Hello,
Hide My WP with NewsMag a good idea or not?
If I install wordpress plugin Hide My WP (http://codecanyon.net/item/hide-my-wp-no-one-can-know-you-use-wordpress/4177158) will I have problems with the upgrade NewsMag theme or wordpress.
Thanks.
Taking a look at that so far, I would say it should do what is may say it does, but also some problems noted in the comments from users where people can still detect things, so may have limited value. It seems cheap enough, and if you’re more interested in that vs theme features, why not buy it and try it.
Also note if you’re using Visual Composer, you would likely not be able to hide that fully, and I see some issues from their support with things like contact forms.
I’m also doubtful that the tagdiv speed booster will work with that plugin.
What we do to hide a lot of WP stuff is using Yoast to hide some stuff, but then we run mod_pagspeed which hides all comments, we hide the versioning via functions.php, and we remove the pingback script. In most cases we also move the uploads folder. So, you might hide all the other stuff and people could still search for sites with xmlrpc.php or license.txt — did you remove that already? How about readme.html ? Is that still on your site?
There is also some bbpress style sheet data and woocommerce code you likely would need to manually remove from the functions and td booster functions.
There is no “one click” or “one plugin” way to fully hide WordPress. People who want to hack your site could likely figure it out through various methods. However, it’s better to concentrate on other security measures and only use highly validated plugins and code, vs trying to fully hide use of WP. With all the VIP sites now running WP (time magazine!), etc., there are much bigger fish in the sea than there used to be.
I would advise “caution” on a live site.
On a test site, why not just try it out ?
Thank you very much for your reply.
I’m not important to hide that I use wordpress, only it is important to hide the wp-admin url of hacking
Thanks.
We use the ‘limit login attempts plugin,’ which is very helpful. Also make sure you delete your admin account for WP and change the super user to a different name.
You might try this solution to add to functions.php
// Simple Query String Login page protection
function example_simple_query_string_protection_for_login_page() {
$QS = '?mySecretString=foobar';
$theRequest = 'http://' . $_SERVER['SERVER_NAME'] . '/' . 'wp-login.php' . '?'. $_SERVER['QUERY_STRING'];
// these are for testing
// echo $theRequest . '<br>';
// echo site_url('/wp-login.php').$QS.'<br>';
if ( site_url('/wp-login.php').$QS == $theRequest ) {
echo 'Query string matches';
} else {
header( 'Location: http://' . $_SERVER['SERVER_NAME'] . '/' );
}
}
add_action('login_head', 'example_simple_query_string_protection_for_login_page');
I believe you change foobar to whatever you want to be your login location and any query to wp-admin directly would go to home page.
Don’t do stuff like this unless you know what you’re doing.
e.g., make backup of functions.php first, and know how to FTP this, and then how to remove it if you are unable to login.
