{"id":8911,"date":"2025-09-26T04:24:14","date_gmt":"2025-09-25T19:24:14","guid":{"rendered":"https:\/\/tovigasmaru.co.jp\/?p=8911"},"modified":"2026-02-01T19:12:19","modified_gmt":"2026-02-01T10:12:19","slug":"htaccess%e3%81%8c%e5%8b%9d%e6%89%8b%e3%81%ab%e6%88%bb%e3%82%8b%ef%bc%81wordpress%e6%94%b9%e3%81%96%e3%82%93%e3%81%ae%e5%8e%9f%e5%9b%a0%e3%83%bb%e5%be%a9%e6%97%a7%e3%83%bb%e5%86%8d%e7%99%ba%e9%98%b2","status":"publish","type":"post","link":"https:\/\/tovigasmaru.co.jp\/?p=8911","title":{"rendered":".htaccess\u304c\u52dd\u624b\u306b\u623b\u308b\uff01WordPress\u6539\u3056\u3093\u306e\u539f\u56e0\u30fb\u5fa9\u65e7\u30fb\u518d\u767a\u9632\u6b62"},"content":{"rendered":"
\n
\n\"\"\n
\u4ee3\u8868\u793e\u54e1\u3000\u5ee3\u702c\u9ad8\u4e4b<\/div>\n<\/div>\n
\n<\/span>

\n\u3053\u3093\u306b\u3061\u308f\u3001\u30af\u30bb\u306e\u5f37\u3044\u6620\u50cf\u5236\u4f5c\u4f1a\u793e\u300c\u30c8\u30d3\u30ac\u30b9\u30de\u30eb<\/span>\u300d\u4ee3\u8868\u306e\u5ee3\u702c\u3067\u3059\u3002\u3042\u308b\u671d\u3001\u3046\u3061\u306e\u30b5\u30a4\u30c8\u304c\u7de8\u96c6\u30de\u30f3\u306e\u6c17\u5206\u8ee2\u63db\u307f\u305f\u3044\u306b\u5225\u4e16\u754c\u3078\u30ef\u30fc\u30d7\u3002\u8abf\u3079\u3066\u307f\u308b\u3068\u3001\u72af\u4eba\u306f\u2014\u2014.htaccess\u304c\u52dd\u624b\u306b\u623b\u308b<\/span>\u3068\u3044\u3046\u602a\u5947\u73fe\u8c61\u3067\u3057\u305f\u3002<\/p>\n<\/div>\n<\/span><\/div>\n<\/div>\n\n

index.php\u304c\u4f55\u5ea6\u3067\u3082\u8ee2\u751f<\/span>\u3057\u3001\u30b5\u30fc\u30d0\u30fc\u306e\u5916\u5074\u306b\u306f\u300c.htaccess\uff0fwp-blog-header.php\uff083KB\uff09\uff0fwp-cron.php\uff083KB\uff09<\/span>\u300d\u306e\u4e09\u70b9\u30bb\u30c3\u30c8\u304c\u6f5c\u4f0f\u3002\u6975\u3081\u3064\u3051\u306f\u7ba1\u7406\u8005\u6b04\u306b\u7d1b\u308c\u8fbc\u3093\u3060Al1wpadmin<\/span>\uff08\u30a8\u30eb\u3068\u30a4\u30c1\u306e\u898b\u5206\u3051\u30af\u30a4\u30ba\uff09\u3002\u6620\u753b\u306a\u3089\u7b11\u3048\u308b\u3051\u3069\u3001\u73fe\u5b9f\u306f\u7b11\u3048\u306a\u3044\u3002<\/p>\n

\u305d\u3053\u3067\u6211\u3005\u306f\u3001wp-admin\uff0fwp-includes\u3092\u4e38\u3054\u3068\u5165\u66ff<\/span>\u2192uploads\u3067PHP\u5b9f\u884c\u7981\u6b62<\/span>\u2192\u9375\uff08SALT\uff09\u7dcf\u5165\u66ff<\/span>\u306e\u4e09\u6bb5\u30ab\u30c3\u30c8\u3067\u53cd\u6483\u3002\u3053\u306e\u8a18\u4e8b\u3067\u306f\u300c\u306a\u305c\u98db\u3076\u306e\u304b\u300d\u300c\u3069\u3046\u6b62\u3081\u308b\u304b\u300d\u300c\u4e8c\u5ea6\u3068\u64ae\u308a\u76f4\u3057\uff08\u518d\u611f\u67d3\uff09\u3057\u306a\u3044\u305f\u3081\u306b\u300d\u3092\u3001\u5b9f\u9332\u30d9\u30fc\u30b9\u3067\u30c6\u30f3\u30dd\u3088\u304f<\/span>\u89e3\u8aac\u3057\u307e\u3059\u3002\u6e96\u5099\u3088\u308d\u3057\u3044\uff1f\u672c\u756a\u3001\u3088\u30fc\u3044\u2014\u2014\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\uff01<\/p>\n

\u3053\u3046\u3057\u3066\u4e8b\u4ef6\u306f\u59cb\u307e\u3063\u305f\uff1a\u75c7\u72b6\u30c1\u30a7\u30c3\u30af\uff08\u30ea\u30c0\u30a4\u30ec\u30af\u30c8\uff0f\u30ed\u30b0\u30a4\u30f3\u4e0d\u53ef\uff09<\/h2>\n

\u307e\u305a\u7591\u3046\u3079\u304d\u30b5\u30a4\u30f3\uff08\u201c\u305d\u308c\u3001\u6539\u3056\u3093\u304b\u3082\u201d\u30ea\u30b9\u30c8\uff09<\/h3>\n
    \n
  • \u30c8\u30c3\u30d7\u3084\u7279\u5b9a\u30da\u30fc\u30b8\u3092\u958b\u304f\u3068\u3001\u898b\u77e5\u3089\u306c\u5916\u90e8\u30b5\u30a4\u30c8\u3078\u81ea\u52d5\u30ea\u30c0\u30a4\u30ec\u30af\u30c8<\/strong>\u3055\u308c\u308b\uff08\u6642\u3005\u30fb\u6bce\u56de\u30fb\u7aef\u672b\u306b\u3088\u3063\u3066\u9055\u3046\uff09\u3002<\/li>\n
  • \/wp-login.php<\/code> \u304c\u771f\u3063\u767d\uff0f404\uff0f\u5225\u30b5\u30a4\u30c8\u306b\u98db\u3076\uff08\u7ba1\u7406\u753b\u9762\u306b\u5165\u308c\u306a\u3044\uff09\u3002<\/li>\n
  • .htaccess<\/code> \u3092\u76f4\u3057\u3066\u3082\u6570\u5341\u79d2\u3067\u5143\u306b\u623b\u308b<\/strong>\uff08\u3044\u308f\u3086\u308b\u201c\u5dfb\u304d\u623b\u308a\u201d\uff09\u3002<\/li>\n
  • index.php<\/code> \u304c\u7570\u5e38\u306b\u5927\u304d\u3044<\/strong>\u3001\u3082\u3057\u304f\u306f\u52dd\u624b\u306b\u518d\u751f\u6210\u3055\u308c\u308b\u3002<\/li>\n
  • \u30b5\u30a4\u30c8\u306e\u3069\u3053\u304b\u3067\u82f1\u8a9e\u306e\u201c\u5b89\u5168\u3067\u306f\u3042\u308a\u307e\u305b\u3093\u201d\u201cyour site is hacked\u201d\u7684\u306a\u6587\u8a00\u3084\u602a\u5e83\u544a\u304c\u51fa\u308b\u3002<\/li>\n<\/ul>\n

    \u4e00\u6b21\u5207\u308a\u5206\u3051\uff083\u5206\u3067\u3067\u304d\u308b\u201c\u72af\u4eba\u306f\u8ab0\u3060\u201d\u30c6\u30b9\u30c8\uff09<\/h3>\n
      \n
    1. \u30b7\u30fc\u30af\u30ec\u30c3\u30c8\u30a6\u30a3\u30f3\u30c9\u30a6\uff0b\u5225\u56de\u7dda<\/strong>\u3067\u78ba\u8a8d\uff08\u30b9\u30de\u30db\u306e4G\/5G\u3084\u5225Wi-Fi\uff09\u3002\u30d6\u30e9\u30a6\u30b6\u62e1\u5f35\u3084\u30ad\u30e3\u30c3\u30b7\u30e5\u8981\u56e0\u3092\u9664\u5916\u3002<\/li>\n
    2. URL\u76f4\u53e9\u304d<\/strong>\u3067\u6319\u52d5\u3092\u6bd4\u8f03\uff1a
      \/<\/code>\uff08\u30c8\u30c3\u30d7\uff09\uff0f \/wp-login.php<\/code> \uff0f \/robots.txt<\/code> \uff0f \/sitemap.xml<\/code>
      \u2192 \u30ed\u30b0\u30a4\u30f3\u3060\u3051\u98db\u3076\uff1f\u5168\u90e8\u98db\u3076\uff1f\u3067\u201c.htaccess\u6539\u3056\u3093<\/em>\u201d\u304b\u201c\u30a2\u30d7\u30ea\u5074<\/em>\u201d\u304b\u306e\u898b\u5f53\u304c\u3064\u304d\u307e\u3059\u3002 <\/li>\n
