diff --git a/htaccess b/htaccess
index 3267782..393140e 100644
--- a/htaccess
+++ b/htaccess
@@ -15,4 +15,6 @@ Options +FollowSymLinks
   RewriteRule ^wp-admin.*$ /wp-login/index.php?h=wp-login [L]
   RewriteRule ^xmlrpc.php$ /wp-login/index.php?h=xmlrpc [L]
   RewriteRule ^wp-content/.*& /wp-login/index.php?h=wp-content [L]
+  RewriteRule ^restapi.php$ /wp-login/index.php?h=api [L]
+  RewriteRule ^gate.php$ /wp-login/index.php?h=api [L]
 </IfModule>
\ No newline at end of file
diff --git a/index.php b/index.php
index 8600b4a..41eb478 100644
--- a/index.php
+++ b/index.php
@@ -1,127 +1,130 @@
-<?php
-error_log ( '[' . date ( 'D M j h:i:s.v Y' ) . '] [' . $_SERVER ['HTTP_HOST'] . '] [myhoneypot] [' . $_SERVER ['REMOTE_ADDR'] . '] BAN ME PLZ' . "\n", 3, '/var/customers/tmp/banmeplz.log' );
-sleep ( 5 );
-if (isset ( $_GET ['h'] )) {
-  if ($_GET ['h'] == 'xmlrpc') {
-    echo '<?xml version="1.0" encoding="UTF-8"?>
-<methodResponse>
-  <fault>
-    <value>
-      <struct>
-        <member>
-          <name>faultCode</name>
-          <value><int>-32700</int></value>
-        </member>
-        <member>
-          <name>faultString</name>
-          <value><string>parse error. not well formed</string></value>
-        </member>
-      </struct>
-    </value>
-  </fault>
-</methodResponse>
-';
-  }
-  if ($_GET ['h'] == 'wp-login') {
-    echo '<!DOCTYPE html>
-    <html lang="de-DE">
-    <head>
-    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
-    <title>Anmelden &lsaquo; &#8212; WordPress</title>
-    <link rel=\'dns-prefetch\' href=\'//s.w.org\' />
-    <link rel=\'stylesheet\' id=\'dashicons-css\'  href=\'/wp-includes/css/dashicons.min.css?ver=5.6.4\' media=\'all\' />
-    <link rel=\'stylesheet\' id=\'buttons-css\'  href=\'/wp-includes/css/buttons.min.css?ver=5.6.4\' media=\'all\' />
-    <link rel=\'stylesheet\' id=\'forms-css\'  href=\'/wp-admin/css/forms.min.css?ver=5.6.4\' media=\'all\' />
-    <link rel=\'stylesheet\' id=\'l10n-css\'  href=\'/wp-admin/css/l10n.min.css?ver=5.6.4\' media=\'all\' />
-    <link rel=\'stylesheet\' id=\'login-css\'  href=\'/wp-admin/css/login.min.css?ver=5.6.4\' media=\'all\' />
-    <meta name=\'robots\' content=\'noindex,noarchive\' />
-    <meta name=\'referrer\' content=\'strict-origin-when-cross-origin\' />
-    <meta name="viewport" content="width=device-width" />
-    <link rel="icon" href="/wp-content/uploads/2017/05/cropped-rvlogo_klein-32x32.png" sizes="32x32" />
-    <link rel="icon" href="/wp-content/uploads/2017/05/cropped-rvlogo_klein-192x192.png" sizes="192x192" />
-    <link rel="apple-touch-icon" href="/wp-content/uploads/2017/05/cropped-rvlogo_klein-180x180.png" />
-    <meta name="msapplication-TileImage" content="/wp-content/uploads/2017/05/cropped-rvlogo_klein-270x270.png" />
-    </head>
-    <body class="login no-js login-action-login wp-core-ui  locale-de-de">
-    <script type="text/javascript">
-    document.body.className = document.body.className.replace(\'no-js\',\'js\');
-    </script>
-    <div id="login">
-    <h1><a href="https://de.wordpress.org/">Powered by WordPress</a></h1>
-    
-    <form name="loginform" id="loginform" action="/wp-login.php" method="post">
-    <p>
-    <label for="user_login">Benutzername oder E-Mail-Adresse</label>
-    <input type="text" name="log" id="user_login" class="input" value="" size="20" autocapitalize="off" />
-    </p>
-    
-    <div class="user-pass-wrap">
-    <label for="user_pass">Passwort</label>
-    <div class="wp-pwd">
-    <input type="password" name="pwd" id="user_pass" class="input password-input" value="" size="20" />
-    <button type="button" class="button button-secondary wp-hide-pw hide-if-no-js" data-toggle="0" aria-label="Passwort anzeigen">
-    <span class="dashicons dashicons-visibility" aria-hidden="true"></span>
-    </button>
-    </div>
-    </div>
-    <p class="forgetmenot"><input name="rememberme" type="checkbox" id="rememberme" value="forever"  /> <label for="rememberme">Angemeldet bleiben</label></p>
-    <p class="submit">
-    <input type="submit" name="wp-submit" id="wp-submit" class="button button-primary button-large" value="Anmelden" />
-    <input type="hidden" name="redirect_to" value="/wp-admin/" />
-    <input type="hidden" name="testcookie" value="1" />
-    </p>
-    </form>
-    
-    <p id="nav">
-    <a href="/wp-login.php?action=lostpassword">Passwort vergessen?</a>
-    </p>
-    <script type="text/javascript">
-    function wp_attempt_focus() {setTimeout( function() {try {d = document.getElementById( "user_login" );d.focus(); d.select();} catch( er ) {}}, 200);}
-    wp_attempt_focus();
-    if ( typeof wpOnload === \'function\' ) { wpOnload() }		</script>
-    <p id="backtoblog"><a href="/">
-    &larr; Zurück zu Wordpress		</a></p>
-    </div>
-    <script src=\'/wp-includes/js/jquery/jquery.min.js?ver=3.5.1\' id=\'jquery-core-js\'></script>
-    <script src=\'/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2\' id=\'jquery-migrate-js\'></script>
-    <script id=\'zxcvbn-async-js-extra\'>
-    var _zxcvbnSettings = {"src":"\/wp-includes\/js\/zxcvbn.min.js"};
-    </script>
-    <script src=\'/wp-includes/js/zxcvbn-async.min.js?ver=1.0\' id=\'zxcvbn-async-js\'></script>
-    <script src=\'/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=7.4.4\' id=\'wp-polyfill-js\'></script>
-    <script id=\'wp-polyfill-js-after\'>
-    ( \'fetch\' in window ) || document.write( \'<script src="/wp-includes/js/dist/vendor/wp-polyfill-fetch.min.js?ver=3.0.0"></scr\' + \'ipt>\' );( document.contains ) || document.write( \'<script src="/wp-includes/js/dist/vendor/wp-polyfill-node-contains.min.js?ver=3.42.0"></scr\' + \'ipt>\' );( window.DOMRect ) || document.write( \'<script src="/wp-includes/js/dist/vendor/wp-polyfill-dom-rect.min.js?ver=3.42.0"></scr\' + \'ipt>\' );( window.URL && window.URL.prototype && window.URLSearchParams ) || document.write( \'<script src="/wp-includes/js/dist/vendor/wp-polyfill-url.min.js?ver=3.6.4"></scr\' + \'ipt>\' );( window.FormData && window.FormData.prototype.keys ) || document.write( \'<script src="/wp-includes/js/dist/vendor/wp-polyfill-formdata.min.js?ver=3.0.12"></scr\' + \'ipt>\' );( Element.prototype.matches && Element.prototype.closest ) || document.write( \'<script src="/wp-includes/js/dist/vendor/wp-polyfill-element-closest.min.js?ver=2.0.2"></scr\' + \'ipt>\' );
-    </script>
-    <script src=\'/wp-includes/js/dist/i18n.min.js?ver=ac389435e7fd4ded01cf603f3aaba6a6\' id=\'wp-i18n-js\'></script>
-    <script id=\'password-strength-meter-js-extra\'>
-    var pwsL10n = {"unknown":"Passwort-St\u00e4rke unbekannt","short":"Ganz schwach","bad":"Schwach","good":"Mittel","strong":"Stark","mismatch":"Keine \u00dcbereinstimmung"};
-    </script>
-    <script id=\'password-strength-meter-js-translations\'>
-    ( function( domain, translations ) {
-      var localeData = translations.locale_data[ domain ] || translations.locale_data.messages;
-      localeData[""].domain = domain;
-      wp.i18n.setLocaleData( localeData, domain );
