# Extra Security Headers
Options -Indexes

<IfModule mod_headers.c>
  #Header set Content-Security-Policy: "frame-ancestors 'self' playgamenation.com *.playgamenation.c>
  #Header set X-Content-Type-Options nosniff
  #Header set X-XSS-Protection "1; mode=block"
  ##Header always append X-Frame-Options ALLOWALL
  #Header always set X-Frame-Options "sameorigin"
  #Header set Strict-Transport-Security "max-age=10886400; includeSubDomains; preload"
  #Header set Permissions-Policy "geolocation=self"
  #Header set X-Frame-Options "SAMEORIGIN"
</IfModule>

# proteger wpconfig.php
#<files wp-config.php>
#order allow,deny
#deny from all
#</files>
# proteger htaccess
#<files .htaccess>
#order allow,deny
#deny from all
#</files>
# Block WordPress xmlrpc.php requests
#<Files xmlrpc.php>
#order deny,allow
#deny from all
#</Files>

# BEGIN rlrssslReallySimpleSSL rsssl_version[3.3.5]
<IfModule mod_rewrite.c>
        RewriteEngine on
        RewriteCond %{HTTP:X-Forwarded-Proto} !https
        RewriteRule ^(.*)$ https://%{HTTP_HOST}/$1 [R=301,L]
</IfModule>

# BEGIN WordPress
# Las directivas (líneas) entre «BEGIN WordPress» y «END WordPress» son
# generadas dinámicamente y solo deberían ser modificadas mediante filtros de WordPress.
# Cualquier cambio en las directivas que hay entre esos marcadores serán sobrescritas.
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
RewriteBase /
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>

# END WordPress