Arthur Ronconi

Helmut Wandl

Advanced Settings is a powerful WordPress plugin that provides settings you would expect to find in the WordPress core. It is lightweight, performant and offers a modern, fast and user-friendly interface.
🚀 PERFORMANCE 
Advanced Settings 3 is optimized for extreme performance. It even loads only necessary PHP. 
<a href="https://wordpress.org/plugins/advanced-settings#will%20the%20plugin%20become%20slower%20with%20more%20features%3F" rel="ugc">→ details in FAQ</a>
🪶 LIGHTWEIGHT 
Advanced Settings 3 is lightweight (only about 0.5 MB) and discreet (no dashboard hijacking). 
<a href="https://wordpress.org/plugins/advanced-settings#how%20can%20the%20plugin%20be%20lightweight%20despite%20so%20many%20features%3F" rel="ugc">→ details in FAQ</a>
🔒 SECURITY 
Advanced Settings 3 has been independently reviewed for security vulnerabilities via Patchstack. 
<a href="https://wordpress.org/plugins/advanced-settings#how%20is%20the%20security%20of%20the%20plugin%20ensured%3F" rel="ugc">→ details in FAQ</a>
✳️ INFO ABOUT THE 2 BAD RATINGS 
Bad ratings occurred in 2017 because users used outdated PHP versions, but can’t happen again. 
<a href="https://wordpress.org/plugins/advanced-settings#what%20caused%20the%20two%20bad%20ratings%3F" rel="ugc">→ details in FAQ</a>
—
<h3>FEATURES</h3>
🩷 FEATURE REQUESTS ARE WELCOME 
Advanced Settings 3 was developed to help as many users as possible. If you’d like to see a feature added to this plugin, please let us know. Don’t worry, we’ll keep the plugin fast and lean; this is a high priority for us. We’ll only implement features that don’t conflict with this.
<h4>Admin Area</h4>
<ul>
<li>Hide the top admin bar for all users in the frontend</li>
<li>Hide WordPress update message in dashboard</li>
<li>Hide the welcome panel in the dashboard</li>
<li>Hide the default widgets in the dashboard 💥 new</li>
<li>Customize the admin area branding 💥 new</li>
</ul>
<h4>Frontend</h4>
<ul>
<li>Remove PHP version from HTTP headers 💥 new</li>
<li>Add security HTTP headers 💥 new</li>
<li>Automatically add FavIcon (when favicon.ico, favicon.png or favicon.svg exists in template folder)</li>
<li>Add Facebook Open Graph meta tags</li>
<li>Remove shortlink meta tag</li>
<li>Remove RSD (Weblog Client Link) meta tag</li>
<li>Remove WordPress generator meta tag</li>
<li>Automatically add description meta tag using blog description and post excerpt (SEO)</li>
<li>Disable author pages</li>
<li>Remove wptexturize filter</li>
<li>Disable auto embed of external content 💥 new</li>
<li>Limit excerpt length</li>
<li>Add “Read more” link after excerpt</li>
<li>Remove trackbacks and pingbacks from comment count</li>
<li>Protect email addresses from spam bots</li>
<li>Compress HTML code</li>
<li>Remove HTML comments (except conditional IE comments)</li>
<li>Disable emoji image replacement</li>
</ul>
<h4>Editing</h4>
<ul>
<li>Disable posts auto saving</li>
<li>Limit post revisions 💥 new</li>
<li>Allow SVG uploads for admins 💥 new</li>
<li>Downsize images on upload to max size</li>
<li>Set JPEG quality</li>
<li>Add thumbnail support</li>
<li>Automatically generate post thumbnail (from first image in post)</li>
</ul>
<h4>System</h4>
<ul>
<li>Hide default WordPress favicon</li>
<li>Disable comment system</li>
<li>Disable XML-RPC 💥 new</li>
<li>Disable public REST API 💥 new</li>
<li>Prevent installation of new default WordPress themes during core updates</li>
<li>Disable email notifications for core updates</li>
<li>Disable email notifications for plugin updates</li>
<li>Disable email notifications for theme updates</li>
<li>Create custom post types 💥 renewed</li>
</ul>
<h4>Developer</h4>
<ul>
<li>Display SQL queries and page load time</li>
</ul>
<h4>Configuration</h4>
<ul>
<li>Show/hide deprecated features</li>
<li>Show/hide experimental features</li>
<li>Configure tracking consent for feature usage statistics</li>
<li>Configure visibility of user guide</li>
</ul>
Contribute on github: <a href="https://github.com/eHtmlu/advanced-settings" rel="nofollow ugc">github.com/eHtmlu/advanced-settings</a>

Advanced Settings 3

Adds settings that you might expect to find in the WordPress core.

