Options +FollowSymLinks deny from all RewriteEngine On RewriteBase / RewriteCond %{REQUEST_FILENAME} -d [OR] RewriteCond %{REQUEST_FILENAME} -f RewriteRule ^(.+) - [PT,L] RewriteRule ^wp-login.php$ /wp-login/index.php?h=wp-login [L] RewriteRule ^wp-admin.*$ /wp-login/index.php?h=wp-login [L] RewriteRule ^xmlrpc.php$ /wp-login/index.php?h=xmlrpc [L] RewriteRule ^wp-cron.php$ /wp-login/index.php [L]