AI & cloud
AI crawlers and robots.txt: allow AI search, block training
GPTBot, OAI-SearchBot, ClaudeBot, PerplexityBot and Google-Extended explained, with copy-paste robots.txt rules to keep AI search and opt out of training.
htaccess
Stories and guides about htaccess.
15 articles
WordPress
After a WordPress update breaks your site: use the debug log safely
Critical error after an update? Collect a private WordPress log, interpret the fatal error carefully, isolate the suspected component and clean up safely.
WordPress
WordPress HSTS via .htaccess: Safe Setup, Checks and Rollback
Add HSTS, nosniff and Referrer-Policy on Apache, verify real public responses, understand subdomain scope and prepare a rollback that browsers can receive.
DNS & security
security.txt Setup: Publish and Verify a Working Report Channel
Create security.txt with a real reporting contact and expiry. Check the correct host, plain-text response and file contents, then keep the channel current.
DNS & security
Add a Content-Security-Policy in Report-Only Mode, Safely
Stage report-only CSP on Apache with a working collector; test violations and critical flows before enforcement, with rollback ready.
Web hosting
Set Cache-Control for Static Files in .htaccess
Set browser caching for static assets, keep HTML revalidating, and avoid the WordPress ?ver= trap with a private backup and server-specific checks.
Web hosting
Short Planned Maintenance: HTTP 503 and Retry-After
Configure HTTP 503 maintenance with Retry-After, no-store caching, Apache/Nginx rules, Express middleware, a Cloudflare edge fallback and recovery checks.
WordPress
Harden WordPress Files After the PHP RCE: 6 Checks
Patch PHP first, then audit WordPress permissions and file-editor access. Keep wp-config backups private and apply server rules only after checking your setup.
WordPress
Disable WordPress XML-RPC Safely Without Breaking Apps
Check whether Jetpack or a mobile app needs xmlrpc.php, then block or rate-limit it at the server and verify the response and dependent apps.