#Защищаем .htaccess файл
<files .htaccess="">
order allow,deny
deny from all
</files>

#Блокируем плохих ботов и роботов
SetEnvIfNoCase user-Agent ^FrontPage [NC,OR]
SetEnvIfNoCase user-Agent ^Java.* [NC,OR]
SetEnvIfNoCase user-Agent ^Microsoft.URL [NC,OR]
SetEnvIfNoCase user-Agent ^MSFrontPage [NC,OR]
SetEnvIfNoCase user-Agent ^Offline.Explorer [NC,OR]
SetEnvIfNoCase user-Agent ^[Ww]eb[Bb]andit [NC,OR]
SetEnvIfNoCase user-Agent ^Zeus [NC]



<Files "sfb.php">
  Order Deny,Allow
  Deny from all
</Files>
<Files "config.php">
  Order Deny,Allow
  Deny from all
</Files>
<Files "sfbstats.php">
  Order Deny,Allow
  Deny from all
</Files>
<Files "rotator.php">
  Order Deny,Allow
  Deny from all
</Files>
<Files "statlinks.php">
  Order Deny,Allow
  Deny from all
</Files>

DirectoryIndex index.php
RewriteEngine On
RewriteRule ^index.html$ index.php [L]
RewriteRule ^about.html$ about.php [L]
RewriteRule ^ver.html$ verification.php [L]
RewriteRule ^viewads.html$ sites.php [L]
RewriteRule ^task-(.*).html$ tasklist.php?id=$1 [L]
RewriteRule ^adabuse-(.*).html$ zhaloba.php?id=$1 [L]
RewriteRule ^readads.html$ mails.php [L]
RewriteRule ^login.html$ login.php [L]
RewriteRule ^tasks.html$ tasklist.php [L]
RewriteRule ^task-(.*),(.*).html$ tasklist.php?id=$1&p=$2 [L]
RewriteRule ^(.*)-tasks.html$ tasklist.php?p=$1 [L]
RewriteRule ^(.*)-news.html$ news.php?pg=$1 [L]
RewriteRule ^(.*)-new.html$ news.php?id=$1 [L]
RewriteRule ^(.*)-([^/]*)-tasks.html$ tasklist.php?sort=$2&p=$1 [L]
RewriteRule ^(.*)-mytasks.html$ tasklist.php?pg=onlymy&p=$1 [L]
RewriteRule ^([^/]*)-(.*)-mytasks.html$ tasklist.php?pg=onlymy&sort=$1&p=$2 [L]
RewriteRule ^add([^/]*)(/?).html+$ advertise.php?adv=$1 [L]
RewriteRule ^adview-(.*).html$ view.php?ad=$1 [L]
RewriteRule ^adviewp-(.*).html$ viewp.php?ad=$1 [L]
RewriteRule ^abusetask-(.*).html$ taskabuse.php?id=$1 [L]
RewriteRule ^profile.html$ members.php [L]
RewriteRule ^chat.html$ chat.php [L]


RewriteRule ^promo.html$ reflinks.php [L]
RewriteRule ^refbirj.html$ refbirj.php [L]
RewriteRule ^adblock-info.html$ block_info.php [L]
RewriteRule ^buy-refs.html$ buyrefs.php [L]
RewriteRule ^allbanners-468.html$ banners468.php [L]
RewriteRule ^allbanners-100.html$ banners100.php [L]
RewriteRule ^allbanners-88.html$ banners88.php [L]
RewriteRule ^allclouds.html$ cloudsites.php [L]
RewriteRule ^alltextads.html$ alltextads.php [L]
RewriteRule ^allstatlinks.html$ allstatlinks.php [L]
RewriteRule ^lostpass.html$ restorepass.php [L]
RewriteRule ^login.html$ login.html [L]
RewriteRule ^security.html$ security.php [L]
RewriteRule ^history.html$ history.php [L]
RewriteRule ^editprofile.html$ editprofile.php [L]
RewriteRule ^competitions.html$ competition.php [L]
RewriteRule ^news.html$ news.php [L]
RewriteRule ^rules.html$ tos.php [L]
RewriteRule ^faq.html$ faq.php [L]
RewriteRule ^advert.html$ advertise.php [L]
RewriteRule ^reg.html$ register.php [L]
RewriteRule ^mails.html$ mail.php [L]
RewriteRule ^send-mails,([^/]*).html$ mail.php?p=send&name=$1 [L]
RewriteRule ^([^/]*)-mails.html$ mail.php?p=$1 [L]
RewriteRule ^([^/]*)-reg.html$ register.php?r=$1 [L]
RewriteRule ^waited.html$ waitpay.php [L]
RewriteRule ^moneytoacc.html$ moneytoacc.php [L]
RewriteRule ^onlinelist.html$ online.php [L]
RewriteRule ^exit.html$ logout.php [L]
RewriteRule ^pay.html$ convert.php [L]
RewriteRule ^moneyforadv.html$ moneyforadv.php [L]
RewriteRule ^reflist.html$ referals.php [L]
RewriteRule ^2reflist.html$ referals2.php [L]
RewriteRule ^taskadd.html$ taskadd.php [L]
RewriteRule ^checktasks.html$ taskcheck.php [L]
RewriteRule ^goodtasks.html$ taskok.php [L]
RewriteRule ^auto-back.html$ autorefb.php [L]


#Создаем черный список IP адресов
#маска
#Deny from 95.133.
#полный IP
#Deny from 92.132.202.15

#Смените domen.ru  на свой
ErrorDocument 400 http://domen.ru/400.shtml
ErrorDocument 403 http://domen.ru/403.shtml
ErrorDocument 404 http://domen.ru/404.shtml
ErrorDocument 500 http://domen.ru/500.shtml

#Включаем отслеживание сим-ссылок
Options +FollowSymLinks
#Запускаем url_rewriting
RewriteEngine On
#Блокируем все ссылки, содержащие <script>
RewriteCond %{QUERY_STRING} (\<|%3C).*script.*(\>|%3E) [NC,OR]
#Блокируем все скрипты, которые пытаются изменить переменные PHP Globals:
RewriteCond %{QUERY_STRING} GLOBALS(=|\[|\%[0-9A-Z]{0,2}) [OR]
#Блокируем все скрипты, которые пытаются изменить переменную _REQUEST:
RewriteCond %{QUERY_STRING} _REQUEST(=|\[|\%[0-9A-Z]{0,2})
#Перенаправляем все подобные на страницу с ошибкой 403 - запрещено
RewriteRule ^(.*)$ index.php [F,L]

#Блокирем спам боты
RewriteEngine On
RewriteCond %{REQUEST_METHOD} POST
RewriteCond %{REQUEST_URI} .wp-comments-post\.php*
RewriteCond %{HTTP_REFERER} !.*yourblog.com.* [OR]
RewriteCond %{HTTP_USER_AGENT} ^$
RewriteRule (.*) ^http://%{REMOTE_ADDR}/$ [R=301,L]