function remove_wp_version() {
    return '';
}
add_filter('the_generator', 'remove_wp_version');

remove_action('wp_head', 'wp_generator');

<FilesMatch "\.(htaccess|htpasswd|ini|log|sh|sql)$">
    Order Allow,Deny
    Deny from all
</FilesMatch>

Options -Indexes

<Files wp-config.php>
    Order Allow,Deny
    Deny from all
</Files>

RewriteCond %{QUERY_STRING} (.*)(union|select|insert|update|delete|drop|alter|create|truncate)(.*) [NC]
RewriteRule .* - [F]

add_filter( 'rest_prepare_user', 'remove_username_from_rest_response', 10, 3 );
function remove_username_from_rest_response( $response, $user, $request ) {
    if ( isset( $response->data['username'] ) ) {
        unset( $response->data['username'] );
    }
    return $response;
}

if (!is_admin()) {
    if (preg_match('/author=([0-9]*)/i', $_SERVER['QUERY_STRING'])) die();
    add_filter('redirect_canonical', 'shapeSpace_check_enum', 10, 2);
}
function shapeSpace_check_enum($redirect, $request) {
    if (preg_match('/\?author=([0-9]*)(\/*)/i', $request)) die();
    else return $redirect;
}

AuthUserFile /dev/null
AuthGroupFile /dev/null
AuthName "wordpress Admin Access Control"
AuthType Basic
<LIMIT GET>
order deny,allow
deny from all
# whitelist Soly IP address
allow from xx.xx.xx.xxx
# whitelist Soly IP address
allow from xx.xx.xx.xxx
</LIMIT>

<FilesMatch "^.*(error_log|wp-config\.php|php.ini|\.[hH][tT][aApP].*)$">
Order deny,allow
Deny from all
</FilesMatch>

<FilesMatch "\.(zip|sql|bak)$">
    Order Allow,Deny
    Deny from all
</FilesMatch>