<?xml version="1.0" encoding="UTF-8"?>
<configuration>
  <system.webServer>
    <!--<handlers>
      <remove name="Custom-PHP5-FastCGI-php"/>
      <add name="Custom-PHP5-FastCGI-php" path="*.php" verb="GET,HEAD,POST" modules="FastCgiModule" scriptProcessor="C:\php55\php-cgi.exe" resourceType="Either" requireAccess="Script"/>
    </handlers>-->
    <rewrite>
      <rules>
        <rule name="wordpress" patternSyntax="Wildcard">
          <match url="*" />
          <conditions>
            <add input="{REQUEST_FILENAME}" matchType="IsFile" negate="true" />
            <add input="{REQUEST_FILENAME}" matchType="IsDirectory" negate="true" />
          </conditions>
          <action type="Rewrite" url="index.php" />
        </rule>
        <rule name="block_login" stopProcessing="true">
          <match url="(.*)" ignoreCase="true" />
          <conditions logicalGrouping="MatchAll">
            <add input="{URL}" pattern="^/(wp-comments-post|wp-login)\.php" negate="false" />
            <add input="{HTTP_REFERER}" pattern="^$" />
            <add input="{HTTP_METHOD}" pattern="POST" />
          </conditions>
          <action type="AbortRequest" />
        </rule>
      </rules>
    </rewrite>
    <security>
      <requestFiltering>
        <denyUrlSequences>
          <add sequence="xmlrpc.php" />
        </denyUrlSequences>
      </requestFiltering>
    </security>
  </system.webServer>
</configuration>