usminfoserv

Using IF/ELSE could work if you want to enumerate all sites where it could be used (we have four environments currently).

My solution is below, but it requires putting a file outside of all of the web roots, which might not be something feasible for WordFence to do:

# cat .htaccess

# BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index\.php$ – [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>

# END WordPress

# Wordfence WAF
<IfModule mod_php5.c>
php_value auto_prepend_file ‘/usr/local/wordfence/wordfence-waf.php’
</IfModule>
<Files “.user.ini”>
<IfModule mod_authz_core.c>
Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
Order deny,allow
Deny from all
</IfModule>
</Files>

# END Wordfence WAF

# cat /usr/local/wordfence/wordfence-waf.php

<?php
// Before removing this file, please verify the PHP ini setting auto_prepend_file does not point to this.

if (file_exists($_SERVER[‘DOCUMENT_ROOT’] . ‘/wp-content/plugins/wordfence/waf/bootstrap.php’)) {
define(“WFWAF_LOG_PATH”, $_SERVER[‘DOCUMENT_ROOT’] . ‘/wp-content/wflogs/’);
include_once $_SERVER[‘DOCUMENT_ROOT’] . ‘/wp-content/plugins/wordfence/waf/bootstrap.php’;
}
?>