Hide Author vcard – Security Issue

Posted in: Newspaper
Post count: 2

Hi,

We have a site where the Show Author Name” and “Show Author Box” are turned off under Post Settings, but it still displays the author / username card in the source code and exposes it online. Here is the code:

<div class=”td-author-name vcard author” style=”display: none”><span class=”fn”>authorname</span></div>

We are now getting hack attempts trying to log in with those author usernames. Is there a way to hide this or set it to something other than the username?

Thanks.

Post count: 20688

Hi,

You could comment this line of code and the author name should not appear in the source code, when the author box is disabled
https://www.screencast.com/t/bSG80IprVj
Maybe take a look at some general information concerning improbving WordPress security
http://www.wpbeginner.com/wordpress-security/
https://codex.wordpress.org/Hardening_WordPress

Thanks

Post count: 2

Thanks. I’m familiar with WordPress security, hence my concern that you’re exposing the author username which hackers can use to attack the site.

get_author_posts_url($author_id)

Ideally, there’s a way to fully hide this as an option in Newspaper.

Post count: 16

Any updates here?

Is it possible to don’t show the username in the URL in the Author box sidebar widget and under posts? I want to show the author Box, but it shows the nickname…. that is good, but when i hover you can see the real username in the URL. That is a security issue.
Any workaround or any fix?
Or just not use the Author box?

Thank you!
Maik

Post count: 35449

Hi,

The nick name that will appear in links will be the one that is required in user profile, the other one, that can be display on pages can be selected
-> https://www.screencast.com/t/PpR4KQCj -> https://www.screencast.com/t/LKvn87IH6J this function is from WordPress, you can try this using a default WordPress theme.

Please check this article -> HOW TO HIDE YOUR WORDPRESS USERNAME

Thank you!

Post count: 16

Hi Calin!
Thank you!
I will definitely try it out soon.

Post count: 16

it worked perfectly.
If somebody does it too, please consider to turn off wordfence first to don’t get locked out 😉

Thanks Calin

Viewing 7 posts - 1 through 7 (of 7 total)
The forum ‘Newspaper’ is closed to new topics and replies.