Block 404 on .php

What It Does

When someone requests a PHP file that doesn't exist, your server returns a 404 error. However, these requests can indicate scanning or reconnaissance attempts by attackers. This module blocks these requests to prevent attackers from discovering information about your file structure.

Why It Matters

Malicious requests and automated attacks are constantly targeting WordPress websites.

By blocking these requests before they reach your site, you protect it from many common attack vectors.

How to Use

Activate this module in the Firewall & GeoIP section of SecuPress settings.

Once activated, the module works automatically and provides protection for your website.

If you encounter any issues after activation, you can temporarily deactivate the module. The module will automatically remove its protection rules when deactivated.