.htaccess Generator

Generate Apache-ready .htaccess rules for WordPress sites with redirect, hardening, and performance presets you can review before deploying.

WordPressSections: 4

Redirects and HTTPS

Security

Performance

Generated .htaccess

# .htaccess generated by GAP3 Tools
# Review every rule and merge with existing project rules carefully.

# Block PHP in uploads
<IfModule mod_rewrite.c>
  RewriteEngine On
  RewriteRule ^wp-content/uploads/.*\.php$ - [F,L]
</IfModule>

# Disable directory browsing
Options -Indexes

# Protect .htaccess
<Files .htaccess>
  Order allow,deny
  Deny from all
</Files>

# Protect wp-config.php
<Files wp-config.php>
  Order allow,deny
  Deny from all
  Satisfy All
</Files>

# WordPress default rules
# BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>
# END WordPress

Swap either the WWW or the non-WWW rule, not both at the same time, and update placeholder domain values before deployment.

Back Up First

Always download and back up the current .htaccess file before replacing it, because a syntax error can break the site instantly.

Merge Carefully

Keep the default WordPress rewrite block intact and layer custom redirects or security rules around it carefully.

Test Immediately

After upload, test the homepage, wp-admin, login flow, and cached assets to confirm all rules behave exactly as expected.