Disable comments

add_action(‘admin_init’, function () { // Redirect any user trying to access comments page global $pagenow; if ($pagenow === ‘edit-comments.php’) { wp_safe_redirect(admin_url()); exit; } // Remove comments metabox from dashboard remove_meta_box(‘dashboard_recent_comments’, ‘dashboard’, ‘normal’); // Disable support for comments and trackbacks in…Continue reading

Completely Disable Comments

add_action(‘admin_init’, function () { // Redirect any user trying to access comments page global $pagenow; if ($pagenow === ‘edit-comments.php’) { wp_safe_redirect(admin_url()); exit; } // Remove comments metabox from dashboard remove_meta_box(‘dashboard_recent_comments’, ‘dashboard’, ‘normal’); // Disable support for comments and trackbacks in…Continue reading

Security: WordPress REST API schließen

function kb_disable_wp_rest_api($access) { // Überprüfung, ob der Benutzer im Admin-Bereich (Backend) ist if (is_user_logged_in() || is_admin()) { return $access; // Zugriff erlauben } // REST-API für nicht eingeloggte Benutzer deaktivieren return new WP_Error(‘rest_API_cannot_access’, __(‘REST API access is restricted.’), array(‘status’ =>…Continue reading

Security: Security Headers

add_action(‘send_headers’, function() { header(“X-Frame-Options: SAMEORIGIN”); header(“X-Content-Type-Options: nosniff”); header(“Strict-Transport-Security: max-age=31536000; includeSubDomains; preload”); header(“X-XSS-Protection: 1; mode=block”); header(“Referrer-Policy: strict-origin-when-cross-origin”); header(“Content-Security-Policy: upgrade-insecure-requests”); });Continue reading