最新消息:雨落星辰是一个专注网站SEO优化、网站SEO诊断、搜索引擎研究、网络营销推广、网站策划运营及站长类的自媒体原创博客

How to rename wp-includes folder?

programmeradmin3浏览0评论

Is there a way that we could rename wp-includes folder

I have found out there are ways to do for other folders. But how do we do it for wp-includes folder? /

Is there a way that we could rename wp-includes folder

I have found out there are ways to do for other folders. But how do we do it for wp-includes folder? http://pythoughts/how-to-hide-that-you-use-wordpress/

Share Improve this question edited Aug 1, 2013 at 14:44 fuxia 107k38 gold badges255 silver badges459 bronze badges asked Aug 1, 2013 at 14:32 RaghavRaghav 1231 gold badge1 silver badge6 bronze badges 4
  • 2 If you're looking to mask the fact that you use WordPress, have a look at this: kovshenin/2013/… – Pat J Commented Aug 1, 2013 at 14:39
  • 2 Even you could do that: the first enqueued core JavaScript would tell the new name to everyone. This is really pointless. – fuxia Commented Aug 1, 2013 at 14:46
  • 1 I agree with toscho. There are twenty different ways I can think of off the top of head to tell that a site is running WordPress, and I can identify many other CMS's too. A malicious script could run all those checks and more in less than a second. Hiding that you use WordPress is not worth the work and I doubt it affords much security. – s_ha_dum Commented Aug 1, 2013 at 14:56
  • 1 It affords decent security through obfuscation if you address all 20 ways. – Orun Commented Oct 26, 2015 at 21:35
Add a comment  | 

1 Answer 1

Reset to default 3

Unfortunately not at the moment. If you look in wp-includes/default_constants.php, the WP_CONTENT_DIR and other constants all have a if ( ! defined(constant) ) check before them.

WPINC (the wp-includes constant) does not. It's defined in wp-settings.php, and has no if ( ! defined(WPINC) ) check, so defining it before hand (in your wp-config.php) would just result in an error.

Also, altering core you could do this, but as soon as you update WordPress, Core files would be reverted, and therefore it would revert back to wp-includes.

I suggestion just masking your site with WordPress in a subdirectory (call it xadw or something nobody would guess) and just set the home URL to be the actual domain. Then put your wp-content folder in another folder, so it won't be obviously when people look at uploads, etc.

与本文相关的文章

发布评论

评论列表(0)

  1. 暂无评论