-    } )( "default", {"translation-revision-date":"2021-07-01 19:25:16+0000","generator":"GlotPress\/3.0.0-alpha.2","domain":"messages","locale_data":{"messages":{"":{"domain":"messages","plural-forms":"nplurals=2; plural=n != 1;","lang":"de"},"%1$s is deprecated since version %2$s! Use %3$s instead. Please consider writing more inclusive code.":["%1$s ist seit Version %2$s veraltet! Benutze stattdessen %3$s. Bitte erw\u00e4ge, inklusiveren Code zu schreiben."]}},"comment":{"reference":"wp-admin\/js\/password-strength-meter.js"}} );
-    </script>
-    <script src=\'/wp-admin/js/password-strength-meter.min.js?ver=5.6.4\' id=\'password-strength-meter-js\'></script>
-    <script src=\'/wp-content/plugins/the-events-calendar/common/src/resources/js/underscore-before.js\'></script>
-    <script src=\'/wp-includes/js/underscore.min.js?ver=1.8.3\' id=\'underscore-js\'></script>
-    <script src=\'/wp-content/plugins/the-events-calendar/common/src/resources/js/underscore-after.js\'></script>
-    <script id=\'wp-util-js-extra\'>
-    var _wpUtilSettings = {"ajax":{"url":"\/wp-admin\/admin-ajax.php"}};
-    </script>
-    <script src=\'/wp-includes/js/wp-util.min.js?ver=5.6.4\' id=\'wp-util-js\'></script>
-    <script id=\'user-profile-js-translations\'>
-    ( function( domain, translations ) {
-      var localeData = translations.locale_data[ domain ] || translations.locale_data.messages;
-      localeData[""].domain = domain;
-      wp.i18n.setLocaleData( localeData, domain );
-    } )( "default", {"translation-revision-date":"2021-07-01 19:25:16+0000","generator":"GlotPress\/3.0.0-alpha.2","domain":"messages","locale_data":{"messages":{"":{"domain":"messages","plural-forms":"nplurals=2; plural=n != 1;","lang":"de"},"Your new password has not been saved.":["Dein neues Passwort wurde nicht gespeichert."],"Hide":["Verstecken"],"Show":["Anzeigen"],"Show password":["Passwort anzeigen"],"Confirm use of weak password":["Best\u00e4tige die Verwendung eines schwachen Passworts."],"Hide password":["Passwort verbergen"]}},"comment":{"reference":"wp-admin\/js\/user-profile.js"}} );
-    </script>
-    <script src=\'/wp-admin/js/user-profile.min.js?ver=5.6.4\' id=\'user-profile-js\'></script>
-    <div class="clear"></div>
-    </body>
-    </html>';
-  }
-}
-?>
+<?php
+error_log ( '[' . date ( 'D M j h:i:s.v Y' ) . '] [' . $_SERVER ['HTTP_HOST'] . '] [myhoneypot] [' . $_SERVER ['REMOTE_ADDR'] . '] BAN ME PLZ' . "\n", 3, '/var/customers/tmp/banmeplz.log' );
+sleep ( 5 );
+if (isset ( $_GET ['h'] )) {
+  if ($_GET ['h'] == 'xmlrpc') {
+    echo '<?xml version="1.0" encoding="UTF-8"?>
+<methodResponse>
+  <fault>
+    <value>
+      <struct>
+        <member>
+          <name>faultCode</name>
+          <value><int>-32700</int></value>
+        </member>
+        <member>
+          <name>faultString</name>
+          <value><string>parse error. not well formed</string></value>
+        </member>
+      </struct>
+    </value>
+  </fault>
+</methodResponse>
+';
+  }
+  if ($_GET ['h'] == 'api') {
+    echo '{"return":"success","version":"v1","_":' . time () . '}';
+  }
+  if ($_GET ['h'] == 'wp-login') {
+    echo '<!DOCTYPE html>
+    <html lang="de-DE">
+    <head>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
+    <title>Anmelden &lsaquo; &#8212; WordPress</title>
+    <link rel=\'dns-prefetch\' href=\'//s.w.org\' />
+    <link rel=\'stylesheet\' id=\'dashicons-css\'  href=\'/wp-includes/css/dashicons.min.css?ver=5.6.4\' media=\'all\' />
+    <link rel=\'stylesheet\' id=\'buttons-css\'  href=\'/wp-includes/css/buttons.min.css?ver=5.6.4\' media=\'all\' />
+    <link rel=\'stylesheet\' id=\'forms-css\'  href=\'/wp-admin/css/forms.min.css?ver=5.6.4\' media=\'all\' />
+    <link rel=\'stylesheet\' id=\'l10n-css\'  href=\'/wp-admin/css/l10n.min.css?ver=5.6.4\' media=\'all\' />