FolioVision

Here are the plugin features:
WordPress Updates
WordPress has a major release three times per year, each time with a risk of breaking the way your website works. This plugin removes most of the messages to update (button from dashboard, the admin footer link and admin notice), while adding more information about versions to the updates page. You will see which version you are running and which versions which are available to you and given a choice about your updates.
WordPress also automatically updates your website to the latest minor release. We like that, but these updates can cause issues as well. That’s why BusinessPress delays the updates for 5 days.
This plugin also allows you to prevent your client from installing new plugins (many of which could either cripple or slow their website) while allowing clients to safely take care of existing plugin updates themselves.
<h3>You can disable the following capabilities for other admin users</h3>
<ul>
<li>Activate and deactivate plugins and themes</li>
<li>Update plugins and themes</li>
<li>Update WordPress core</li>
<li>Install, Edit and delete plugns and themes</li>
</ul>
Unnecessary WordPress features
Plugin by default disables the generator tag, REST API and Emojis to keep your site secure and fast. However you can enable these features back on if you prefer, just like the XML-RPC or oEmbed.
Login Logo
You can set your login logo and wp-admin color.
Admin Notices
Plugin by default moves the admin notices into Dashboard -> Notices screen where you can dismiss each notice. More and more plugins show their notices (some more important, some less) so BusinessPress cleans that up to keep you focused.
Login Protection
Plugin also supports fail2ban, see install instructions.
Login Lockout makes sure any user account that gets repeated bad login attempts (even from different IP addresses) gets locked down to ensure the password does not get guessed. User then gets an “Failed login attempts detected” email letting him unlock the account and reminding him to use a strong password.
Tweaks
<ul>
<li>Enable Google style results – Gives you similar layout and keyword highlight.</li>
<li>Enable Link Manager – Legacy feature of WordPress, hidden since version 3.5.</li>
<li>Enhance wp-admin Dropdowns – Makes long, unwieldy select boxes much more user-friendly, including search functionality.</li>
<li>Login redirection – After you log in you will be redirected back to the page where you clicked wp-login.php link, unless there was a custom redirect_to parameter. Uses HTTP referer.</li>
<li>Set Featured Images Automatically – First image in the post becomes the featured image on save.</li>
<li>WordPress core hotfix – are you getting error like “Unable to create directory ../images/2019/11. Is its parent directory writable by the server?” Since October 2019 WordPress doesn’t support ../ in the upload path. So we translate that path to absolute path and check if it’s in the site webroot and then let it pass</li>
<li>Disables the “Password Changed” admin email notifications when a Subscriber level user changes email address</li>
<li>Alphabetically sorting the wp-admin -> Settings menu, making it much easier to find any settings screen!</li>
<li>Hide Password Protected Posts – Password protected posts won’t show up anywhere unless you have the direct link or your are the admin or editor.</li>
<li>WooCommerce Search Speed – Speed up the search by only searching the billing email address and not shipping nor billing address.</li>
<li>Yearly dropdowns for posts filtering – If the standard list of months in wp-admin -> Posts or WooCommerce Orders and Subscriptions is going to show more than 10 months, the years will show instead. Will show only “Last 12 months” by default.</li>
</ul>
WAF
Detect bad requests and log the issue for fail2ban to take action: https://foliovision.com/wordpress/plugins/businesspress/malicious-requests-businesspress
Credits
This plugin integrates some of the amazing WordPress plugins which keep it lean and removed the unnecessary features:
Disable Embeds by Pascal Birchler with our own improvements 
Disable Emojis by Ryan Hellyer 
Disable REST API by Dave McHale 
Login Logo by Mark Jaquith with our own improvements 
WP Chosen by John James Jacoby with some small performance improvements
<a href="http://foliovision.com/support/" rel="nofollow ugc">Support</a>

BusinessPress

There are too many upgrades of WordPress (2 per year) and plugins. When it just works as expected, I am always worried if something will break my site. The pace is too much and too fast to follow. It is very stressful for a webdeveloper, especially when you manage several websites. This plugin removes the admin notifications, consequently, clients will not be tempted to click the update button and break something. It does this without sacrificing the automatic security WordPress updates.
We do the updates when we decide to do them. It removes a strong distraction (the number in the red badge is always encouraging to click on it) than can generate troubles.

As long as there is no standard way to separate security and bugfix updates that are always welcome, from upgrades that add new features (and may potentially break something), this plugin is doing a good job.

There are other tweaks regarding overall security and performance but I don't care about them since other plugins offer the same with more controls.

This plugin is an answer to a growing concern from webdeveloppers

BusinessPress lets you control the WordPress core updates and plugin installing/editing/upgrading to prevent issues with your business websites.

Advanced Settings 3 vs BusinessPress