Enhance WordPress security by setting recommended file permissions, securing .htaccess, and disabling sensitive endpoints.

WP Fix It - WordPress Experts

Site Lockdown Security

Audit, protect, monitor, brand, and secure your WordPress site with Site Lockdown - Unique white label security branding.

Deep

Securing Setup helps protect your WordPress installation by: 
1. Allowing users to set recommended file permissions for directories and subdirectories. 
2. Automatically modifying the <code>.htaccess</code> file to: 
 – Protect the <code>debug.log</code> file from being accessed via the web. 
 – Restrict execution of specific file types (e.g., <code>.png</code>, <code>.jpg</code>), ensuring only selected file types are processed by the web server. 
3. Disabling sensitive WordPress endpoints such as: 
 – <code>system.multicall</code> from XML-RPC. 
 – The <code>users</code> endpoint in the REST API.
The plugin is user-friendly and includes an easy-to-access settings page.
You can view or contribute to the plugin’s source code on GitHub: 
[GitHub Repository]https://github.com/deeprahman/sswp)
<h3>Features</h3>
<ul>
<li>Set directory and subdirectory permissions for enhanced security.</li>
<li>Automate <code>.htaccess</code> file modifications.</li>
<li>Disable potentially vulnerable endpoints.</li>
<li>Tested with the latest version of WordPress.</li>
</ul>
<h3>Notes</h3>
After activation, the plugin adds a submenu named File Permission under the Tools menu, where you can configure settings.

Alternatives to Secure Setup

Top alternatives