A well-known tip in the blogosphere regarding WordPress is to remove the WordPress version from your meta-tags that are automatically generated by your WordPress blog.
This information can be used by potential hackers to pinpoint which version of WordPress you are using, and can help them find an exploit to start hacking your website.
Since version 2.5, it is not that easy to remove that information anymore, except via a trick in your theme’s function.php file or via a WordPress Plugin.
To manually remove it from your blog, open up your Theme Editor, and find the functions.php.
Add the following code to the file:
Or, if you prefer, install a plugin such as Secure WordPress, which Frank also mentions in his comment.
I have also researched alternative solutions, and found a few, such as the bs-wp-noversion (not tested) plugin as well as a plugin by Angsuman Chakraborty, named Angsuman’s WordPress Header Info Remover Plugin (also not tested).
3 Responses
Leave a Reply
Hai… I am thinking about “not remover” but “changer”. So I will get my wordpress version changed to fake version.
Hi doktertomi
Good idea, perhaps change it to something else. Perhaps “Joomla v. 3.112″ or something like that
Then you would REALLY confuse any potential hacker
Great post. Thank you for useful information.