WordPress Tip: Always Remove the WordPress Version Code
I talked a couple of weeks ago about the importance of always upgrading your WordPress install, as old WordPress installations are often vulnerable. One thing I don’t think people realize is that a hacker can easily find vulnerable WordPress blogs because most standard WordPress themes will actually tell them what version you are using.
If you open up the header.php file of your theme, you should notice some code that looks something like this:
"KSDmeta name="generator" content="WordPress KSDttphp bloginfo('version'); ttKSB" /KSBKSDKSD!-- leave this for stats --KSB
In order to protect your WordPress installation, I recommend people completely remove this code from their header.php file for all of their WordPress blogs.
Now, this obviously isn’t going to make your WordPress blog hack proof, but what it will do is make it so hackers can’t easily locate your blog if it is using a vulnerable WordPress installation.
I talked a couple of weeks ago about the importance of always upgrading your WordPress install, as old WordPress installations are often vulnerable. One thing I don’t think people realize is that a hacker can easily find vulnerable WordPress blogs because most standard WordPress themes will actually tell them what version you are using.
If you open up the header.php file of your theme, you should notice some code that looks something like this:
"KSDmeta name="generator" content="WordPress KSDttphp bloginfo('version'); ttKSB" /KSBKSDKSD!-- leave this for stats --KSB
In order to protect your WordPress installation, I recommend people completely remove this code from their header.php file for all of their WordPress blogs.
Now, this obviously isn’t going to make your WordPress blog hack proof, but what it will do is make it so hackers can’t easily locate your blog if it is using a vulnerable WordPress installation.
Comments