HOW-TO: How to protect a WordPress website with DenyAll WAF?