{"id":61459,"date":"2024-02-13T07:32:44","date_gmt":"2024-02-13T12:32:44","guid":{"rendered":"https:\/\/memberpress.com\/docs\/understanding-rewrite-rules\/"},"modified":"2024-12-02T11:44:14","modified_gmt":"2024-12-02T16:44:14","slug":"understanding-rewrite-rules","status":"publish","type":"ht_kb","link":"https:\/\/memberpress.com\/fr\/docs\/understanding-rewrite-rules\/","title":{"rendered":"Comprendre les r\u00e8gles de r\u00e9\u00e9criture pour la protection des fichiers"},"content":{"rendered":"\n

Though these instructions are still valid, we have since released the MemberPress Downloads Add-on, so if you are unable to get file protection working with your web server, you might check it out.
Click here to read more about it<\/a>.
\t<\/p>\n\n\n\n

MemberPress<\/em> uses some advanced Apache rewrite rules to protect files not controlled directly by WordPress.\u00a0<\/p>\n\n\n\n

Once your rewrite rules are setup properly a Custom URI rule in MemberPress should be able to protect any file types except:<\/p>\n\n\n\n

php, phtml, jpg, jpeg, gif, css, png, js, ico, svg, woff, ttf and xml<\/code><\/pre>\n\n\n\n
These file types are excluded in order to avoid possible performance issues.<\/p>\n\n\n\n
Here's how you can construct your rewrite rules on various web servers:<\/p>\n\n\n\n
Apache & Litespeed<\/h2>\n\n\n\n
Note:<\/strong> MemberPress disables our custom rewrite rules by default. You may need to got to MemberPress->Settings->General and uncheck the \u201cDisable Rewrite Rules\u201d checkbox then save the changes in order for custom URI rules to work.\u00a0<\/p>\n\n\n\n
Most web hosts offering WordPress are running Apache as their web server. If you're running Apache and your apache user has write access to your document root (which is the most common configuration) then
you shouldn't have to alter your rules at all<\/strong> \u2026 MemberPress should be able to automatically place your rules properly.<\/p>\n\n\n\n
However, if you do need to edit your Apache rewrite rules here is what you'll need to add after WordPress' rules:<\/p>\n\n\n\n
# BEGIN MemberPress Rules\n\n\nRewriteCond %{HTTP_COOKIE} mplk=([a-zA-Z0-9]+)\nRewriteCond \/var\/www\/somesite.com\/wp-content\/uploads\/mepr\/rules\/%1 -f\nRewriteRule ^(.*)$ - [L]\n\nRewriteCond %{REQUEST_URI} !^\/(wp-admin|wp-includes|wp-content\/plugins|wp-content\/themes)\nRewriteCond %{REQUEST_URI} \\.(zip|gz|tar|rar|doc|docx|xls|xlsx|xlsm|pdf|mp4|m4v|mp3|ts|key|m3u8|ZIP|GZ|TAR|RAR|DOC|DOCX|XLS|XLSX|XLSM|PDF|MP4|M4V|MP3|TS|KEY|M3U8)$\nRewriteRule . \/wp-content\/plugins\/memberpress\/lock.php [L]\n\n<\/IfModule>\n# END MemberPress Rules<\/code><\/pre>\n\n\n\n
Note: <\/b>The code should be pasted directly under the # END WordPess<\/code> line in the .htaccess file.<\/p>\n\n\n\n
Note:\u00a0<\/strong>You will need to make sure you replace \/var\/www\/somesite.com\/<\/strong> with your actual docroot path.<\/p>\n\n\n\n
Nginx<\/h2>\n\n\n\n
MemberPress
does not officially support<\/strong> Nginx as a web-server. However,\u00a0you may<\/em>\u00a0have luck getting your webhost support team to implement one of the following for you.<\/p>\n\n\n\n
Nginx as an Apache Proxy<\/h3>\n\n\n\n
If your webhost uses Nginx as a proxy (in front of) for Apache:<\/p>\n\n\n\n
location ~* \\.(zip|gz|tar|rar|doc|docx|xls|xlsx|xlsm|pdf|mp4|m4v|mp3|ts|key|m3u8)$ {\n  proxy_pass http:\/\/localhost:PORT_HERE;\n}<\/code><\/pre>\n\n\n\n
