{"id":702,"date":"2017-07-11T11:22:07","date_gmt":"2017-07-11T04:22:07","guid":{"rendered":"https:\/\/vannamit.com\/?p=702"},"modified":"2017-07-11T11:22:07","modified_gmt":"2017-07-11T04:22:07","slug":"thu-thuat-voi-file-htaccess-trong-wordpress","status":"publish","type":"post","link":"https:\/\/khowordpress.com\/vannamit\/thu-thuat-voi-file-htaccess-trong-wordpress\/","title":{"rendered":"Th\u1ee7 thu\u1eadt v\u1edbi file .htaccess trong WordPress"},"content":{"rendered":"<p>T\u1eadp tin\u00a0<em>.<strong>htaccess<\/strong><\/em><strong>\u00a0<\/strong>l\u00e0 m\u1ed9t t\u1eadp tin c\u1ea5u h\u00ecnh, cho ph\u00e9p b\u1ea1n ki\u1ec3m so\u00e1t c\u00e1c t\u1eadp tin v\u00e0 th\u01b0 m\u1ee5c trong directory v\u00e0 t\u1ea5t c\u1ea3 c\u00e1c th\u01b0 m\u1ee5c con c\u1ee7a ch\u00fang. T\u00ean c\u1ee7a n\u00f3 \u0111\u01b0\u1ee3c vi\u1ebft t\u1eaft t\u1eeb ch\u1eef\u00a0<em>hypertext access<\/em>\u00a0v\u00e0 \u0111\u01b0\u1ee3c h\u1ed7 tr\u1ee3 b\u1edfi h\u1ea7u h\u1ebft c\u00e1c lo\u1ea1i m\u00e1y ch\u1ee7.<\/p>\n<p>\u0110\u1ed1i v\u1edbi nhi\u1ec1u ng\u01b0\u1eddi d\u00f9ng\u00a0<em>WordPress<\/em>, l\u1ea7n \u0111\u1ea7u ti\u00ean l\u00e0m quen v\u1edbi t\u1eadp tin\u00a0<em>.htaccess<\/em>\u00a0l\u00e0 khi h\u1ecd t\u00f9y ch\u1ec9nh c\u00e1c thi\u1ebft l\u1eadp\u00a0<em>permalink<\/em>\u00a0c\u1ee7a blog\/website.<\/p>\n<pre># BEGIN WordPress\n&lt;IfModule mod_rewrite.c&gt;\nRewriteEngine On\nRewriteBase \/\nRewriteRule ^index\\.php$ - [L]\nRewriteCond %{REQUEST_FILENAME} !-f\nRewriteCond %{REQUEST_FILENAME} !-d\nRewriteRule . \/index.php [L]\n&lt;\/IfModule&gt;\n# END WordPress<\/pre>\n<h2>T\u1ed5ng h\u1ee3p th\u1ee7 thu\u1eadt v\u1edbi file .htaccess<\/h2>\n<h3>1. B\u1ea3o v\u1ec7 t\u1eadp tin .htaccess<\/h3>\n<p>T\u1eadp tin\u00a0<em>.htaccess<\/em>\u00a0ki\u1ec3m so\u00e1t h\u1ea7u nh\u01b0 to\u00e0n b\u1ed9 blog\/website\u00a0c\u1ee7a b\u1ea1n n\u00ean vi\u1ec7c b\u1ea3o v\u1ec7 n\u00f3 kh\u1ecfi s\u1ef1 x\u00e2m nh\u1eadp tr\u00e1i ph\u00e9p l\u00e0 m\u1ed9t vi\u1ec7c r\u1ea5t quan tr\u1ecdng. \u0110o\u1ea1n m\u00e3 sau \u0111\u00e2y s\u1ebd gi\u00fap ng\u0103n ch\u1eb7n hacker truy c\u1eadp v\u00e0o t\u1eadp tin\u00a0<em>.htaccess<\/em>\u00a0c\u1ee7a b\u1ea1n.<\/p>\n<pre>&lt;files ~ \"^.*\\.([Hh][Tt][Aa])\"&gt;\norder allow,deny\ndeny from all\nsatisfy all\n&lt;\/files&gt;<\/pre>\n<h3>2. B\u1ea3o v\u1ec7 t\u1eadp tin wp-config.php<\/h3>\n<p>M\u1ed9t t\u1eadp tin quan tr\u1ecdng kh\u00f4ng k\u00e9m l\u00e0\u00a0<em>wp-config.php<\/em>. T\u1eadp tin c\u1ea5u h\u00ecnh n\u00e0y ch\u1ee9a c\u00e1c th\u00f4ng tin \u0111\u0103ng nh\u1eadp c\u01a1 s\u1edf d\u1eef li\u1ec7u\u00a0<em>WordPress<\/em>\u00a0c\u1ee7a b\u1ea1n c\u0169ng nh\u01b0 c\u00e1c thi\u1ebft l\u1eadp b\u1ea3o tr\u00ec\u00a0quan tr\u1ecdng kh\u00e1c. Do \u0111\u00f3, b\u1ea1n n\u00ean v\u00f4 hi\u1ec7u h\u00f3a vi\u1ec7c ng\u01b0\u1eddi l\u1ea1 truy c\u1eadp v\u00e0o n\u00f3<\/p>\n<pre>&lt;files wp-config.php&gt;\norder allow,deny\ndeny from all\n&lt;\/files&gt;<\/pre>\n<h3>3. B\u1ea3o v\u1ec7 th\u01b0 m\u1ee5c wp-content<\/h3>\n<p>Th\u01b0 m\u1ee5c\u00a0<em>wp-content<\/em>\u00a0l\u00e0 m\u1ed9t trong nh\u1eefng khu\u00a0v\u1ef1c quan tr\u1ecdng nh\u1ea5t c\u1ee7a\u00a0<em>WordPress<\/em>. \u0110\u00e2y l\u00e0 n\u01a1i ch\u1ee9a c\u00e1c t\u1eadp tin quan tr\u1ecdng nh\u01b0\u00a0<em>themes<\/em>,\u00a0<em>plugins<\/em>, c\u00e1c t\u1eadp tin \u0111\u00e3 \u0111\u01b0\u1ee3c upload\u00a0(h\u00ecnh \u1ea3nh v\u00e0 video) v\u00e0 c\u00e1c t\u1eadp tin\u00a0<em>cache<\/em>. Do \u0111\u00f3, n\u00f3 l\u00e0 m\u1ed9t trong nh\u1eefng m\u1ee5c ti\u00eau ch\u00ednh c\u1ee7a tin t\u1eb7c.<\/p>\n<p>B\u1ea1n c\u00f3 th\u1ec3 gi\u1ea3i quy\u1ebft c\u00e1c m\u1ed1i \u0111e d\u1ecda b\u1eb1ng c\u00e1ch t\u1ea1o ra m\u1ed9t t\u1eadp tin\u00a0<em>.htaccess<\/em>\u00a0ri\u00eang cho th\u01b0 m\u1ee5c \/<em>wp-content<\/em>\/\u00a0v\u00e0 th\u00eam \u0111o\u1ea1n m\u00e3 sau v\u00e0o<\/p>\n<pre>Order deny,allow\nDeny from all\n&lt;Files ~ \".(xml|css|jpe?g|png|gif|js)$\"&gt;\nAllow from all\n&lt;\/Files&gt;<\/pre>\n<p>Sau \u0111\u00f3 b\u1ea1n c\u1ea7n ph\u1ea3i upload t\u1eadp tin\u00a0<em>.htacces<\/em>s n\u00e0y v\u00e0o th\u01b0 m\u1ee5c \/wp-content\/. N\u00f3 th\u01b0\u1eddng n\u1eb1m \u1edf \u0111\u01b0\u1eddng d\u1eabn:\u00a0<em>www.yourwebsite.com\/wp-content\/<\/em>. Vi\u1ec7c l\u00e0m n\u00e0y s\u1ebd cho ph\u00e9p c\u00e1c t\u1eadp tin media \u0111\u01b0\u1ee3c t\u1ea3i l\u00ean bao g\u1ed3m\u00a0<em>XML, CSS, JPG, JPEG, PNG, GIF,<\/em>\u00a0v\u00e0\u00a0<em>Javascript<\/em>. T\u1ea5t c\u1ea3 c\u00e1c lo\u1ea1i t\u1eadp tin kh\u00e1c s\u1ebd b\u1ecb t\u1eeb ch\u1ed1i.