Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

How to hide Wordpress details from view source code

Tags:

php

wordpress

I have a wordpress site ,but when I Press Ctrl+U I can see all the site information's about my site(themes,wp-content,etc). But I saw one site http://www.indiavisiontv.com/ . when I press Ctrl+U we get a source code page that doesn't reveal so much things. How they do that.

like image 628
varun kumar Avatar asked Jan 14 '23 13:01

varun kumar


2 Answers

If you are new to php and mod_rewrite i suggest so you check with the section of my response. Or if you keen to try it yourself, you can use something like this to hide the wp-content/plugins path structure:

<IfModule mod_rewrite.c>
RewriteEngine On
RewriteRule ^modules/(.*) /wp-content/plugins/$1 [L,QSA]
</IfModule>

This will change the path to /modules . Apply something similar to other structure, you may need some advanced rewrites, see http://httpd.apache.org/docs/current/mod/mod_rewrite.html

If prefer something out of the box, there re few interesting plugins, some commercial, also free at WordPress repository, i suggest to try WP Hide & Security Enhancer. This include lot's of things and help to change pretty much everything to make your WordPress unrecognizable. Here are some features of the code:

  • Custom admin Url
  • Block default admin Url
  • Block any direct folder access to completely hide the structure
  • Custom wp-login.php filename
  • Block default wp-login.php
  • Block default wp-signup.php
  • Adjustable theme url
  • New child theme url
  • Change theme style file name
  • Custom wp-include
  • Block default wp-include paths
  • Block defalt wp-content
  • Custom plugins urls
  • Block default plugins paths
  • New upload url
  • Block default upload urls
  • Remove wordpress version
  • Meta Generator block
  • Disble the emoji and required javascript code
  • Remove wlwmanifest Meta
  • Remove rsd_link Meta
  • Remove wpemoji
like image 86
WP-Silver Avatar answered Jan 17 '23 01:01

WP-Silver


The website you have mentioned (indiavision) is using w3 total cache to minify the css and js hence you can't see the typical source (I was still able to locate 'wp-content' in source though).

You can use Hide my wp to hide your wordpress instance completely. It includes following abilities:

  1. Ability to hide both http://yoursite.com/wp-login.php page and http://yoursite.com/wp-admin/ area.
  2. Ability to remove auto generated feed from header.
  3. Ability to clean automatic classess added by wordpress (won’t recommend this personally)
  4. Ability to disallow direct access to php files (except the ones in wp-admin)
  5. Ability to change pagination url.
  6. Ability to disable Archives.
  7. Ability to completely disable queries for taxonomies, comments and attachments.

Reference: http://howtomakewebsite.ws/wordpress-plugins/how-to-hide-wordpress/731/

like image 31
Anon Avatar answered Jan 17 '23 02:01

Anon