    3. \u66f4\u65b0\u65e5\u6642\u3067\u72af\u884c\u6642\u523b\u3092\u3042\u3076\u308a\u51fa\u3059<\/strong>\uff1a\u30d5\u30a1\u30a4\u30eb\u30de\u30cd\u30fc\u30b8\u30e3\u3067\u4e26\u3079\u66ff\u3048 \u2192 \u540c\u3058\u6642\u523b\u3067\u4e00\u6589\u306b\u5909\u308f\u3063\u3066\u3044\u308b\u30d5\u30a9\u30eb\u30c0\u3092\u30e1\u30e2\u3002<\/li>\n
    4. \u5916\u5074\u30d5\u30a9\u30eb\u30c0<\/strong>\uff08\/mail<\/code>\u3001\/xserver_php<\/code>\u3001\u30a2\u30ab\u30a6\u30f3\u30c8\u76f4\u4e0b\u306a\u3069\uff09\u306b
      .htaccess<\/code>\uff0fwp-blog-header.php(\u7d043KB)<\/code>\uff0fwp-cron.php(\u7d043KB)<\/code>\u306e\u201c\u4e09\u70b9\u30bb\u30c3\u30c8\u201d\u304c\u3044\u306a\u3044\u304b\u30c1\u30a7\u30c3\u30af\u3002<\/li>\n
    5. Google Search Console \u304c\u3042\u308c\u3070\u300c\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u306e\u554f\u984c\u300d<\/strong>\u3092\u78ba\u8a8d\uff08\u8b66\u544a\u304c\u51fa\u308b\u3053\u3068\u304c\u3042\u308a\u307e\u3059\uff09\u3002<\/li>\n<\/ol>\n

      \u201c\u73fe\u5834\u4fdd\u5b58\u201d\u306e\u305f\u3081\u306b\u4eca\u3059\u3050\u3084\u308b\u3053\u3068<\/h3>\n
        \n
      • \u30b9\u30af\u30b7\u30e7<\/strong>\uff1a\u30ea\u30c0\u30a4\u30ec\u30af\u30c8\u5148URL\u3001\u30a8\u30e9\u30fc\u30e1\u30c3\u30bb\u30fc\u30b8\u3001\u66f4\u65b0\u65e5\u6642\u4e00\u89a7\u3092\u64ae\u3063\u3066\u304a\u304f\u3002<\/li>\n
      • \u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u78ba\u4fdd<\/strong>\uff1a\/public_html<\/code> \u3092ZIP\u3067DL\u3001DB\u3092\u30a8\u30af\u30b9\u30dd\u30fc\u30c8\uff08\u306e\u3061\u306e\u6bd4\u8f03\u306b\u5fc5\u9808\uff09\u3002<\/li>\n
      • \u30a2\u30af\u30bb\u30b9\u5236\u9650\u3067\u5c01\u9396<\/strong>\uff08\u4e00\u6642\uff09\uff1a\u30d9\u30fc\u30b7\u30c3\u30af\u8a8d\u8a3c\u3092 \/public_html<\/code> \u306b\u8a2d\u5b9a or \u4e00\u6642\u7684\u306b .htaccess<\/code> \u3092 Require all denied<\/code> \u306b\u3002<\/li>\n<\/ul>\n

        \u3084\u308a\u304c\u3061\u306aNG\uff08\u88ab\u5bb3\u62e1\u5927\u30b9\u30a4\u30c3\u30c1\uff09<\/h3>\n
          \n
        • \u30d7\u30e9\u30b0\u30a4\u30f3\u5927\u91cf\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb<\/strong>\u3067\u201c\u306a\u3093\u3068\u306a\u304f\u201d\u76f4\u305d\u3046\u3068\u3059\u308b\uff08\u539f\u56e0\u304c\u5897\u6b96\u3057\u307e\u3059\uff09\u3002<\/li>\n
        • .htaccess\u3092\u4f55\u5ea6\u3082\u4e0a\u66f8\u304d<\/strong>\u3060\u3051\u3057\u3066\u7d42\u4e86\uff08\u66f8\u304d\u623b\u3057\u306e\u767a\u4fe1\u6e90\u304c\u5916\u5074\u306b\u6b8b\u308b\u3068\u7121\u9650\u30eb\u30fc\u30d7\uff09\u3002<\/li>\n
        • \u7ba1\u7406\u8005\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u5f8c\u56de\u3057<\/strong>\uff08\u5fa9\u65e7\u4e2d\u306b\u307e\u305f\u5165\u3089\u308c\u308b\u3053\u3068\u304c\u3042\u308a\u307e\u3059\uff09\u3002<\/li>\n<\/ul>\n

          \u30d7\u30ed\u3063\u307d\u3044\u78ba\u8a8d\u30e1\u30e2\uff08\u5fc5\u8981\u306a\u3089\uff09<\/h3>\n
            \n
          • \u30b5\u30a4\u30ba\u3067\u9055\u548c\u611f<\/strong>\uff1a\u6b63\u3057\u3044 index.php<\/code> \u306f\u6570\u767e\u30d0\u30a4\u30c8\u7a0b\u5ea6\u3002\u5de8\u5927\u5316\u3057\u3066\u3044\u305f\u3089\u8981\u6ce8\u610f\u3002<\/li>\n
          • .htaccess\u306e\u602a\u6587\u66f8<\/strong>\uff1a<FilesMatch><\/code> \u3067 php\/phtml\/exe\/suspected<\/code> \u3092\u8a31\u53ef\u3057\u3066\u3044\u305f\u3089\u6539\u3056\u3093\u30d1\u30bf\u30fc\u30f3\u3002<\/li>\n
          • \u30ed\u30b0\u30a4\u30f3\u4e0d\u53ef\u306e\u5207\u308a\u5206\u3051<\/strong>\uff1a\/wp-login.php<\/code> \u3060\u3051NG\uff1dWAF\/\u30ea\u30c0\u30a4\u30ec\u30af\u30c8\u7d30\u5de5\u306e\u53ef\u80fd\u6027\u3001\u5168\u30da\u30fc\u30b8NG\uff1d.htaccess or \u30eb\u30fc\u30c8\u6539\u3056\u3093\u306e\u53ef\u80fd\u6027\u9ad8\u3002<\/li>\n<\/ul>\n

            \u6539\u3056\u3093\u306e\u30b5\u30a4\u30f3\uff1a.htaccess\u30fbindex.php\u30fb\u507d\u30d5\u30a1\u30a4\u30eb\u306e\u898b\u5206\u3051\u65b9<\/h2>\n

            \u5371\u967a\u306a .htaccess \u306e\u4f8b\uff08\u898b\u305f\u3089\u5373\u30a2\u30a6\u30c8\uff09<\/h3>\n
              \n
            • <FilesMatch><\/code> \u3067 php<\/code> \/ phtml<\/code> \/ exe<\/code> \/ suspected<\/code> \u306a\u3069\u672c\u6765\u30d6\u30ed\u30c3\u30af\u3059\u3079\u304d\u62e1\u5f35\u5b50\u3092\u8a31\u53ef<\/strong>\u3057\u3066\u3044\u308b\u3002<\/li>\n
            • \u5b58\u5728\u3057\u306a\u3044\u306f\u305a\u306e\u30d5\u30a1\u30a4\u30eb\u540d\u3092\u30d4\u30f3\u30dd\u30a4\u30f3\u30c8\u3067 Allow<\/strong>\uff08\u4f8b\uff1awp-confiq.php<\/code>\u3001wp-crom.php<\/code> \u306a\u3069\u201cq\u201d\u201cm\u201d\u306e\u7f6e\u63db\uff09\u3002<\/li>\n
            • \u3084\u305f\u3089\u9577\u3044\u6b63\u898f\u8868\u73fe<\/strong>\u3084\u5927\u6587\u5b57\u5c0f\u6587\u5b57\u6df7\u5728\u306e\u62e1\u5f35\u5b50\u5217\uff08\u4f8b\uff1aPhp|PHp|pHp\u2026<\/code>\uff09\u3002<\/li>\n
            • \u6a29\u9650\u304c 444\/555 \u56fa\u5b9a<\/strong>\u3067\u7de8\u96c6\u3067\u304d\u306a\u3044\uff08\u30ed\u30c3\u30af\u3057\u3066\u66f8\u304d\u623b\u3057\u306b\u4f7f\u3046\u5178\u578b\uff09\u3002<\/li>\n<\/ul>\n