<\/p>\n<h3>4. H\u1ea1n ch\u1ebf truy c\u1eadp khu v\u1ef1c Admin<\/h3>\n<p>M\u1ed9t \u0111i\u1ec3m th\u01b0\u1eddng b\u1ecb t\u1ea5n c\u00f4ng b\u1edfi\u00a0c\u00e1c tin t\u1eb7c l\u00e0 khu v\u1ef1c Admin (qu\u1ea3n tr\u1ecb)\u00a0<em>WordPress<\/em>. N\u1ebfu truy c\u1eadp \u0111\u01b0\u1ee3c v\u00e0o khu v\u1ef1c n\u00e0y, ch\u00fang c\u00f3 th\u1ec3 l\u00e0m h\u1ea7u h\u1ebft m\u1ecdi th\u1ee9 tr\u00ean blog\/website c\u1ee7a b\u1ea1n.<\/p>\n<p>\u0110\u1ec3 l\u00e0m cho khu v\u1ef1c n\u00e0y an to\u00e0n h\u01a1n, b\u1ea1n c\u1ea7n t\u1ea1o ra m\u1ed9t t\u1eadp tin\u00a0<em>.htaccess<\/em>\u00a0m\u1edbi cho ri\u00eang n\u00f3 v\u00e0 th\u00eam \u0111o\u1ea1n m\u00e3 d\u01b0\u1edbi \u0111\u00e2y v\u00e0o:<\/p>\n<pre># Limit logins and admin by IP\n&lt;Limit GET POST PUT&gt;\norder deny,allow\ndeny from all\nallow from 12.34.56.78\n&lt;\/Limit&gt;<\/pre>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>T\u1eadp tin\u00a0.htaccess\u00a0l\u00e0 m\u1ed9t t\u1eadp tin c\u1ea5u h\u00ecnh, cho ph\u00e9p b\u1ea1n ki\u1ec3m so\u00e1t c\u00e1c t\u1eadp tin v\u00e0 th\u01b0 m\u1ee5c trong directory v\u00e0 t\u1ea5t c\u1ea3 c\u00e1c th\u01b0&#8230;<\/p>\n","protected":false},"author":1,"featured_media":704,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9],"tags":[],"class_list":["post-702","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-wordpress"],"_links":{"self":[{"href":"https:\/\/khowordpress.com\/vannamit\/wp-json\/wp\/v2\/posts\/702","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/khowordpress.com\/vannamit\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/khowordpress.com\/vannamit\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/khowordpress.com\/vannamit\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/khowordpress.com\/vannamit\/wp-json\/wp\/v2\/comments?post=702"}],"version-history":[{"count":0,"href":"https:\/\/khowordpress.com\/vannamit\/wp-json\/wp\/v2\/posts\/702\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/khowordpress.com\/vannamit\/wp-json\/wp\/v2\/media\/704"}],"wp:attachment":[{"href":"https:\/\/khowordpress.com\/vannamit\/wp-json\/wp\/v2\/media?parent=702"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/khowordpress.com\/vannamit\/wp-json\/wp\/v2\/categories?post=702"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/khowordpress.com\/vannamit\/wp-json\/wp\/v2\/tags?post=702"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}