{"id":54415,"date":"2017-02-18T05:39:22","date_gmt":"2017-02-18T05:39:22","guid":{"rendered":"https:\/\/wordpress.org\/plugins-wp\/disable-feeds-and-hide-usernames\/"},"modified":"2018-12-28T09:37:54","modified_gmt":"2018-12-28T09:37:54","slug":"disable-feeds-and-hide-usernames","status":"publish","type":"plugin","link":"https:\/\/ast.wordpress.org\/plugins\/disable-feeds-and-hide-usernames\/","author":14004557,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_crdt_document":"","version":"1.1","stable_tag":"1.2","tested":"5.0.25","requires":"3.0.1","requires_php":"","requires_plugins":"","header_name":"Disable Feeds And Hide Usernames","header_author":"Laxman Thapa","header_description":"","assets_banners_color":"","last_updated":"2018-12-28 09:37:54","external_support_url":"","external_repository_url":"","donate_link":"http:\/\/www.lakshman.com.np\/","header_plugin_uri":"","header_author_uri":"","rating":4,"author_block_rating":0,"active_installs":300,"downloads":4199,"num_ratings":3,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation"],"tags":[],"upgrade_notice":[],"ratings":{"1":0,"2":"1","3":0,"4":0,"5":"2"},"assets_icons":[],"assets_banners":[],"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0","1.1","1.2"],"block_files":[],"assets_screenshots":[],"screenshots":[],"jetpack_post_was_ever_published":false},"plugin_section":[],"plugin_tags":[23804,132096,132097],"plugin_category":[],"plugin_contributors":[98151],"plugin_business_model":[],"class_list":["post-54415","plugin","type-plugin","status-publish","hentry","plugin_tags-disable-feeds","plugin_tags-hide-username","plugin_tags-remove-rss","plugin_contributors-thapalaxman","plugin_committers-thapalaxman"],"banners":[],"icons":{"svg":false,"icon":"https:\/\/s.w.org\/plugins\/geopattern-icon\/disable-feeds-and-hide-usernames.svg","icon_2x":false,"generated":true},"screenshots":[],"raw_content":"\n

Disable Feeds And Hide Usernames<\/h3>\n\n

removes the rss feeds like below. For a simple CMS site it is not required.\n* http:\/\/example.com\/feed\/\n* http:\/\/example.com\/feed\/rss\/\n* http:\/\/example.com\/feed\/rss2\/\n* http:\/\/example.com\/feed\/rdf\/\n* http:\/\/example.com\/feed\/atom\/<\/p>\n\n

Why Hide WordPress Usernames<\/h4>\n\n

WordPress usernames can easily be guessed. If guessed it makes the attackers\u2019 life easier especially in case of a targeted WordPress hack attack. Attackers can use a tool such as WPScan to guess your WordPress username or simply by entering a URL such as the following:<\/p>\n\n

http:\/\/www.example.com\/?author=1<\/p>\n\n

If the author ID is valid then they will be redirected to the author URL, for example:<\/p>\n\n

http:\/\/www.example.com\/author\/admin<\/p>\n\n

The above is possible even when you change the WordPress user IDs. For example if you changed the user ID to 1000, then by requesting the URL http:\/\/www.example.com\/?author=1000 the attacker can guess the username. This means that you would be delaying the guessing attack but not completely eliminating it.<\/p>\n\n

WordPress usernames can also be found in the source of rss feeds.<\/p>\n\n

Disable Feeds And Hide Usernames<\/h3>\n\n

hides the usernames to make it harder for the attacker.<\/p>\n\n\n

    \n
  1. Install using the WordPress built-in Plugin installer, or Extract the zip file and drop the contents in the wp-content\/plugins\/<\/code> directory of your WordPress installation.<\/li>\n
  2. Activate the plugin through the 'Plugins' menu in WordPress.<\/li>\n<\/ol>","raw_excerpt":"This tiny and lightweight plugin removes all the rss feeds and hides usernames.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/ast.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/54415","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ast.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/ast.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/ast.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=54415"}],"author":[{"embeddable":true,"href":"https:\/\/ast.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/thapalaxman"}],"wp:attachment":[{"href":"https:\/\/ast.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=54415"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/ast.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=54415"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/ast.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=54415"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/ast.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=54415"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/ast.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=54415"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/ast.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=54415"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}