Add Security Headers

function add_security_headers() { header(“Strict-Transport-Security: max-age=31536000; includeSubDomains; preload”); // header(“Content-Security-Policy: default-src ‘self’; img-src ‘self’ data: https:; script-src ‘self’ ‘unsafe-inline’ https:; style-src ‘self’ ‘unsafe-inline’ https:; frame-ancestors ‘self’”); header(“X-Frame-Options: SAMEORIGIN”); header(“X-Content-Type-Options: nosniff”); header(“X-XSS-Protection: 1; mode=block”); header(“Referrer-Policy: strict-origin-when-cross-origin”); header(“Permissions-Policy: camera=(), microphone=(), geolocation=()”); } add_action(‘send_headers’,…Continue reading

Manage Admin Menus

function hide_admin_menus() { remove_menu_page( ‘edit.php’ ); // Posts remove_menu_page( ‘upload.php’ ); // Media remove_menu_page( ‘edit-comments.php’ ); // Comments remove_menu_page( ‘themes.php’ ); // Appearance remove_menu_page( ‘plugins.php’ ); // Plugins remove_menu_page( ‘users.php’ ); // Users remove_menu_page( ‘tools.php’ ); // Tools // remove_menu_page(…Continue reading

Disable Password Reset

// Disable Password Reset Functionality function disable_password_reset() { return false; } add_filter(‘allow_password_reset’, ‘disable_password_reset’); // Remove “Lost Your Password?” Link function remove_lostpassword_text($text) { if ($text == ‘Lost your password?’) { $text = ”; } return $text; } add_filter(‘gettext’, ‘remove_lostpassword_text’); // Block…Continue reading