did you have 404 Error when you tried to use Basic Authentication to one of your directory ?

please follow this steps to solve it

Assuming the following directory structure:

This method requires you to add code to your WordPress files. If you haven’t done this before, then see our guide on how to copy and paste code snippets in WordPress.

You will need to add following code to your theme’s functions.php file or a site-specific plugin.

in order to limit the wordpress tags cloud you can use these two ways , you can choose whatever you want

open your functions.php file in your theme and add this code

Method 1

How to Disable JSON REST API and  XML-RPC in WordPress by htaccess

Resize reCaptcha in Contact form7

to scale reCaptcha in WordPress Contact form you can add this to the css file

.anr_captcha_field iframe {
    -webkit-transform:scale(0.90);
    transform-origin:0 0;
    -webkit-transform-origin:0 0;
}

How to set featured image in order to be shared in facebook

The Yoast SEO Plugin also comes with the ability to add a custom Facebook thumbnail to each individual post or page.

Simply install the Yoast SEO Plugin. After you’ve installed and activated, it’s time to set up a Facebook thumbnail into whatever post you want.

Protect wp-admin by Basic Auth

You have to protect the wp-admin / wp-login.php at least by the baisc-auth if you do not want to do it using Cloduflare

Here is the steps to Protect it

All of us know that WordPress is the most common CMS and it is the easiest one ever, Now I will put here some tips to install a secure WordPress

1. Install WordPress CMS platform Here is the link 
2. https://wordpress.org/plugins/advanced-nocaptcha-recaptcha

Important tips:

To hide sensitive files in the wp-includes folder, add the following code to the .htaccess file in the root of your site:

# Block wp-includes folder and files
 <IfModule mod_rewrite.c>
 RewriteEngine On
 RewriteBase /
 RewriteRule ^wp-admin/includes/ - [F,L]
 RewriteRule !^wp-includes/ - [S=3]
 RewriteRule ^wp-includes/[^/]+\.php$ - [F,L]
 RewriteRule ^wp-includes/js/tinymce/langs/.+\.php - [F,L]
 RewriteRule ^wp-includes/theme-compat/ - [F,L]
 </IfModule>

wp-content/uploads directory

your wp–content/uploads directory should be considered a potential entry point and can be exploited for number of wordpress hacks . The biggest potential threat is the uploading of PHP files.

If you can browse /wp–content/plugins/ – the enumeration of plugins and versions becomes much easier! Exploiting this can allow an attacker to obtain sensitive information that could aid in further attacks.