This functionality is available for PRO version. Name: wph/components/block_wp_cron_php/local_ips Type: Filter Arguments: (array) $local_ips This filter can be used to add IP’s to ignore list for which the default wp-cron.php file can still be accessible when blocking the default.

This functionality is available for PRO version The run-ajax.php is being used by WordPress core and many plugins to initiate AJAX calls from dashboard and front side. This is specific to WordPress, a site using such slug is an easy target to hack attempts.

The WordPress is not flexible at all when it come to media upload location. The default path is a standard format which appear like this, for any attachments (images, archives etc): <img class="alignnone size-full" src="http://domain.com/wp-content/uploads/2016/11/106658.jpg" alt="" width="640" height="390" alt="" /> Viewing such a link, it’s pretty obliviously it’s a WordPress site, and the link points […]

Using the WordPress as CMS to manage your website it turns into a magnet for all brute force attempts to login, from boots and hackers. On CODEX there’s a dedicated page for such topic Brute Force Attacks it’s a very sensible area of your website and should get the appropriate attention from everyone. There are […]

This section provides a way to control aspects of the front-side scripts loaded using the HTML script tag. An example of such a link: <script type=’text/javascript’ id=’jquery-framework’ src=’http://-domain-name-/wp-includes/js/jquery/jquery.js?ver=1.12.4′></script> Remove Version The option method helps to remove the JavaScript version number which is being appended at the end of every script file. Generally, the version number […]

This section provide methods to control the style links format being displayed on front side. An example of such link: <style rel=’stylesheet’ id=’id-of-style’ type=’text/css’ media=’all’ href=’http://-domain-name-/wp-content/themes/default/css/style.css?ver=1.12.4′></style> Remove Version   This provide a method to remove the Style file version number which is being append at the end of every style tag. Generally this is intended […]

Originating on Japanese mobile phones in the late 1990s, emoji have become increasingly popular worldwide since their international inclusion in Apple’s iPhone, which was followed by similar adoption by Android and other mobile operating system. But not everyone use Emoji. Since WordPress load the dependencies as default, it decrease the overall site speed. Disabling this […]

Remove WordPress Generator Meta Remove the autogenerated meta generator tag within head (WordPress Version). Tag example: <meta name=”generator” content=”WordPress 4.6.1″ /> Remove Other Generator Meta Remove other meta generated tags within head (eg Theme Name, Theme Version). Tag example: <meta content=”Divi –  Child v.1.0.0″ name=”generator”/> Removing such meta tag create  issues for BuddyPress plugin which […]

As default the WordPress url’s format include an ending slash. There are situations when this slash is not being append. Turning on this option, all links will get a slash if not included as default. This is also useful when someone try to view a directory content. On majority of servers, when try to open […]

Any WordPress instance includes specific files located within the root install directory. You may think this is not a big deal as any site contains such a file. The problem is they use a format that makes your WordPress easily traceable: