FM / admin

/home/u764571690/domains/savitrfoundation.com/public_html/admin/

/home/u764571690/domains/savitrfoundation.com/public_html/admin

Name	Size	Mode	Actions
ajax/	-	0755	rm
assets/	-	0755	rm
build/	-	0755	rm
dist/	-	0755	rm
downloads/	-	0755	rm
inc/	-	0755	rm
pages/	-	0755	rm
plugins/	-	0755	rm
sessions/	-	0755	rm
src/	-	0755	rm
vendor/	-	0755	rm
.htaccess	1301	0644	edit dl rm
donation.php	1033	0644	edit dl rm
index.php	134	0644	edit dl rm
login.php	2483	0644	edit dl rm
login2.php	72	0644	edit dl rm

Edit: /home/u764571690/domains/savitrfoundation.com/public_html/admin/.htaccess (1301B)

# Disable MultiViews to prevent URL conflicts
Options -MultiViews

# Enable Rewrite Engine once (no duplication)
RewriteEngine On

# 1️⃣ Redirect missing image requests to custom 404 page
RewriteCond %{REQUEST_FILENAME} \.(jpe?g|gif|png)$ [NC]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteRule ^ /404 [L]

# 2️⃣ Route all non-existing files/folders to index.php
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^ index.php [L]

# 3️⃣ Force HTTPS and remove "www"
RewriteCond %{HTTPS} off [OR]
RewriteCond %{HTTP_HOST} ^www\. [NC]
RewriteCond %{HTTP_HOST} ^(?:www\.)?(.+)$ [NC]
RewriteRule ^ https://%1%{REQUEST_URI} [L,R=301,NE]

# 4️⃣ Sitemap direct access
RewriteRule ^sitemap\.xml$ sitemap.php [L]

# 5️⃣ Block known bad bots (example patterns)
<IfModule mod_rewrite.c>
RewriteCond %{HTTP_USER_AGENT} (AhrefsBot|MJ12bot|semrushbot|wget|curl|python|libwww) [NC]
RewriteRule .* - [F,L]
</IfModule>

# 6️⃣ Security headers (recommended)
<IfModule mod_headers.c>
Header always set X-Content-Type-Options "nosniff"
Header always set X-XSS-Protection "1; mode=block"
Header always set Referrer-Policy "same-origin"
Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains"
</IfModule>

# Disable MultiViews to prevent URL conflicts Options -MultiViews # Enable Rewrite Engine once (no duplication) RewriteEngine On # 1️⃣ Redirect missing image requests to custom 404 page RewriteCond %{REQUEST_FILENAME} \.(jpe?g|gif|png)$ [NC] RewriteCond %{REQUEST_FILENAME} !-f RewriteRule ^ /404 [L] # 2️⃣ Route all non-existing files/folders to index.php RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteRule ^ index.php [L] # 3️⃣ Force HTTPS and remove "www" RewriteCond %{HTTPS} off [OR] RewriteCond %{HTTP_HOST} ^www\. [NC] RewriteCond %{HTTP_HOST} ^(?:www\.)?(.+)$ [NC] RewriteRule ^ https://%1%{REQUEST_URI} [L,R=301,NE] # 4️⃣ Sitemap direct access RewriteRule ^sitemap\.xml$ sitemap.php [L] # 5️⃣ Block known bad bots (example patterns) RewriteCond %{HTTP_USER_AGENT} (AhrefsBot|MJ12bot|semrushbot|wget|curl|python|libwww) [NC] RewriteRule .* - [F,L] # 6️⃣ Security headers (recommended) Header always set X-Content-Type-Options "nosniff" Header always set X-XSS-Protection "1; mode=block" Header always set Referrer-Policy "same-origin" Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains"