# BEGIN WordPress # The directives (lines) between "BEGIN WordPress" and "END WordPress" are # dynamically generated, and should only be modified via WordPress filters. # Any changes to the directives between these markers will be overwritten. RewriteEngine On RewriteCond %{HTTP_HOST} ^www\.iqon\.com$ [NC] RewriteRule ^$ /index-www-new-redesign.html [L] RewriteCond %{HTTP_HOST} ^iqon\.com$ [NC] RewriteRule ^contact/?$ /index.php?page_id=12 [L,QSA] RewriteRule ^xmlrpc\.php$ - [F,L] RewriteRule ^wp-json/wp/v2/users/? - [F,L] RewriteRule ^readme\.html$ - [F,L] RewriteRule ^license\.txt$ - [F,L] RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}] RewriteBase / RewriteRule ^index\.php$ - [L] RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteRule . /index.php [L] # END WordPress Header always set X-Content-Type-Options "nosniff" Header always set X-Frame-Options "SAMEORIGIN" Header always set Referrer-Policy "strict-origin-when-cross-origin" Header always set Permissions-Policy "camera=(), microphone=(), geolocation=()" Header always set Content-Security-Policy "default-src 'self' https: data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' https: data:; font-src 'self' https: data:; frame-src https:; connect-src 'self' https:; base-uri 'self'; frame-ancestors 'self'; upgrade-insecure-requests" RewriteCond %{HTTP_HOST} ^iqon\.md$ [OR] RewriteCond %{HTTP_HOST} ^www\.iqon\.md$ RewriteRule ^/?$ "https\:\/\/iqon\.com\/" [R=301,L] RewriteCond %{HTTP_HOST} ^iqonrussia\.kz$ [OR] RewriteCond %{HTTP_HOST} ^www\.iqonrussia\.kz$ RewriteRule ^/?$ "https\:\/\/iqon\.com\/" [R=301,L] RewriteCond %{HTTP_HOST} ^iqonrussia\.ru$ [OR] RewriteCond %{HTTP_HOST} ^www\.iqonrussia\.ru$ RewriteRule ^/?$ "https\:\/\/iqon\.com\/" [R=301,L] AuthType Basic AuthName "please use your control panel password" AuthUserFile /var/www/u0012812/data/etc/users Require valid-user