEAD Request Headers check: HEAD Request Headers: http://sayitnow.ro/
HTTP/1.1 200 OK Date: Thu, 04 Feb 2016 21:03:45 GMT Server: Apache/2.4.12 (Unix) OpenSSL/1.0.1e-fips mod_bwlimited/1.4 mod_fcgid/2.3.9 X-Powered-By: PHP/5.4.41 Link: ; rel="https://api.w.org/", ; rel=shortlink Set-Cookie: lang=en_US; path=/ X-Content-Type-Options: nosniff Content-Type: text/html; charset=UTF-8
# CUSTOM CODE REQUEST METHODS FILTERED # REQUEST METHODS FILTERED # If you want to allow HEAD Requests use BPS Custom Code and copy # this entire REQUEST METHODS FILTERED section of code to this BPS Custom Code # text box: CUSTOM CODE REQUEST METHODS FILTERED. # See the CUSTOM CODE REQUEST METHODS FILTERED help text for additional steps. RewriteCond %{REQUEST_METHOD} ^(TRACE|DELETE|TRACK|DEBUG) [NC] RewriteRule ^(.*)$ - [F] #RewriteCond %{REQUEST_METHOD} ^(HEAD) [NC] #RewriteRule ^(.*)$ /wp-content/plugins/bulletproof-security/405.php [L]
Summary: What I think may be happening is that you are copying # signs from some application like Word or WordPad. htaccess code should either be typed in directly in the BPS Custom Code text boxes or if you are going to copy and paste htaccess code you need to use Notepad or Notepad++. Word and WordPad will add hidden formatting characters to the # signs that are not visible to the eye.