admin管理员组

文章数量:1333210

Is there a way that we could rename wp-includes folder

I have found out there are ways to do for other folders. But how do we do it for wp-includes folder? /

Is there a way that we could rename wp-includes folder

I have found out there are ways to do for other folders. But how do we do it for wp-includes folder? http://pythoughts/how-to-hide-that-you-use-wordpress/

Share Improve this question edited Aug 1, 2013 at 14:44 fuxia 107k38 gold badges255 silver badges459 bronze badges asked Aug 1, 2013 at 14:32 RaghavRaghav 1231 gold badge1 silver badge6 bronze badges 4
  • 2 If you're looking to mask the fact that you use WordPress, have a look at this: kovshenin/2013/… – Pat J Commented Aug 1, 2013 at 14:39
  • 2 Even you could do that: the first enqueued core JavaScript would tell the new name to everyone. This is really pointless. – fuxia Commented Aug 1, 2013 at 14:46
  • 1 I agree with toscho. There are twenty different ways I can think of off the top of head to tell that a site is running WordPress, and I can identify many other CMS's too. A malicious script could run all those checks and more in less than a second. Hiding that you use WordPress is not worth the work and I doubt it affords much security. – s_ha_dum Commented Aug 1, 2013 at 14:56
  • 1 It affords decent security through obfuscation if you address all 20 ways. – Orun Commented Oct 26, 2015 at 21:35
Add a comment  | 

1 Answer 1

Reset to default 3

Unfortunately not at the moment. If you look in wp-includes/default_constants.php, the WP_CONTENT_DIR and other constants all have a if ( ! defined(constant) ) check before them.

WPINC (the wp-includes constant) does not. It's defined in wp-settings.php, and has no if ( ! defined(WPINC) ) check, so defining it before hand (in your wp-config.php) would just result in an error.

Also, altering core you could do this, but as soon as you update WordPress, Core files would be reverted, and therefore it would revert back to wp-includes.

I suggestion just masking your site with WordPress in a subdirectory (call it xadw or something nobody would guess) and just set the home URL to be the actual domain. Then put your wp-content folder in another folder, so it won't be obviously when people look at uploads, etc.

本文标签: How to rename wpincludes folder