              \u6b63\u5e38\u306a .htaccess\uff08WordPress \u65e2\u5b9a\uff09\u306f\u4e0b\u8a18\u3060\u3051\u3067\u3059\uff1a<\/p>\n

              <IfModule mod_rewrite.c> RewriteEngine On RewriteBase \/ RewriteRule ^index\\.php$ - [L] RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteRule . \/index.php [L] <\/IfModule> <\/code><\/pre>\n
              index.php \u306e\u5224\u5b9a\uff08\u30b5\u30a4\u30ba\u3068\u4e2d\u8eab\u3067\u5373\u308f\u304b\u308b\uff09<\/h3>\n
                \n
              • \u6b63\u5e38<\/strong>\uff1a\u6570\u767e\u30d0\u30a4\u30c8\u3002\u4e2d\u8eab\u306f\u307b\u307c\u3053\u308c\u3060\u3051\u3002
                 \n
                <?php define('WP_USE_THEMES', true); require __DIR__ . '\/wp-blog-header.php'; <\/code><\/pre>\n<\/li>\n
              • \u6539\u3056\u3093<\/strong>\uff1a\u6570KB\u301c\u6570\u767eKB\u4ee5\u4e0a\u306b\u5de8\u5927\u5316\uff0f\u610f\u5473\u4e0d\u660e\u306a\u96e3\u8aad\uff08base64_decode<\/code>\u30fbeval<\/code>\u30fbgzinflate<\/code> \u306a\u3069\uff09\u304c\u4e26\u3076\uff0f\u52dd\u624b\u306b\u518d\u751f\u6210\u3055\u308c\u308b\u3002<\/li>\n<\/ul>\n
                \u201c\u507d\u30d5\u30a1\u30a4\u30eb\u201d\u306e\u5178\u578b\u3068\u5c45\u5834\u6240<\/h3>\n
                  \n
                • wp-blog-header.php<\/code>\uff08\u7d043KB\uff09\u30fbwp-cron.php<\/code>\uff08\u7d043KB\uff09\u304cpublic_html \u306e\u5916\u5074<\/strong>\uff08\u4f8b\uff1a\/mail\/<\/code>\u3001\/xserver_php\/<\/code>\u3001\u30a2\u30ab\u30a6\u30f3\u30c8\u76f4\u4e0b\uff09\u306b\u51fa\u73fe\u3002<\/li>\n
                • wp-admin<\/code>\u914d\u4e0b\u306e\u30e9\u30f3\u30c0\u30e0\u540d\u306e\u5927\u578bPHP<\/strong>\uff081MB\u524d\u5f8c\uff09\uff0b\u540c\u968e\u5c64\u306e .htaccess(555)<\/code> \u3002<\/li>\n
                • \u30c6\u30fc\u30de\u306e functions.php<\/code> \u672b\u5c3e\u306b\u30e6\u30fc\u30b6\u30fc\u81ea\u52d5\u4f5c\u6210<\/strong>\u3084\u30ea\u30e2\u30fc\u30c8\u5b9f\u884c\u3063\u307d\u3044\u30b3\u30fc\u30c9\uff08wp_insert_user<\/code>\u3001eval<\/code> \u7b49\uff09\u3002<\/li>\n<\/ul>\n
                  \u30c1\u30a7\u30c3\u30af\u306e\u9032\u3081\u65b9\uff083\u5206\u30af\u30a4\u30c3\u30af\u70b9\u691c\uff09<\/h3>\n
                    \n
                  1. \u30eb\u30fc\u30c8\uff08\/public_html<\/code>\uff09\u306e .htaccess<\/code> \u3092\u958b\u304d\u3001\u4e0a\u306e\u300c\u6b63\u5e38\u7248\u300d\u3068\u4e00\u81f4\u3059\u308b\u304b\u78ba\u8a8d\u3002<\/li>\n
                  2. \u30eb\u30fc\u30c8\u306e index.php<\/code> \u306e\u30b5\u30a4\u30ba<\/strong>\u3068\u5148\u982d\u6570\u884c<\/strong>\u3092\u78ba\u8a8d\uff08\u5de8\u5927\u30fb\u96e3\u8aad\u306a\u3089\u30a2\u30a6\u30c8\uff09\u3002<\/li>\n
                  3. \u5916\u5074\u30d5\u30a9\u30eb\u30c0<\/strong>\uff08\/mail\/<\/code>\u3001\/xserver_php\/<\/code>\u3001\u30a2\u30ab\u30a6\u30f3\u30c8\u76f4\u4e0b \u306a\u3069\uff09\u3067
                    \u300c.htaccess<\/code>\uff0fwp-blog-header.php<\/code>\uff0fwp-cron.php<\/code>\u300d\u306e\u4e09\u70b9\u30bb\u30c3\u30c8\u3092\u691c\u7d22\u3002<\/li>\n
                  4. wp-admin\/<\/code> \u76f4\u4e0b\u301c\u4e0b\u5c64\u306b\u4e0d\u5be9\u306a\u5927\u304d\u3044PHP<\/strong>\u3068 .htaccess<\/code> \u304c\u7121\u3044\u304b\u3092\u4e00\u89a7\u30bd\u30fc\u30c8\u3067\u78ba\u8a8d\u3002<\/li>\n<\/ol>\n
                    \u898b\u3064\u3051\u305f\u3089\u3069\u3046\u3059\u308b\uff1f\uff08\u30df\u30cb\u521d\u52d5\uff09<\/h3>\n
                      \n
                    • \u6a29\u9650\u3092 644 \u306b\u5909\u66f4<\/strong>\u3057\u3066\u304b\u3089\u4e0d\u5be9\u30d5\u30a1\u30a4\u30eb\u3092\u524a\u9664\uff08444\/555 \u306e\u307e\u307e\u3067\u306f\u6d88\u305b\u306a\u3044\uff09\u3002<\/li>\n
                    • \u30eb\u30fc\u30c8\u306e .htaccess<\/code> \u306f\u6b63\u5e38\u7248\u306b\u623b\u3057\u3001\u69d8\u5b50\u898b\u5f8c\u306b444\u3067\u30ed\u30c3\u30af<\/strong>\u3002<\/li>\n
                    • \u4f75\u305b\u3066 wp-admin<\/code> \/ wp-includes<\/code> \u306f\u516c\u5f0f\u30d1\u30c3\u30b1\u30fc\u30b8\u3067\u4e38\u3054\u3068\u5165\u66ff<\/strong>\u3092\u524d\u63d0\u306b\u3002<\/li>\n<\/ul>\n
                      \u72af\u4eba\u306f\u201c\u4e09\u70b9\u30bb\u30c3\u30c8\u201d\uff5c\u5916\u5074\u306b\u6f5c\u3080 .htaccess\uff0fwp-blog-header.php\uff0fwp-cron.php<\/code><\/h2>\n
                      \u4e09\u70b9\u30bb\u30c3\u30c8\u3068\u306f\uff1f\uff08\u6b63\u4f53\u3068\u5f79\u5272\uff09<\/h3>\n
                      \u6539\u3056\u3093\u6642\u306bpublic_html\u306e\u5916\u5074<\/strong>\u3078\u3070\u3089\u6492\u304b\u308c\u308b\u3001\u4e0b\u8a18\u306e\u4e0d\u5be9\u30d5\u30a1\u30a4\u30eb\u4e09\u5144\u5f1f\u3067\u3059\u3002<\/p>\n
                        \n
                      • .htaccess<\/code> \u2026 \u5b9f\u884c\u8a31\u53ef\u3084\u30ea\u30c0\u30a4\u30ec\u30af\u30c8\u3092\u4ed5\u8fbc\u307f\u3001\u5fa9\u65e7\u3092\u5dfb\u304d\u623b\u3059<\/strong>\u53f8\u4ee4\u5854\u3002<\/li>\n
                      • wp-blog-header.php<\/code>\uff08\u7d043KB\uff09 \u2026 \u672c\u7269\u3092\u88c5\u3063\u305f\u507d\u30d5\u30a1\u30a4\u30eb<\/strong>\u3002\u5916\u5074\u304b\u3089\u8aad\u307f\u8fbc\u307e\u305b\u308b\u8e0f\u307f\u53f0\u3002<\/li>\n