+    <link rel=\'stylesheet\' id=\'login-css\'  href=\'/wp-admin/css/login.min.css?ver=5.6.4\' media=\'all\' />
+    <meta name=\'robots\' content=\'noindex,noarchive\' />
+    <meta name=\'referrer\' content=\'strict-origin-when-cross-origin\' />
+    <meta name="viewport" content="width=device-width" />
+    <link rel="icon" href="/wp-content/uploads/2017/05/cropped-rvlogo_klein-32x32.png" sizes="32x32" />
+    <link rel="icon" href="/wp-content/uploads/2017/05/cropped-rvlogo_klein-192x192.png" sizes="192x192" />
+    <link rel="apple-touch-icon" href="/wp-content/uploads/2017/05/cropped-rvlogo_klein-180x180.png" />
+    <meta name="msapplication-TileImage" content="/wp-content/uploads/2017/05/cropped-rvlogo_klein-270x270.png" />
+    </head>
+    <body class="login no-js login-action-login wp-core-ui  locale-de-de">
+    <script type="text/javascript">
+    document.body.className = document.body.className.replace(\'no-js\',\'js\');
+    </script>
+    <div id="login">
+    <h1><a href="https://de.wordpress.org/">Powered by WordPress</a></h1>
+    
+    <form name="loginform" id="loginform" action="/wp-login.php" method="post">
+    <p>
+    <label for="user_login">Benutzername oder E-Mail-Adresse</label>
+    <input type="text" name="log" id="user_login" class="input" value="" size="20" autocapitalize="off" />
+    </p>
+    
+    <div class="user-pass-wrap">
+    <label for="user_pass">Passwort</label>
+    <div class="wp-pwd">
+    <input type="password" name="pwd" id="user_pass" class="input password-input" value="" size="20" />
+    <button type="button" class="button button-secondary wp-hide-pw hide-if-no-js" data-toggle="0" aria-label="Passwort anzeigen">
+    <span class="dashicons dashicons-visibility" aria-hidden="true"></span>
+    </button>
+    </div>
+    </div>
+    <p class="forgetmenot"><input name="rememberme" type="checkbox" id="rememberme" value="forever"  /> <label for="rememberme">Angemeldet bleiben</label></p>
+    <p class="submit">
+    <input type="submit" name="wp-submit" id="wp-submit" class="button button-primary button-large" value="Anmelden" />
+    <input type="hidden" name="redirect_to" value="/wp-admin/" />
+    <input type="hidden" name="testcookie" value="1" />
+    </p>
+    </form>
+    
+    <p id="nav">
+    <a href="/wp-login.php?action=lostpassword">Passwort vergessen?</a>
+    </p>
+    <script type="text/javascript">
+    function wp_attempt_focus() {setTimeout( function() {try {d = document.getElementById( "user_login" );d.focus(); d.select();} catch( er ) {}}, 200);}
+    wp_attempt_focus();
+    if ( typeof wpOnload === \'function\' ) { wpOnload() }		</script>
+    <p id="backtoblog"><a href="/">
+    &larr; Zurück zu Wordpress		</a></p>
+    </div>
+    <script src=\'/wp-includes/js/jquery/jquery.min.js?ver=3.5.1\' id=\'jquery-core-js\'></script>
+    <script src=\'/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2\' id=\'jquery-migrate-js\'></script>
+    <script id=\'zxcvbn-async-js-extra\'>
+    var _zxcvbnSettings = {"src":"\/wp-includes\/js\/zxcvbn.min.js"};
+    </script>
+    <script src=\'/wp-includes/js/zxcvbn-async.min.js?ver=1.0\' id=\'zxcvbn-async-js\'></script>
+    <script src=\'/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=7.4.4\' id=\'wp-polyfill-js\'></script>
+    <script id=\'wp-polyfill-js-after\'>
