admin-ajax.php - block htaccess

Question

I need htaccess rewrite to block request if don't have GET=action or POST=action.

If somebody run

 example.com/wp-admin/admin-ajax.php

then he will see error 404.

I think that this should have rewrite could, but I don't know how this work:

  RewriteRule ^wp-admin/admin-ajax.php$ index.php [L,QSA]

The other question is: Why? admin-ajax.php without a registered action returns 0. Why do you want to "block" it? — Nico Martin
– Nico Martin, Commented Apr 2, 2015 at 7:59
if somebody run example.com/wp-admin/admin-ajax.php then it should see 404 error. Only request with param "action" and ajax requests should be acceptance. — unknown
– unknown, Commented Apr 2, 2015 at 9:18

ratoli · Accepted Answer · 2017-04-14 15:07:09Z

5

Is your wp-admin folder protected by .htaccess?

You need a whitelist like this (inside the wp-admin folder):

# Allow access to wp-admin/admin-ajax.php
<Files admin-ajax.php>
    Order allow,deny
    Allow from all
    Satisfy any
</Files>

whitelisted-admin-ajax-htaccess

answered Apr 14, 2017 at 15:07

ratoli

511 silver badge2 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

William Turrell · Accepted Answer · 2015-04-02 10:29:47Z

0

You don't specify why you want to do this, but I can't think of a good reason to.

If you're worried about security (a) don't be, (b) protecting it this way isn't going to help you.

Nor will doing this make any difference to server load.

If it's showing in search results for some reason (not that I've ever seen that happen), just add it to your robots.txt file or use Google Webmaster Tools.

answered Apr 2, 2015 at 10:29

William Turrell

3,3687 gold badges42 silver badges60 bronze badges

Collectives™ on Stack Overflow

admin-ajax.php - block htaccess

2 Answers 2

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related