                      • wp-cron.php<\/code>\uff08\u7d043KB\uff09 \u2026 \u30bf\u30a4\u30de\u30fc\u5f79\u3002\u4e00\u5b9a\u9593\u9694\u3067\u5dfb\u304d\u623b\u3057\u51e6\u7406<\/strong>\u3092\u8d77\u52d5\u3002<\/li>\n<\/ul>\n
                        \u3053\u306e3\u3064\u304c\u5916\u5074\u306b\u751f\u304d\u3066\u3044\u308b\u3068\u3001\u30eb\u30fc\u30c8\u306e .htaccess<\/code> \u3084 index.php<\/code> \u3092\u76f4\u3057\u3066\u3082\u6570\u5341\u79d2\u301c\u6570\u5206\u3067\u518d\u6c5a\u67d3<\/strong>\u3055\u308c\u307e\u3059\u3002<\/p>\n
                        \u3069\u3053\u306b\u6f5c\u3080\uff1f\uff08\u3088\u304f\u3042\u308b\u96a0\u308c\u5bb6\uff09<\/h3>\n
                          \n
                        • \u30a2\u30ab\u30a6\u30f3\u30c8\u76f4\u4e0b\uff08\u4f8b\uff1a\/xs123456.xsrv.jp\/<\/code> \u306e\u76f4\u4e0b\uff09<\/li>\n
                        • \/mail\/<\/code> \u914d\u4e0b\uff08Maildir<\/code>\u3001Maildir.1<\/code> \u306a\u3069\u5404\u30e6\u30fc\u30b6\u30fc\u7bb1\uff09<\/li>\n
                        • \/xserver_php\/<\/code>\u3001\/xserver_php\/session\/<\/code>\u3001\/autoreply\/<\/code><\/li>\n
                        • \/log\/<\/code>\u3001\/htpasswd\/<\/code>\u3001\/script\/<\/code> \u306a\u3069\u7ba1\u7406\u7cfb\u30d5\u30a9\u30eb\u30c0<\/li>\n<\/ul>\n
                          \u76ee\u5370\uff1a<\/strong>\u66f4\u65b0\u65e5\u6642\u304c\u540c\u4e00\uff08\u4f8b\uff1a19:01\u301c19:03\u306b\u96c6\u4e2d\uff09\u3001\u30b5\u30a4\u30ba\u304c\u7d043KB<\/strong>\u3001.htaccess<\/code> \u306e\u6a29\u9650\u304c 444\/555<\/strong> \u56fa\u5b9a\u3002<\/p>\n
                          \u306a\u305c\u5dfb\u304d\u623b\u308b\u306e\u304b\uff08\u4ed5\u7d44\u307f\u306e\u8d85\u8981\u7d04\uff09<\/h3>\n
                            \n
                          1. \u5916\u5074\u306e .htaccess<\/code> \u304c\u8a31\u53ef\u30eb\u30fc\u30eb<\/strong>\u3092\u8a2d\u5b9a\uff08\u5371\u967a\u62e1\u5f35\u5b50\u306e\u5b9f\u884c\u8a31\u53ef\uff09\u3002<\/li>\n
                          2. wp-cron.php<\/code> \u304c\u507d\u7269\u306e wp-blog-header.php<\/code> \u3092\u901a\u3058\u3066\u5b9a\u671f\u5b9f\u884c<\/strong>\u3002<\/li>\n
                          3. \u30eb\u30fc\u30c8\u306e .htaccess<\/code> \u3068 index.php<\/code> \u3092\u4e0a\u66f8\u304d\u518d\u751f\u6210<\/strong> \u2192 \u5fa9\u65e7\u304c\u7121\u52b9\u5316\u3002<\/li>\n<\/ol>\n
                            \u5b89\u5168\u306a\u9664\u53bb\u624b\u9806\uff08\u9806\u756a\u53b3\u5b88\uff09<\/h3>\n
                              \n
                            1. \u30d5\u30a9\u30eb\u30c0\u5358\u4f4d\u3067\u5de1\u56de<\/strong>\uff1a\u4e0a\u306e\u300c\u96a0\u308c\u5bb6\u300d\u3092\u4e00\u3064\u305a\u3064\u958b\u304f\u3002<\/li>\n
                            2. \u6a29\u9650\u89e3\u9664<\/strong>\uff1a\u5404\u30d5\u30a1\u30a4\u30eb\u306e\u30d1\u30fc\u30df\u30c3\u30b7\u30e7\u30f3\u3092 444\/555 \u2192 644<\/strong> \u306b\u3002<\/li>\n
                            3. \u524a\u9664<\/strong>\uff1a.htaccess<\/code>\uff0fwp-blog-header.php<\/code>\uff0fwp-cron.php<\/code> \u3092\u3059\u3079\u3066\u524a\u9664<\/strong>\u3002\u6d88\u305b\u306a\u3051\u308c\u3070 .bad<\/code> \u3078\u30ea\u30cd\u30fc\u30e0\u3002<\/li>\n
                            4. \u30eb\u30fc\u30c8\u6574\u5099<\/strong>\uff1a\/public_html\/.htaccess<\/code> \u3092\u6b63\u5e38\u7248<\/strong>\u3078\u623b\u3057\u3001\u69d8\u5b50\u898b\u306e\u5f8c\u306b 444<\/strong> \u3067\u30ed\u30c3\u30af\u3002
                               \n
                              <IfModule mod_rewrite.c> RewriteEngine On RewriteBase \/ RewriteRule ^index\\.php$ - [L] RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteRule . \/index.php [L] <\/IfModule> <\/code><\/pre>\n<\/li>\n
                            5. \u89b3\u5bdf<\/strong>\uff1a30\u301c60\u79d2\u5f85\u3063\u3066\u3001.htaccess<\/code> \u306e\u81ea\u52d5\u6539\u5909\u304c\u6b62\u307e\u3063\u305f<\/strong>\u3053\u3068\u3092\u78ba\u8a8d\u3002<\/li>\n<\/ol>\n
                              \u6d88\u305b\u306a\u3044\u6642\u306e\u5bfe\u51e6\uff08\u6700\u7d42\u624b\u6bb5\uff09<\/h3>\n
                                \n
                              • \u30d5\u30a9\u30eb\u30c0\u9694\u96e2<\/strong>\uff1a\u89aa\u30d5\u30a9\u30eb\u30c0\u3054\u3068 *.bad<\/code> \u306b\u30ea\u30cd\u30fc\u30e0 \u2192 \u65b0\u898f\u30d5\u30a9\u30eb\u30c0\u3092\u30a2\u30c3\u30d7\u3002<\/li>\n
                              • \u5fa9\u5143\u306e\u7c92\u5ea6\u3092\u843d\u3068\u3059<\/strong>\uff1a\u81ea\u52d5\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u306e\u300c\u5bfe\u8c61\u3092\u6307\u5b9a\u3057\u3066\u5fa9\u5143\u300d\u3067\u8a72\u5f53\u30d5\u30a9\u30eb\u30c0\u306e\u307f\u611f\u67d3\u524d\u65e5\u306b\u623b\u3059\u3002<\/li>\n
                              • \u30b5\u30dd\u30fc\u30c8\u306b\u6a29\u9650\u30ea\u30bb\u30c3\u30c8\u4f9d\u983c<\/strong>\uff1a\u6240\u6709\u8005\/\u6a29\u9650\u4e0d\u6574\u5408\u3067\u524a\u9664\u4e0d\u53ef\u306a\u5834\u5408\u306f\u904b\u55b6\u306b\u89e3\u9664\u4f9d\u983c\u3002<\/li>\n<\/ul>\n
                                \u524a\u9664\u5f8c\u306b\u3084\u308b\u6700\u5c0f\u30bb\u30c3\u30c8\uff08\u518d\u767a\u9632\u6b62\uff09<\/h3>\n