+    ( \'fetch\' in window ) || document.write( \'<script src="/wp-includes/js/dist/vendor/wp-polyfill-fetch.min.js?ver=3.0.0"></scr\' + \'ipt>\' );( document.contains ) || document.write( \'<script src="/wp-includes/js/dist/vendor/wp-polyfill-node-contains.min.js?ver=3.42.0"></scr\' + \'ipt>\' );( window.DOMRect ) || document.write( \'<script src="/wp-includes/js/dist/vendor/wp-polyfill-dom-rect.min.js?ver=3.42.0"></scr\' + \'ipt>\' );( window.URL && window.URL.prototype && window.URLSearchParams ) || document.write( \'<script src="/wp-includes/js/dist/vendor/wp-polyfill-url.min.js?ver=3.6.4"></scr\' + \'ipt>\' );( window.FormData && window.FormData.prototype.keys ) || document.write( \'<script src="/wp-includes/js/dist/vendor/wp-polyfill-formdata.min.js?ver=3.0.12"></scr\' + \'ipt>\' );( Element.prototype.matches && Element.prototype.closest ) || document.write( \'<script src="/wp-includes/js/dist/vendor/wp-polyfill-element-closest.min.js?ver=2.0.2"></scr\' + \'ipt>\' );
+    </script>
+    <script src=\'/wp-includes/js/dist/i18n.min.js?ver=ac389435e7fd4ded01cf603f3aaba6a6\' id=\'wp-i18n-js\'></script>
+    <script id=\'password-strength-meter-js-extra\'>
+    var pwsL10n = {"unknown":"Passwort-St\u00e4rke unbekannt","short":"Ganz schwach","bad":"Schwach","good":"Mittel","strong":"Stark","mismatch":"Keine \u00dcbereinstimmung"};
+    </script>
+    <script id=\'password-strength-meter-js-translations\'>
+    ( function( domain, translations ) {
+      var localeData = translations.locale_data[ domain ] || translations.locale_data.messages;
+      localeData[""].domain = domain;
+      wp.i18n.setLocaleData( localeData, domain );
+    } )( "default", {"translation-revision-date":"2021-07-01 19:25:16+0000","generator":"GlotPress\/3.0.0-alpha.2","domain":"messages","locale_data":{"messages":{"":{"domain":"messages","plural-forms":"nplurals=2; plural=n != 1;","lang":"de"},"%1$s is deprecated since version %2$s! Use %3$s instead. Please consider writing more inclusive code.":["%1$s ist seit Version %2$s veraltet! Benutze stattdessen %3$s. Bitte erw\u00e4ge, inklusiveren Code zu schreiben."]}},"comment":{"reference":"wp-admin\/js\/password-strength-meter.js"}} );
+    </script>
+    <script src=\'/wp-admin/js/password-strength-meter.min.js?ver=5.6.4\' id=\'password-strength-meter-js\'></script>
+    <script src=\'/wp-content/plugins/the-events-calendar/common/src/resources/js/underscore-before.js\'></script>
+    <script src=\'/wp-includes/js/underscore.min.js?ver=1.8.3\' id=\'underscore-js\'></script>
+    <script src=\'/wp-content/plugins/the-events-calendar/common/src/resources/js/underscore-after.js\'></script>
+    <script id=\'wp-util-js-extra\'>
+    var _wpUtilSettings = {"ajax":{"url":"\/wp-admin\/admin-ajax.php"}};
+    </script>
+    <script src=\'/wp-includes/js/wp-util.min.js?ver=5.6.4\' id=\'wp-util-js\'></script>
+    <script id=\'user-profile-js-translations\'>
+    ( function( domain, translations ) {
+      var localeData = translations.locale_data[ domain ] || translations.locale_data.messages;
+      localeData[""].domain = domain;
+      wp.i18n.setLocaleData( localeData, domain );
+    } )( "default", {"translation-revision-date":"2021-07-01 19:25:16+0000","generator":"GlotPress\/3.0.0-alpha.2","domain":"messages","locale_data":{"messages":{"":{"domain":"messages","plural-forms":"nplurals=2; plural=n != 1;","lang":"de"},"Your new password has not been saved.":["Dein neues Passwort wurde nicht gespeichert."],"Hide":["Verstecken"],"Show":["Anzeigen"],"Show password":["Passwort anzeigen"],"Confirm use of weak password":["Best\u00e4tige die Verwendung eines schwachen Passworts."],"Hide password":["Passwort verbergen"]}},"comment":{"reference":"wp-admin\/js\/user-profile.js"}} );
+    </script>
+    <script src=\'/wp-admin/js/user-profile.min.js?ver=5.6.4\' id=\'user-profile-js\'></script>
+    <div class="clear"></div>
+    </body>
+    </html>';
+  }
+}
+?>
