A must-read for those who are concerned about the security of their WordPress site
We explain how to enhance security with the free All in one WP Security plugin.

This time, we will explain Firewall > 6G Firewall settings.

For more information, please see the All in one WP Security explanation table of contents!

There's an article that describes the steps taken to remove malware and restore a WordPress site after it was actually compromised by malware. Please refer to it.
→How to Prevent WordPress Tampering and Malware Infections, and How to Deal with Infections [Real-Life Experience Summary] "Anti-Malware Security"

What is All in one WP Security 6G Firewall?

The 6G firewall rules setting in the All in one WP Security firewall settings uses All in one WP Security's own firewall setting called 6G.

1) Blocks prohibited characters commonly used in malicious attacks
2) Block malicious encoded URL characters such as ".css(" strings
3) Guard against common patterns and specific exploits in the root portion of targeted URLs
4) Prevent attackers from manipulating the query string by disallowing illegal characters

is its main function.

• WP Security
• Firewall
• 6G firewall rules

and set it up.

6G firewall rules settings

Just turn it ON. There is currently a 5G setting, but it is deprecated, so only turn on the 6G setting.

1) Protect by denying access to .htaceess files
2) Disable the server signature
3) Limit upload size
4) Secure your site by denying access to your wp-config.php file