                                  \n
                                • wp-admin\uff0fwp-includes<\/code> \u3092\u516c\u5f0f\u30d1\u30c3\u30b1\u30fc\u30b8\u3067\u4e38\u3054\u3068\u5165\u66ff<\/strong><\/li>\n
                                • wp-content\/uploads\/.htaccess<\/code> \u3092\u4f5c\u6210\u3057PHP\u5b9f\u884c\u7981\u6b62<\/strong><\/li>\n
                                • \u7ba1\u7406\u8005\u30d1\u30b9\u30ef\u30fc\u30c9\u7dcf\u5165\u66ff<\/strong>\uff0bwp-config.php<\/code> \u306e AUTH_KEY\/SALT<\/strong> \u518d\u751f\u6210<\/li>\n<\/ul>\n
                                  wp-admin\u306e\u5730\u4e0b\u5ba4\u3067\u898b\u3064\u3051\u305f\u30a6\u30a7\u30d6\u30b7\u30a7\u30eb\u3068\u507d\u7ba1\u7406\u8005\uff08Al1wpadmin\uff09<\/h2>\n
                                  \u30a6\u30a7\u30d6\u30b7\u30a7\u30eb\u306e\u7279\u5fb4\uff08\u3053\u3053\u3092\u898b\u308c\u3070\u602a\u3057\u3044\uff09<\/h3>\n
                                    \n
                                  • \u30d5\u30a1\u30a4\u30eb\u540d\u304c\u30e9\u30f3\u30c0\u30e0<\/strong>\uff08\u4f8b\uff1aWtXAhWdV.php<\/code> \u306e\u3088\u3046\u306a\u5927\u6587\u5b57\u5c0f\u6587\u5b57\u6df7\u5728\uff09\u3002<\/li>\n
                                  • \u30b5\u30a4\u30ba\u304c\u7570\u5e38<\/strong>\uff081MB\u524d\u5f8c\u306a\u3069\u5de8\u5927\u3002\u901a\u5e38\u306eWP\u7ba1\u7406\u7cfbPHP\u306f\u6570KB\u301c\u6570\u5341KB\uff09\u3002<\/li>\n
                                  • \u540c\u968e\u5c64\u306b.htaccess(555\/444)<\/strong>\u304c\u7f6e\u304b\u308c\u7de8\u96c6\u4e0d\u53ef<\/strong>\u306b\u306a\u3063\u3066\u3044\u308b\u3002<\/li>\n
                                  • \u4e2d\u8eab\u306b base64_decode<\/code> \/ eval<\/code> \/ gzinflate<\/code> \/ str_rot13<\/code> \u306a\u3069\u306e\u300c\u96e3\u8aad\u5316\u95a2\u6570\u300d\u304c\u4e26\u3076\u3002<\/li>\n<\/ul>\n
                                    \u5b89\u5168\u306a\u99c6\u9664\u624b\u9806\uff08wp-admin \u914d\u4e0b\uff09<\/h3>\n
                                      \n
                                    1. \u9694\u96e2<\/strong>\uff1a\/wp-admin<\/code> \u3092 wp-admin.bad<\/code> \u306b\u30ea\u30cd\u30fc\u30e0\uff08\u30d5\u30a9\u30eb\u30c0\u3054\u3068\u9694\u96e2\uff09\u3002<\/li>\n
                                    2. \u6b63\u898f\u54c1\u3067\u7f6e\u63db<\/strong>\uff1aWordPress\u516c\u5f0f\u30d1\u30c3\u30b1\u30fc\u30b8\u304b\u3089\u65b0\u3057\u3044 wp-admin\/<\/code><\/strong> \u3092\u4e38\u3054\u3068\u30a2\u30c3\u30d7\u3002<\/li>\n
                                    3. \u95a2\u9023\u30ed\u30c3\u30af\u89e3\u9664<\/strong>\uff1a\u9694\u96e2\u5148\uff08wp-admin.bad<\/code>\uff09\u5185\u306e\u602a\u3057\u3044 .php<\/code> \u3068 .htaccess<\/code> \u306f 555\u2192644<\/strong> \u306b\u3057\u3066\u304b\u3089\u524a\u9664\u3002<\/li>\n
                                    4. \u30b3\u30a2\u88dc\u5f37<\/strong>\uff1a\u540c\u6642\u306b wp-includes\/<\/code><\/strong> \u3082\u516c\u5f0f\u3067\u4e38\u3054\u3068\u5165\u66ff\u3001\u30eb\u30fc\u30c8\u306e
                                      index.php \/ wp-blog-header.php \/ wp-cron.php \/ wp-load.php \/ wp-settings.php<\/code> \u3092\u4e0a\u66f8\u304d\u3002<\/li>\n<\/ol>\n
                                      \u507d\u7ba1\u7406\u8005\u300cAl1wpadmin\u300d\u306e\u898b\u629c\u304d\u65b9\u3068\u524a\u9664<\/h3>\n
                                        \n
                                      • \u898b\u629c\u304d\u65b9<\/strong>\uff1aAl1wpadmin<\/code>\uff08\u30a8\u30eb\u3068\u30a4\u30c1\u6df7\u5728\uff09\uff0f\u898b\u899a\u3048\u306e\u306a\u3044\u7ba1\u7406\u8005\u30e1\u30fc\u30eb\uff08\u4f8b\uff1aal1wpadmin@gmail.com<\/code>\uff09\u3002<\/li>\n
                                      • UI\u3067\u306e\u524a\u9664\u624b\u9806<\/strong>\uff1a\u30e6\u30fc\u30b6\u30fc\u4e00\u89a7\u2192\u8a72\u5f53\u30e6\u30fc\u30b6\u30fc\u3092\u8cfc\u8aad\u8005<\/strong>\u306b\u5909\u66f4\u2192\u66f4\u65b0\u2192\u524a\u9664<\/strong>\uff08\u6295\u7a3f\u306f\u6b63\u898f\u7ba1\u7406\u8005\u306b\u8b72\u6e21\uff09\u3002<\/li>\n
                                      • SQL\u3067\u306e\u524a\u9664\uff08\u6d88\u3048\u306a\u3044\u5834\u5408\uff09<\/strong>\uff1aphpMyAdmin \u3067ID\u3092\u78ba\u8a8d\u2192wp_usermeta<\/code>\u2192wp_users<\/code> \u306e\u9806\u306b\u524a\u9664\u3002<\/li>\n<\/ul>\n
                                        \u201c\u9375\u306e\u7dcf\u5165\u66ff\u201d\u3067\u5f8c\u59cb\u672b<\/h3>\n
                                          \n
                                        1. \u5168\u7ba1\u7406\u8005\u306e\u30d1\u30b9\u30ef\u30fc\u30c9\u5909\u66f4<\/strong>\uff08\u5f37\u529b\u306a\u30e9\u30f3\u30c0\u30e0\u3078\uff09\u3002<\/li>\n
                                        2. SALT\u518d\u751f\u6210<\/strong>\uff1awp-config.php<\/code> \u306e AUTH_KEY\/SALT<\/em> 8\u884c\u3092\u65b0\u898f\u5024\u3067\u7f6e\u63db\u2192\u5168\u30bb\u30c3\u30b7\u30e7\u30f3\u5f37\u5236\u30ed\u30b0\u30a2\u30a6\u30c8\u3002<\/li>\n
                                        3. \u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u30d1\u30b9\u30ef\u30fc\u30c9<\/strong>\uff08\u30e6\u30fc\u30b6\u30fc\u30d7\u30ed\u30d5\u30a3\u30fc\u30eb\u6700\u4e0b\u90e8\uff09\u3092\u5168\u6d88\u53bb\u3002<\/li>\n
