Always Remove the WordPress Version Code
July 25, 2008 · Print This Article
Don’t want the world to know what version of WordPress you’re running?
One thing I don’t think people realize is that a hacker can easily find vulnerable WordPress blogs because most standard WordPress themes will actually tell them what version you are using.
If you open up the header.php file of your theme, you should notice some code that looks something like this:
<meta name="generator" content="WordPress <?php bloginfo('version'); ?>" /><!-- leave this for stats -->
In order to protect your WordPress installation, I recommend people completely remove this code from their header.php file for all of their WordPress blogs.





















Comments
Got something to say?
You must be logged in to post a comment.