From 9d8d9c9bf36cdebbaaa0ec6da81905ad2b8f79a7 Mon Sep 17 00:00:00 2001
From: bidi47 <bidi@apidemia.com>
Date: Wed, 26 Aug 2026 22:10:40 +0300
Subject: [PATCH] updated .htaccess

Signed-off-by: bidi47 <bidi@apidemia.com>
---
 public/.htaccess | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/public/.htaccess b/public/.htaccess
index 534d4ca..d63f6f7 100644
--- a/public/.htaccess
+++ b/public/.htaccess
@@ -1,4 +1,11 @@
 RewriteEngine On
+
+# Block known spam/probe queries on the root URL -> 404
+RewriteCond %{REQUEST_URI} ^/$
+RewriteCond %{QUERY_STRING} ^post_type=wfacp_checkout$ [OR]
+RewriteCond %{QUERY_STRING} ^rest_route
+RewriteRule ^$ - [R=404,L]
+
 # The following rule allows authentication to work with fast-cgi
 RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
 # The following rule tells Apache that if the requested filename