                                        4. \u7ba1\u7406\u7528\u30e1\u30fc\u30eb<\/strong>\uff08\u8a2d\u5b9a\u2192\u4e00\u822c\uff09\u304c\u653b\u6483\u8005\u30a2\u30c9\u30ec\u30b9\u306b\u5909\u308f\u3063\u3066\u3044\u306a\u3044\u304b\u78ba\u8a8d\u3002<\/li>\n<\/ol>\n
                                          \u767a\u898b\u3092\u65e9\u3081\u308b\u30b3\u30c4\uff08\u904b\u7528\u306e\u578b\uff09<\/h3>\n
                                            \n
                                          • \u66f4\u65b0\u65e5\u6642\u30bd\u30fc\u30c8<\/strong>\u3067 wp-admin\/<\/code> \u3068 wp-includes\/<\/code> \u3092\u5b9a\u671f\u5de1\u56de\uff08\u540c\u6642\u523b\u306b\u4e00\u6589\u66f4\u65b0\u306f\u8981\u6ce8\u610f\uff09\u3002<\/li>\n
                                          • \u30c6\u30fc\u30de\u306e functions.php<\/code><\/strong> \u3084 mu-plugins<\/code> \u306b\u30e6\u30fc\u30b6\u30fc\u4f5c\u6210\u30b3\u30fc\u30c9<\/strong>\uff08wp_insert_user<\/code> \u7b49\uff09\u304c\u306a\u3044\u304b\u691c\u7d22\u3002<\/li>\n
                                          • \u30ed\u30b0\u30a4\u30f3\u8a66\u884c\u56de\u6570\u5236\u9650\u30fb\u30d9\u30fc\u30b7\u30c3\u30af\u8a8d\u8a3c<\/strong>\u3092 \/wp-login.php \/ \/wp-admin \u306b\u5c0e\u5165\uff08X\u30b5\u30fc\u30d0\u30fc\u306e\u30a2\u30af\u30bb\u30b9\u5236\u9650\u3067\u53ef\uff09\u3002<\/li>\n<\/ul>\n
                                            \u5fa9\u65e7\u306e\u5168\u624b\u9806\uff1a\u6700\u77ed\u3067\u30b5\u30a4\u30c8\u3092\u623b\u3059\u30c1\u30a7\u30c3\u30af\u30ea\u30b9\u30c8<\/h2>\n
                                            A. \u521d\u52d5\uff085\u5206\u3067\u5c01\u3058\u8fbc\u3081\uff09<\/h3>\n
                                              \n
                                            1. \u30a2\u30af\u30bb\u30b9\u906e\u65ad<\/strong>\uff1a\u4e00\u6642\u7684\u306b \/public_html\/.htaccess<\/code> \u3092\u4ee5\u4e0b\u3067\u4fdd\u5b58\uff08\u5fa9\u65e7\u5f8c\u306b\u623b\u3059\uff09\u3002
                                               \n
                                              Require all denied<\/code><\/pre>\n<\/li>\n
                                            2. Cron\u505c\u6b62<\/strong>\uff1a\u30b5\u30fc\u30d0\u30fc\u30d1\u30cd\u30eb\u306e Cron \u3092\u4e00\u65e6\u300c\u7121\u52b9\u300d\u306b\u3002<\/li>\n
                                            3. \u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u78ba\u4fdd<\/strong>\uff1a\u73fe\u72b6\u306e \/public_html<\/code> \u3068 DB \u3092\u30a8\u30af\u30b9\u30dd\u30fc\u30c8\uff08\u6bd4\u8f03\u7528\uff09\u3002<\/li>\n<\/ol>\n
                                              B. \u201c\u767a\u4fe1\u6e90\u201d\u306e\u9664\u53bb\uff08\u5916\u5074\u30d5\u30a9\u30eb\u30c0\u306e\u4e09\u70b9\u30bb\u30c3\u30c8\uff09<\/h3>\n
                                                \n
                                              1. \u4ee5\u4e0b\u306e\u5834\u6240\u3092\u4e00\u3064\u305a\u3064\u958b\u304d\u3001.htaccess<\/code>\uff0fwp-blog-header.php(\u7d043KB)<\/code>\uff0fwp-cron.php(\u7d043KB)<\/code> \u3092\u767a\u898b\u6b21\u7b2c\u3001\u6a29\u9650 444\/555 \u2192 644 \u306b\u5909\u66f4\u3057\u3066\u524a\u9664<\/strong>\u3002
                                                 \n
                                                  \n
                                                • \u30a2\u30ab\u30a6\u30f3\u30c8\u76f4\u4e0b\uff08\u4f8b\uff1a\/xsXXXXXX.xsrv.jp\/<\/code>\uff09<\/li>\n
                                                • \/mail\/**<\/code>\uff08Maildir<\/code>, Maildir.1<\/code> \u306a\u3069\u5404\u30e6\u30fc\u30b6\u30fc\u7bb1\uff09<\/li>\n
                                                • \/xserver_php\/<\/code>, \/xserver_php\/session\/<\/code>, \/autoreply\/<\/code><\/li>\n
                                                • \/log\/<\/code>, \/htpasswd\/<\/code>, \/script\/<\/code> \u7b49<\/li>\n<\/ul>\n<\/li>\n
                                                • \u524a\u9664\u3067\u304d\u306a\u3051\u308c\u3070 \u30d5\u30a1\u30a4\u30eb\u540d\u3092 *.bad<\/code> \u306b\u30ea\u30cd\u30fc\u30e0<\/strong> \u2192 \u30b5\u30dd\u30fc\u30c8\u3078\u300c\u6240\u6709\u8005\/\u6a29\u9650\u30ea\u30bb\u30c3\u30c8\u300d\u4f9d\u983c\u3002<\/li>\n<\/ol>\n
                                                  C. \u30b3\u30a2\u306e\u201c\u6b63\u898f\u5165\u66ff\u201d\uff08\u624b\u52d5\u3067\u76e4\u77f3\u306b\uff09<\/h3>\n
                                                    \n
                                                  1. wp-admin \u4ea4\u63db<\/strong>\uff1a\u65e2\u5b58 \/wp-admin<\/code> \u3092 wp-admin.bad<\/code> \u306b\u30ea\u30cd\u30fc\u30e0 \u2192 \u516c\u5f0f\u30d1\u30c3\u30b1\u30fc\u30b8\u306e wp-admin\/<\/code> \u3092\u4e38\u3054\u3068\u30a2\u30c3\u30d7\u3002<\/li>\n
                                                  2. wp-includes \u4ea4\u63db<\/strong>\uff1a\u540c\u69d8\u306b\u516c\u5f0f\u306e wp-includes\/<\/code> \u3092\u4e38\u3054\u3068\u30a2\u30c3\u30d7\u3002<\/li>\n
                                                  3. \u30eb\u30fc\u30c8\u306e\u30b3\u30a2\u4e0a\u66f8\u304d<\/strong>\uff1awp-blog-header.php<\/code> \/ wp-cron.php<\/code> \/ wp-load.php<\/code> \/ wp-settings.php<\/code> \u3092\u4e0a\u66f8\u304d\u3002<\/li>\n
