#This Apache config file was created by Duplicator Installer on 2020-09-08 20:05:54.
#The original can be found in archived file with the name .htaccess__[HASH]
# BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteEngine On 
RewriteCond %{SERVER_PORT} 80 
RewriteRule ^(.*)$ https://www.sige.ita.br/$1 [R=301,L,NE]
Header always set Content-Security-Policy "upgrade-insecure-requests;"
RewriteBase /
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>
# END WordPress
# Disable directory browsing
Options All -Indexes
# Extra Security Headers
<IfModule mod_headers.c>
        Header set X-XSS-Protection "1; mode=block"
#       Header always append X-Frame-Options SAMEORIGIN
        Header set X-Content-Type-Options nosniff
</IfModule>
# protect wpconfig.php 
<files wp-config.php> 
  order allow,deny 
  deny from all 
</files>
<Files wp-login.php>
Order Deny,Allow
Deny from all
Allow from all
</Files>