<?xml version="1.0" encoding="UTF-8"?>
<configuration>
  <system.webServer>
    <security>
      <requestFiltering>
        <denyUrlSequences>
          <add sequence=".."/>
          <add sequence="./"/>
        </denyUrlSequences>
      </requestFiltering>
    </security>
    <directoryBrowse enabled="false"/>
    <rewrite>
      <rules><rule name="Block access to sensitive files" stopProcessing="true">
		<match url="(^|/)(wp-config\.php|wp-config-sample\.php|readme\.html|license\.txt|web\.config|\.htaccess|\.env|composer\.(json|lock)|package\.json|package-lock\.json)$" ignoreCase="true"/>
		<action type="CustomResponse" statusCode="403" statusReason="Forbidden" statusDescription="Access Denied"/></rule><!-- Other URL rewrite rules for WordPress -->
			<rule name="WordPress: https://VerdantVeggies.com" patternSyntax="Wildcard">
				<match url="*"/>
					<conditions>
						<add input="{REQUEST_FILENAME}" matchType="IsFile" negate="true"/>
						<add input="{REQUEST_FILENAME}" matchType="IsDirectory" negate="true"/>
					</conditions>
				<action type="Rewrite" url="index.php"/>
			</rule></rules>
    </rewrite>
  </system.webServer>
</configuration>