.htaccess Gen // Borked.IT

Single Page Redirects

301 Permanent Redirects for individual paths.

Old Path

New URL

Domain Migration

Redirect an entire old domain to a new one.

Old Domain

New Domain

Preserve URI path structure

Canonicalization

WWW Preference

Domain

Force HTTPS (SSL) Also add HSTS header (1 year)

Exclude Paths (Optional)

File Protection

.htaccess/.htpasswd wp-config.php xmlrpc.php .env .git

Custom Files to Block

Bot & Spam Prevention

Enable Referrer Spam Protection

Your Domain

Form Handler Path

Block User Agents

Access Control

Disable Directory Browsing

Disable Script Execution (Dir)

Block IP Addresses (one per line)

Allow ONLY These IPs (whitelist)

Denies everyone except the listed IPs. Use carefully.

Security Headers

X-Frame-Options: SAMEORIGIN (Clickjacking) X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: camera=(), microphone=(), geolocation=()

Hotlink Protection

Enable Protection

Allowed Domains

Protected Extensions

Pipe-separated list of file extensions.

Browser Caching

Images

CSS / JS

Fonts

Documents

Compression

Enable GZIP Compression (mod_deflate) Enable Brotli Compression (mod_brotli)

ETags

Disable ETags (reduces header overhead)

CMS Integration

Add Standard WordPress Routing (Front Controller)

Custom Error Pages

Code

Path

Directory Indexing

URL Formatting

Trailing Slashes

Remove .html extension Remove .php extension

MIME Types

Add custom MIME type associations.

Extension

MIME Type

Maintenance Mode

Enable Maintenance

Maintenance Page Path

Whitelisted IPs (one per line)

Redirect Code

Custom Rewrites

RewriteRule entries with NC,L flags applied.

Regex Source

Target

CORS

Custom Headers

Environment Vars

PHP Settings

Override php.ini values via php_value / php_flag (requires mod_php).

upload_max_filesize

post_max_size

max_execution_time

memory_limit

Disable display_errors (production)

.HTACCESS RULE GENERATOR