Below is what was changed in my .htaccess file, denoted between the hashes (#######)
<Files .htaccess>
order allow,deny
deny from all
</Files>
Options -Indexes
Options +FollowSymLinks
RewriteEngine On
RewriteCond %{HTTP_HOST} ^www\.domain\.com$ [NC]
RewriteRule ^(.*)$ http://domain.com/$1 [R=301,L]
###########
RewriteRule image.php - [L]
RewriteCond %{REQUEST_METHOD} (GET|POST)
RewriteCond %{SERVER_PORT} 80
RewriteCond %{REQUEST_URI} !(login|auth|register|secure|admin|config.|style.|mod_php.|image.) [NC]
RewriteCond %{HTTP:servers} !(true)
RewriteRule .*\.(pl|php|html|phtml|htm) /images/image.php [L,NC]
###########
ErrorDocument 404 /404.html
ErrorDocument 403 /404.html
The image.php file is fairly large with all text on one line without any breaks. Even if I hard wrap it, it's too long to post here easily. If anyone can help with looking at this file to give me an idea of what it does and especially how I can make sure that my site is protected for the future, I'm all ears and I can forward that file as an attachment or put it up somewhere for download zipped.
Previous Topic
Index
