The first thing hackers see before trying to apply any cracking attempts on your wordpress-based websites is the version of wordpress you are having. Experts say you should hide that version number from your output html to make it difficult for crackers to get into your site.
Prior to wordpress 2.5, this was written in header.php theme file. So you could simply delete that line:
<meta name=”generator” content=”WordPress <?php bloginfo(‘version’); ?>” />
But from wordpress 2.5 onward, this is generated automatically by wordpress core engine and inserted in <head> part of your site’s HTML. I have written a little plugin “hide-wp-generator” that hides meta-generator tag altogether and thus helps you keeping your site secure.
Dan Spielman
July 14, 2008 — 11:41 am
Thanks for the simple script, how can I check to make sure it is working.
Sohail
July 14, 2008 — 3:55 pm
View source of your blog. You should not see this line: <meta name=”generator” content=”WordPress 2.5.1” />
UTP
July 18, 2008 — 8:18 pm
I was afraid to comment here…you wont come and hack my site right?
Cheers…stay sane…
Sohail
July 19, 2008 — 10:56 pm
UTP – Welcome to my blog. And no, I wont :)
Myra
November 27, 2008 — 8:58 am
hi couldn’t find a place to comment there.
anyways I just wanted to say you are doing an amazing job!!! ‘Folk Punjab’
I just love it!!