Smart User Slug Hider

Beschreibung

The Smart User Slug Hider Plugin hides usernames in Author Pages URLs to enhance Security

Verwendung

The plugin automatically replaces user names with 16 digits coded strings. There are no settings. Just install and forget. Deactivating the Plugin restores the default WordPress behavior.

Version 4.0.0 Update Notice

Previous versions of this plugin used a function that was removed in PHP 7.2. Version 2 of this plugin introduced a so called Future Proof Mode, that used a different encryption method to work with PHP 7.2 and newer.

In version 4.0.0 only this new method is available. The old method was completely removed.

Unfortunately it is not possible to get the same result. This means that the coded User Slug changes if you haven’t activated Future Proof Mode yet.

Warum solltest Du dieses Plugin verwenden?

WordPress verwendet für die URLs der Autorenseiten das Muster example.com/author/name, wobei name den Anmeldenamen des Benutzers darstellt.

Das heißt, dass die Anmeldenamen aller Benutzer öffentlich sichtbar sind , was ein schwerwiegendes Sicherheitsrisiko darstellt.

The Smart User Slug Hider Plugin changes all author page URLs from e.g. example.com/author/john to something like example.com/author/e9e716def73f76ac.

Die Codes werden automatisch generiert und lassen keine Rückschlüsse auf die Benutzernamen zu. Die Standard-URLs von WordPress verursachen einen Fehler 404 (nicht gefunden).

Funktioniert auch für BuddyPress Mitglieder-Seiten.

As of version 4.0.0 also the author class from body tag is removed (see this topic)

Shortcodes

Das Plugin fügt zwei Shortcodes hinzu die Du in Deinen Posts verwenden kannst:

  • [smart_user_slug] der User Slug des Autors – z.B. e9e716def73f76ac
  • [smart_user_url] die URL der Autorenseite – z.B. example.com/author/e9e716def73f76ac
  • [smart_user_link] erstellt einen Link auf die Autorenseite

Theme Funktionen

Das Plugin stellt zwei Funktionen zur Verfügung die in Themes benutzt werden können:

  • get_smart_user_slug( $author_id ) gibt den User Slug des Autors zurück – der Parameter $author_id ist optional, wenn nicht angegeben, wird der Autor des aktuellen Posts verwendet
  • the_smart_user_slug( $author_id ) zum Anzeigen des User Slugs – der Parameter $author_id ist optional, wenn nicht angegeben, wird der Autor des aktuellen Posts verwendet

Support

Support Forum.

Video

How to easily close a HUGE WordPress Security Gap using the free Plugin Smart User Slug Hider

Do you like this plugin?

I spend a lot of my precious spare time to develop and maintain my free WordPress plugins. You don’t need to make a donation. No money, no beer, no coffee. If you like this plugin then please do me a favor and give it a good rating. Thanks.

Plugin Datenschutzinformationen

  • Dieses Plugin setzt keine Cookies
  • Dieses Plugin sammelt und speichert keine Daten
  • Dieses Plugin sendet keine Daten an externe Server

Peters‘ Plugins Privacy Information Page (englisch)

ClassicPress

This plugin is compatible with ClassicPress.

Mehr Plugins von Peter

Bleibe auf dem Laufenden

Folge mir auf Facebook
YouTube Kanal

FAQ

bisher keine

Rezensionen

16. Dezember 2019
Das Plugin verhindert, dass der Benutzer ausgespäht und der Nutzername z.B. für den Login genutzt wird. Ein wichtiges Plugin, das ich nicht missen möchte...!
30. August 2019
I used to install "Edit Author Slug" in every one of my website, but I always wished for simpler settings. I love this "smart User Slug Hider" because it needs no configuration if you have installed WordPress in PHP 7.2 or newer. It has been working perfectly so far, and seems to be lightweight. I'd highly recommend this plugin over "Edit Author Slug" if there will be only one author in a website, because it is unlikely for viewers to bookmark the author archive page, thus the page doesn't need a comprehensible URL.
20. Oktober 2019
As a web developer I have many websites out there and recently a client's site was hacked into. The mess that resulted required a complete rebuild. I would not want to go through that again. I already use 'login limited reload' and 'two-factor' log in so I must be fairly safe but it was irritating me that hackers can so easily find a username. Not any longer thanks to this plug in. Just activate and you're there but don't forget to change your WordPress display name so it does not show your username in the source code. Thank you Peter. EDIT It pains me to have to reduce my five star review to one star but the fact is that this plugin no longer works but actually reveals the username. I've tried to get the author's attention with a support question but no reply within three days and I see no update to this plugin in the last six months. It's a shame because it did work very well indeed. I won't give exact details of how the name is revealed although I suspect any hacker worth his salt will soon determine the answer. I hope the author will read this and let me have an email address where I can forward full details to him.
29. Januar 2019
I'm about to launch a BuddyPress network and want to comply with GDPR/DSGVO rules and user demands fo privacy as much as possible. This plugin is a must have! 1000 Dank.
15. Januar 2019
Excellent! I've been wondering for ages about this issue! Now it's fixed!!
16. Dezember 2018
Not much more to say, it does exactly what it needs to do. In conjunction with Limit Login Attempts, keeps the 'bots and other casual pests at bay.
Lies alle 27 Rezensionen

Mitwirkende & Entwickler

„Smart User Slug Hider“ ist Open-Source-Software. Folgende Menschen haben an diesem Plugin mitgewirkt:

Mitwirkende

„Smart User Slug Hider“ wurde in 2 Sprachen übersetzt. Danke an die Übersetzerinnen und Übersetzer für ihre Mitwirkung.

Übersetze „Smart User Slug Hider“ in deine Sprache.

Interessiert an der Entwicklung?

Durchstöbere den Code, sieh dir das SVN Repository an oder abonniere das Entwicklungsprotokoll per RSS.

Änderungsprotokoll

4.0.0 (2019-12-29)

  • remove user class from body tag (See here)
  • always use Future Proof Mode, old method removed
  • rewritten based on my Plugin Foundation PPF03

3 (2018-12-31)

  • Future Safe Mode renamed to Future Proof Mode
  • automatically activate Future Proof Mode if mcrypt is not availabe
  • code improvement
  • UI improvements
  • changed capability to manage_options to display admin page

2 (2018-03-14)

  • Future Safe Mode

1.5 (2017-11-16)

  • faulty display in WP 4.9 fixed

1.4 (2017-07-15)

  • fix for BuddyExtender plugin

1.3 (2017-07-17)

  • BuddyPress compatibility
  • redesigned admin interface
  • code improvement

1.2 (2016-10-04)

  • Shortcodes added
  • Theme Functions added

1.1 (2016-06-30)

  • Code Optimierungen
  • Plugin Info Seite hinzugefügt

1.0 (2014-10-02)

  • Initial Release