Header always set Strict-Transport-Security "max-age=31536000; preload"
Header always set X-Frame-Options DENY
Header always set X-Content-Type-Options nosniff
RewriteCond %{SERVER_PORT} *Removed*
RewriteRule ^(.*)$ https://www.rebootmewithhsct.co.uk/$1 [R,L]

# BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>

# END WordPress


# Wordfence WAF
<Files ".user.ini">
<IfModule mod_authz_core.c>
    Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
    Order deny,allow
    Deny from all
</IfModule>
</Files>

# END Wordfence WAF