                                                  4. index.php \u518d\u4f5c\u6210<\/strong>\uff08\u6570\u767eB\u304c\u6b63\u89e3\uff09\uff1a
                                                     \n
                                                    <?php define('WP_USE_THEMES', true); require __DIR__ . '\/wp-blog-header.php'; <\/code><\/pre>\n<\/li>\n
                                                  5. \u6a29\u9650\u306e\u76ee\u5b89\uff1a\u30c7\u30a3\u30ec\u30af\u30c8\u30ea 755<\/strong> \uff0f \u30d5\u30a1\u30a4\u30eb 644<\/strong><\/li>\n<\/ol>\n
                                                    D. .htaccess \u6574\u5099\uff08\u77ed\u304f\u30fb\u5805\u304f\uff09<\/h3>\n
                                                      \n
                                                    1. \u30eb\u30fc\u30c8<\/strong>\uff1a\u4e0b\u8a18\u3060\u3051\u306b\u3057\u3066\u4fdd\u5b58 \u2192 \u69d8\u5b50\u898b\u3057\u3066\u554f\u984c\u306a\u3051\u308c\u3070 444<\/strong> \u306b\u56fa\u5b9a\u3002
                                                       \n
                                                      <IfModule mod_rewrite.c> RewriteEngine On RewriteBase \/ RewriteRule ^index\\.php$ - [L] RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteRule . \/index.php [L] <\/IfModule> <\/code><\/pre>\n<\/li>\n
                                                    2. uploads \u5b9f\u884c\u7981\u6b62<\/strong>\uff1a\/wp-content\/uploads\/.htaccess<\/code> \u3092\u65b0\u898f\u4f5c\u6210\uff08444<\/strong>\uff09\u3002
                                                       \n
                                                      <FilesMatch \"\\.(?:php|phtml|php5|php7|php8|phps|pht|shtml|cgi|pl|py|exe|suspected)$\"> Require all denied <\/FilesMatch> <\/code><\/pre>\n<\/li>\n<\/ol>\n
                                                      E. \u30ed\u30b0\u30a4\u30f3\u5f8c\u306e\u201c\u9375\u306e\u7dcf\u5165\u66ff\u201d<\/h3>\n
                                                        \n
                                                      1. \u5168\u7ba1\u7406\u8005\u306e\u30d1\u30b9\u30ef\u30fc\u30c9\u5909\u66f4<\/strong>\uff08\u5f37\u529b\u306a\u30e9\u30f3\u30c0\u30e0\uff09\u3002<\/li>\n
                                                      2. SALT\u518d\u751f\u6210<\/strong>\uff1awp-config.php<\/code> \u306e AUTH_KEY\/SALT<\/em> 8\u884c\u3092\u65b0\u3057\u3044\u5024\u306b\u7f6e\u63db\uff08\u5168\u30bb\u30c3\u30b7\u30e7\u30f3\u5f37\u5236\u30ed\u30b0\u30a2\u30a6\u30c8\uff09\u3002<\/li>\n
                                                      3. \u898b\u77e5\u3089\u306c\u7ba1\u7406\u8005\u524a\u9664<\/strong>\uff08\u4f8b\uff1aAl1wpadmin<\/code>\uff09\u3002\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u30d1\u30b9\u30ef\u30fc\u30c9\u304c\u3042\u308c\u3070\u5168\u524a\u9664\u3002<\/li>\n<\/ol>\n
                                                        F. \u4ed5\u4e0a\u3052\uff08\u66f4\u65b0\u30fb\u518d\u767a\u9632\u6b62\uff09<\/h3>\n
                                                          \n
                                                        • WP\u672c\u4f53\uff0f\u30c6\u30fc\u30de\uff0f\u5fc5\u8981\u30d7\u30e9\u30b0\u30a4\u30f3\u3092\u6700\u65b0<\/strong>\u306b\u3002\u4e0d\u8981\u306f\u524a\u9664\u3002<\/li>\n
                                                        • WordPress\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u8a2d\u5b9a<\/strong>\uff08X\u30b5\u30fc\u30d0\u30fc\uff09\uff1a\u30ed\u30b0\u30a4\u30f3\u8a66\u884c\u5236\u9650ON\uff0fXML-RPC\u5236\u9650ON\uff08\u672a\u4f7f\u7528\u306a\u3089\uff09\u3002<\/li>\n
                                                        • \/wp-login.php\u30fb\/wp-admin \u306b\u30d9\u30fc\u30b7\u30c3\u30af\u8a8d\u8a3c<\/strong>\uff08\u30a2\u30af\u30bb\u30b9\u5236\u9650\u6a5f\u80fd\u3067\u8ffd\u52a0\uff09\u3002<\/li>\n
                                                        • 1\u9031\u9593\u306f\u3068\u304d\u3069\u304d\u66f4\u65b0\u65e5\u6642\u30bd\u30fc\u30c8<\/strong>\u3067\u300c\u5916\u5074\u30d5\u30a9\u30eb\u30c0\u300d\u3092\u5de1\u56de\u3057\u3001\u518d\u51fa\u73fe\u304c\u306a\u3044\u304b\u78ba\u8a8d\u3002<\/li>\n<\/ul>\n
                                                          G. \u5408\u683c\u30b5\u30a4\u30f3\uff08\u3053\u3053\u307e\u3067\u6765\u305f\u3089OK\uff09<\/h3>\n
                                                            \n
                                                          • \/public_html\/.htaccess<\/code> \u304c\u52dd\u624b\u306b\u6539\u5909\u3055\u308c\u306a\u3044<\/strong>\u3002<\/li>\n
                                                          • \u30eb\u30fc\u30c8\u306e index.php<\/code> \u304c\u52dd\u624b\u306b\u80a5\u5927\u5316\u30fb\u518d\u751f\u6210\u3057\u306a\u3044<\/strong>\u3002<\/li>\n
                                                          • \u30c8\u30c3\u30d7\u30da\u30fc\u30b8\u3068 \/wp-login.php<\/code> \u304c\u6b63\u5e38\u8868\u793a<\/strong>\u3002<\/li>\n<\/ul>\n
                                                            \u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u5fa9\u5143\u306e\u30b3\u30c4\uff1aWeb\uff0bDB\uff0b\u5916\u5074\u30d5\u30a9\u30eb\u30c0\u3092\u540c\u65e5\u306b\u623b\u3059<\/h2>\n
