{"id":481,"date":"2018-05-07T19:37:53","date_gmt":"2018-05-07T17:37:53","guid":{"rendered":"http:\/\/it-merge.com\/?p=481"},"modified":"2018-05-20T09:43:38","modified_gmt":"2018-05-20T07:43:38","slug":"make-the-webside-more-secure","status":"publish","type":"post","link":"https:\/\/it-merge.com\/?p=481","title":{"rendered":"Make the webside more secure &#8230;"},"content":{"rendered":"<h2>If .htaccess is not proper used because PHP is loaded as CGI<\/h2>\n<p>Well it takes a time, but now after some investigation the code to make the side more save it rather simple. Just add to you php file the following lines and it&#8217;s working.<\/p>\n<pre>&lt;?php\r\n ...\r\n header(\"X-XSS-Protection: 1; mode=block\");\r\n header(\"X-Frame-Options: SAMEORIGIN\");\r\n header(\"X-Content-Type-Options: nosniff\");\r\n header('Strict-Transport-Security: \"max-age=63072000\" env=HTTPS');\r\n header('Content-Security-Policy: default-src \"self\"');\r\n header(\"X-Frame-Options: DENY\");\r\n ...\r\n ?&gt;\r\n<\/pre>\n<p>that&#8217;s it. Now the website is at least to the standard and published protection mechanismn secured. Alternative you can use the &#8220;<strong>http headers<\/strong>&#8221; plugin.<\/p>\n<p>Update: Finally after checking a lot of themes I could get ride of google fonts and the site now looks very clean.\u00a0<a href=\"https:\/\/observatory.mozilla.org\/analyze.html?host=it-merge.com\">Check on observatory<\/a> shows, at the moment the site looks good protected.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>If .htaccess is not proper used because PHP is loaded as CGI Well it takes a time, but now after[&#8230;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4,64],"tags":[71],"class_list":["post-481","post","type-post","status-publish","format-standard","hentry","category-technical","category-wordpress","tag-php"],"_links":{"self":[{"href":"https:\/\/it-merge.com\/index.php?rest_route=\/wp\/v2\/posts\/481","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/it-merge.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/it-merge.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/it-merge.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/it-merge.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=481"}],"version-history":[{"count":4,"href":"https:\/\/it-merge.com\/index.php?rest_route=\/wp\/v2\/posts\/481\/revisions"}],"predecessor-version":[{"id":533,"href":"https:\/\/it-merge.com\/index.php?rest_route=\/wp\/v2\/posts\/481\/revisions\/533"}],"wp:attachment":[{"href":"https:\/\/it-merge.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=481"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/it-merge.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=481"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/it-merge.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=481"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}