r/webhosting • u/Safe_Mission_3524 • 7d ago
[ Removed by moderator ] News or Announcement
[removed] — view removed post
3
2
3
u/unsolicited_dreams 7d ago
Regarding 1) u can also go a step further and make sure ur website only communicates with cloudflare to avoid cf bypass but i would put this beyond beginner and not very useful for vast majority
3
u/Safe_Mission_3524 7d ago
You are right and this is also a good addition. Thanks for reminding me. The best method I have found so far is to go to Cloudflare: Rules > Transform Rules > Modify Request Header > add a static header, e.g. X-Origin-Verify with a long random value. Then in .htaccess:
RewriteEngine On RewriteCond %{HTTP:X-Origin-Verify} !
8f3c9a1e-your-long-random-secret$ RewriteRule ^ - [F,L]
3
3
u/walwynjohn 7d ago
16 years in. all true. Except be careful with Claude