Hi,
We have a site where the Show Author Name” and “Show Author Box” are turned off under Post Settings, but it still displays the author / username card in the source code and exposes it online. Here is the code:
<div class=”td-author-name vcard author” style=”display: none”><span class=”fn”>authorname</span></div>
We are now getting hack attempts trying to log in with those author usernames. Is there a way to hide this or set it to something other than the username?
Thanks.
Hi,
You could comment this line of code and the author name should not appear in the source code, when the author box is disabled
– https://www.screencast.com/t/bSG80IprVj
Maybe take a look at some general information concerning improbving WordPress security
– http://www.wpbeginner.com/wordpress-security/
– https://codex.wordpress.org/Hardening_WordPress
Thanks
Thanks. I’m familiar with WordPress security, hence my concern that you’re exposing the author username which hackers can use to attack the site.
get_author_posts_url($author_id)
Ideally, there’s a way to fully hide this as an option in Newspaper.
Any updates here?
Is it possible to don’t show the username in the URL in the Author box sidebar widget and under posts? I want to show the author Box, but it shows the nickname…. that is good, but when i hover you can see the real username in the URL. That is a security issue.
Any workaround or any fix?
Or just not use the Author box?
Thank you!
Maik
Hi,
The nick name that will appear in links will be the one that is required in user profile, the other one, that can be display on pages can be selected
-> https://www.screencast.com/t/PpR4KQCj -> https://www.screencast.com/t/LKvn87IH6J this function is from WordPress, you can try this using a default WordPress theme.
Please check this article -> HOW TO HIDE YOUR WORDPRESS USERNAME
Thank you!
Hi Calin!
Thank you!
I will definitely try it out soon.
it worked perfectly.
If somebody does it too, please consider to turn off wordfence first to don’t get locked out đ
Thanks Calin
