How to Protect WordPress Against Malicious URL Requests
| Published 24.04.2012 by | Last modified 19.11.2019 |
This snippet is great for security to protect your WordPress site against malicious URL requests.
Instructions
Add this to your functions.php file.
global $user_ID; if($user_ID) {
if(!current_user_can('administrator')) {
if (strlen($_SERVER['REQUEST_URI']) > 255 ||
stripos($_SERVER['REQUEST_URI'], "eval(") ||
stripos($_SERVER['REQUEST_URI'], "CONCAT") ||
stripos($_SERVER['REQUEST_URI'], "UNION+SELECT") ||
stripos($_SERVER['REQUEST_URI'], "base64")) {
@header("HTTP/1.1 414 Request-URI Too Long");
@header("Status: 414 Request-URI Too Long");
@header("Connection: Close");
@exit;
}
}
}
![WordPress Cache - WP Rocket](https://wpdynamic.com/msrv/wprocket/wprocket-1--3-0-0--2-5-0--wordpress-cache--wp-rocket.jpg" "WordPress Cache - WP Rocket")