◈Section 4 of 6
Recommended Configuration
Best practices for Nginx/Apache directives, Wordfence bridges, 2FA, and staging environments.
Server Directives (Apache vs Nginx)
GeniousSonu Site Checkup detects your server software automatically:
- Apache / LiteSpeed: Security headers and file protection rules are applied directly into
.htaccessusing isolated, managed marker blocks. - Nginx: Because Nginx does not read
.htaccessfiles, the plugin marks those tasks as "Server Directive Required" and offers a View Nginx Snippet modal with copyable directives for yournginx.confserver block.
# Example Nginx Server Directives generated by plugin
location ~* /(?:uploads|files)/.*\.php$ { deny all; }
location = /xmlrpc.php { deny all; }
add_header X-Frame-Options "SAMEORIGIN" always;
add_header X-Content-Type-Options "nosniff" always;
location ~* /(?:uploads|files)/.*\.php$ { deny all; }
location = /xmlrpc.php { deny all; }
add_header X-Frame-Options "SAMEORIGIN" always;
add_header X-Content-Type-Options "nosniff" always;
Third-Party Integrations & Bridges
For high-stakes security layers, GeniousSonu Site Checkup bridges to mature, specialized tools:
- Wordfence: Checks firewall rules, brute-force limits, and email alert routing.
- Two-Factor Authentication (2FA): Verifies mandatory 2FA enforcement for all admin accounts.
- WPS Hide Login: Inspects custom login URL configurations.
- security.txt (RFC 9116): Generates
/.well-known/security.txtfor responsible disclosure.
Staging Site Protection
On staging URLs, ensure HTTP Basic Authentication is active. GeniousSonu Site Checkup detects staging walls and only flags loopback issues on true 5xx server errors, preventing false-positive reverts during automated tests.