Note: <\/strong>The PORT_HERE<\/strong>\u00a0part will need to be changed, your host should know the correct port # for apache.<\/p>\n\n\n\n
Nginx as a Standalone Webserver<\/h3>\n\n\n\n
If you're using only Nginx as the web-server, you might have success with the following location block in your Nginx configuration file:<\/p>\n\n\n\n
        location ~* \\.(zip|gz|tar|rar|doc|docx|xls|xlsx|xlsm|pdf|mp4|m4v|mp3|ts|key|m3u8)$ {\n                # Setup lock variables\n                set $mplk_uri \"\/wp-content\/plugins\/memberpress\/lock.php\";\n                set $mplk_file \"\/var\/www\/html\/wp-content\/uploads\/mepr\/rules\/${cookie_mplk}\";\n\n                # don't lock the lock uri\n                if ($uri ~* \"^\/(wp-admin|wp-includes|wp-content\/plugins|wp-content\/themes)\") { break; }\n\n                # redirect if the lock file's a dir or doesn't exist\n                if (-d $mplk_file) { rewrite ^ $mplk_uri last; }\n                if (!-e $mplk_file) { rewrite ^ $mplk_uri last; }\n        }<\/code><\/pre>\n\n\n\n
If the above does not work (especially if you are on Flywheel Cloud Hosting) try the version below instead:<\/p>\n\n\n\n
\tlocation ~ ^\/wp-content\/plugins\/memberpress\/lock.php { include fastcgi.conf; }
\n\tlocation ~* \\.(zip|gz|tar|rar|doc|docx|xls|xlsx|xlsm|pdf|mp4|m4v|mp3|ts|key|m3u8)$ {
\n\t       # Setup lock variables
\n       \t       set $mplk_uri \"\/wp-content\/plugins\/memberpress\/lock.php\";
\n\t       set $mplk_file \"$document_root\/wp-content\/uploads\/mepr\/rules\/${cookie_mplk}\";
\n\t       # don't lock the lock uri
\n\t       if ($uri ~* \"^\/(wp-admin|wp-includes|wp-content\/plugins|wp-content\/themes)\") { break; }
\n\t       # redirect if the lock file's a dir or doesn't exist
\n\t       if (-d $mplk_file) { rewrite ^ $mplk_uri last; }
\n\t       if (!-e $mplk_file) { rewrite ^ $mplk_uri last; }
\n\t}<\/code><\/pre>\n\n\n\n
Note:\u00a0<\/strong>You would need to alter the \/var\/www\/html\/<\/strong> portion of the path in the line below, to match the path to your wordpress installation folder<\/p>\n\n\n\n
IIS, Caddy and other web servers<\/h2>\n\n\n\n
Currently we don't have any supported rules for these web-servers.<\/p>\n","protected":false},"excerpt":{"rendered":"
MemberPress uses some advanced Apache rewrite rules to protect files not controlled directly by WordPress.\u00a0 Once your rewrite rules are setup properly a Custom URI rule in MemberPress should be able to protect any file types except: These file types are excluded in order to avoid possible performance issues. Here\u2019s how you can construct your [\u2026]<\/p>\n","protected":false},"author":62252,"comment_status":"open","ping_status":"closed","template":"","format":"standard","meta":{"_acf_changed":false,"om_disable_all_campaigns":false,"_strive_editorial_status":"not-started","_strive_copy_of":0,"inline_featured_image":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","_FSMCFIC_featured_image_caption":"","_FSMCFIC_featured_image_nocaption":"","_FSMCFIC_featured_image_hide":"","_strive_checklists":"\"\"","_strive_active_checklist":"62291e2bb2422","footnotes":""},"ht-kb-category":[1322],"ht-kb-tag":[1394,1393],"class_list":{"0":"post-61459","1":"ht_kb","2":"type-ht_kb","3":"status-publish","4":"format-standard","6":"ht_kb_category-protecting-content","7":"ht_kb_tag-webhost","8":"ht_kb_tag-webhosting","9":"entry"},"acf":[],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t