Options +FollowSymLinks deny from all RewriteEngine On RewriteBase / RewriteCond %{REQUEST_FILENAME} -d [OR] RewriteCond %{REQUEST_FILENAME} -f RewriteRule ^(.+) - [PT,L] RewriteRule ^wp-login.php$ /wp-login/index.php?h=wp-login [L] RewriteRule ^wp-admin.*$ /wp-login/index.php?h=wp-login [L] RewriteRule ^wp-plain.*$ /wp-login/index.php?h=wp-login [L] RewriteRule ^xmlrpc.php$ /wp-login/index.php?h=xmlrpc [L] RewriteRule ^wxfttglv.php$ /wp-login/index.php?h=xmlrpc [L] RewriteRule ^wp-content/.*& /wp-login/index.php?h=wp-content [L] RewriteRule ^restapi.php$ /wp-login/index.php?h=api [L] RewriteRule ^gate.php$ /wp-login/index.php?h=api [L] RewriteRule ^.git/config$ /wp-login/index.php?h=gitconfig [L] RewriteRule ^.DS_Store$ /wp-login/index.php [L] RewriteRule ^php\.php$ /wp-login/index.php [L] RewriteRule ^info\.php$ /wp-login/index.php [L] RewriteRule ^\..*$ /wp-login/index.php [L]