HARDENING WP - Add to Site .htaccess file *** REPLACE "YOUR-DOMAIN.COM
<files wp-config.php>
order allow,deny
deny from all
</files>
# directory browsing
Options All -Indexes
RewriteEngine on
RewriteCond %{HTTP_REFERER} !^$
RewriteCond %{HTTP_REFERER} !^http(s)?://(www\.)?your-domain.com [NC]
RewriteRule \.(jpg|jpeg|png|gif)$ - [NC,F,L]