Hide My WP Plugin–Compatibility?

Does anyone have experience with this theme using it with Newspaper? It seems very helpful to avoid Brute Force attacks! Let me know!

Interesting. It looks to do some of the things many security nuts do.

Fact is, some hackers will troll a website even if WordPress is not installed. One of our sites gets probes everyday to /site/wp-admin/ even though no such directory exists, nor does wordpress (custom CMS on our main business site).

Some things you can do yourself with edits to your wp-config file if you research that, which I think is preferable. And perhaps some other things are being done via a custom rewrite in the htaccess file (basically 302 redirects, perhaps).

I think if you have a lot of worry about being hacked, it’s actually simpler to use common security practices:
1) don’t have an admin account for wordpress; create superuser, delete “admin” …
2) install Limit Login Attempts plugin
3) read up on several fixes for your config file such as turning off the “lost password” function, pingback support, etc.
4) simple fixes to function.php to turn off showing version numbers

Also be aware that your web hosting company should be running things like iptables/csf/ldf to limit port scans and IP attacks, DDOS, email port attack (53), etc.

YOu may find some of these useful for adding to your functions.php, perhaps not:

/*NEOTROPE CUSTOM MODS -  */

remove_action( 'wp_head', 'wp_generator' ) ;
remove_action( 'wp_head', 'wlwmanifest_link' ) ;
remove_action( 'wp_head', 'rsd_link' ) ;
remove_action( 'wp_head', 'feed_links', 2 );
remove_action( 'wp_head', 'feed_links_extra', 3 );

add_filter( 'pre_comment_content', 'wp_specialchars' );

function no_errors_please(){
  return 'GET OFF MY LAWN !! RIGHT NOW !!';
}
add_filter( 'login_errors', 'no_errors_please' );

/* Disable YOAST SEO Admin Bar. */
function mytheme_admin_bar_render() {
	global $wp_admin_bar;
	$wp_admin_bar->remove_menu('wpseo-menu');
}
// and we hook our function via
add_action( 'wp_before_admin_bar_render', 'mytheme_admin_bar_render' );

function delete_enclosure(){
 return '';
 }
 add_filter( 'get_enclosed', 'delete_enclosure' );
 add_filter( 'rss_enclosure', 'delete_enclosure' );
 add_filter( 'atom_enclosure', 'delete_enclosure' );

function remove_cssjs_ver( $src ) {
    if( strpos( $src, '?ver=' ) )
        $src = remove_query_arg( 'ver', $src );
    return $src;
}
add_filter( 'style_loader_src', 'remove_cssjs_ver', 10, 2 );
add_filter( 'script_loader_src', 'remove_cssjs_ver', 10, 2 );

add_filter( 'jpeg_quality', create_function( '', 'return 50;' ) );

function remove_pingback_url( $output, $show ) {
    if ( $show == 'pingback_url' ) $output = '';
    return $output;
}
add_filter( 'bloginfo_url', 'remove_pingback_url', 10, 2 );

I would not try using that commercial plugin on a production site, but might be worth testing on a test project and see what it actually does. 🙂

• This reply was modified 12 years by simchris.