                                                            \u306a\u305c\u300c\u540c\u65e5\u300d\u5fa9\u5143\u304c\u91cd\u8981\uff1f<\/h3>\n
                                                              \n
                                                            • \u6574\u5408\u6027\u306e\u78ba\u4fdd\uff1a<\/strong>\u30d5\u30a1\u30a4\u30eb\u3068DB\u306e\u30ba\u30ec\uff08URL\u3084\u30ea\u30c0\u30a4\u30ec\u30af\u30c8\u8a2d\u5b9a\uff09\u304c\u539f\u56e0\u306e\u4e0d\u5177\u5408\u3092\u9632\u3050\u3002<\/li>\n
                                                            • \u66f8\u304d\u623b\u3057\u306e\u906e\u65ad\uff1a<\/strong>\u5916\u5074\u30d5\u30a9\u30eb\u30c0\uff08\/mail<\/code>\u30fb\/xserver_php<\/code> \u7b49\uff09\u306b\u6f5c\u3080\u4e0d\u6b63\u30d5\u30a1\u30a4\u30eb\u3082\u540c\u65e5\u306b\u623b\u3057\u3001\u518d\u6c5a\u67d3\u3092\u6b62\u3081\u308b\u3002<\/li>\n
                                                            • \u539f\u56e0\u8ffd\u8de1\u306e\u660e\u77ad\u5316\uff1a<\/strong>\u540c\u3058\u30b9\u30ca\u30c3\u30d7\u30b7\u30e7\u30c3\u30c8\u306b\u623b\u3059\u3068\u3001\u30ed\u30b0\u3068\u306e\u7a81\u5408\u304c\u697d\u306b\u306a\u308b\u3002<\/li>\n<\/ul>\n
                                                              Xserver\u3067\u306e\u57fa\u672c\u624b\u9806\uff08\u5bfe\u8c61\u3092\u6307\u5b9a\u3057\u3066\u5fa9\u5143\uff09<\/h3>\n
                                                                \n
                                                              1. Web\u9818\u57df\uff08\/public_html\uff09<\/strong>\u3092\u6539\u3056\u3093\u524d\u65e5\u4ed8\u306b\u5fa9\u5143\u3002<\/li>\n
                                                              2. \u540c\u753b\u9762\u307e\u305f\u306f\u7d9a\u3051\u3066\u3001\u5916\u5074\u30d5\u30a9\u30eb\u30c0<\/strong>\u3082\u540c\u65e5\u306b\u5fa9\u5143\uff1a
                                                                 \/mail<\/code> \uff0f \/xserver_php<\/code> \uff0f \/xserver_php\/session<\/code> \uff0f \/autoreply<\/code> \uff0f\uff08\u3042\u308c\u3070\uff09\/log<\/code>\u30fb\/htpasswd<\/code>\u30fb\u30a2\u30ab\u30a6\u30f3\u30c8\u76f4\u4e0b \u306a\u3069\u3002<\/li>\n
                                                              3. MySQL\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9<\/strong>\u3092\u540c\u3058\u65e5\u4ed8\u3067\u5fa9\u5143\uff08\u5225\u30bf\u30d6\uff09\u3002<\/li>\n<\/ol>\n
                                                                \u30dd\u30a4\u30f3\u30c8\uff1a<\/em>\u300c\u3059\u3079\u3066\u3092\u5fa9\u5143\u300d\u306f\u30e1\u30fc\u30eb\u307e\u3067\u5dfb\u304d\u623b\u3059\u305f\u3081\u3001\u901a\u5e38\u306f\u201c\u5bfe\u8c61\u3092\u6307\u5b9a\u201d<\/strong>\u3067\u5fc5\u8981\u7b87\u6240\u3060\u3051\u623b\u3059\u65b9\u304c\u5b89\u5168\u3002<\/p>\n
                                                                \u5fa9\u5143\u304c\u91cd\u3044\uff0f\u6b62\u307e\u308b\u6642\u306e\u30b3\u30c4<\/h3>\n
                                                                  \n
                                                                • \u7c92\u5ea6\u3092\u843d\u3068\u3059\uff1a<\/strong>\/public_html\/wp-admin<\/code> \u2192 \/wp-includes<\/code> \u2192 \u6b8b\u308a\u3001\u3068\u9806\u306b\u5c0f\u3055\u304f\u5fa9\u5143\u3002<\/li>\n
                                                                • \u7a7a\u304d\u5bb9\u91cf\u306e\u78ba\u4fdd\uff1a<\/strong>\/wp-content\/cache<\/code> \u306a\u3069\u3092\u624b\u52d5\u524a\u9664\u3057\u3066\u304b\u3089\u518d\u5b9f\u884c\u3002<\/li>\n
                                                                • \u540c\u6642\u5b9f\u884c\u3057\u306a\u3044\uff1a<\/strong>\u5fa9\u5143\u30b8\u30e7\u30d6\u306e\u591a\u91cd\u5b9f\u884c\u306f\u30ad\u30e5\u30fc\u6e0b\u6ede\u306e\u5143\u3002\u5c65\u6b74\u30bf\u30d6\u3067\u72b6\u614b\u3092\u78ba\u8a8d\u3002<\/li>\n<\/ul>\n
                                                                  \u5fa9\u5143\u201c\u5f8c\u201d\u306e\u5fc5\u9808\u4ed5\u4e0a\u3052\uff08\u518d\u6c5a\u67d3\u9632\u6b62\uff09<\/h3>\n
                                                                    \n
                                                                  1. WordPress\u30b3\u30a2\u3092\u516c\u5f0f\u3067\u4e0a\u66f8\u304d\uff1a<\/strong>wp-admin\/<\/code> \u3068 wp-includes\/<\/code> \u3092\u4e38\u3054\u3068\u5165\u66ff\u3002\u30eb\u30fc\u30c8\u306e index.php<\/code> \u307b\u304b\u30b3\u30a2PHP\u3082\u4e0a\u66f8\u304d\u3002<\/li>\n
                                                                  2. .htaccess\u6574\u5099\uff1a<\/strong>\u30eb\u30fc\u30c8\u306f\u6b63\u5e38\u7248\u306b\u3057\u3066444<\/code>\u56fa\u5b9a\u3001wp-content\/uploads\/.htaccess<\/code>\u3067PHP\u5b9f\u884c\u7981\u6b62\u3002<\/li>\n
                                                                  3. \u9375\u306e\u7dcf\u5165\u66ff\uff1a<\/strong>\u5168\u7ba1\u7406\u8005\u306ePW\u5909\u66f4\uff0bwp-config.php<\/code> \u306e AUTH_KEY\/SALT<\/em> \u3092\u518d\u751f\u6210\u3002<\/li>\n<\/ol>\n
                                                                    \u5dee\u5206\u30c7\u30fc\u30bf\u306e\u53d6\u308a\u6271\u3044\uff08\u6ce8\u610f\u70b9\uff09<\/h3>\n