RotiStudio

Tamas Rottenbacher

Hungarian: <a href="https://rotistudio.hu/bovitmenyek/refitune-eszkoztar-wordpress-finomhangolashoz/" rel="nofollow ugc">Magyar nyelvű bővítmény leírás</a>
RefiTune – Site refiner toolkit is your Swiss Army knife for WordPress optimization. Whether you’re cleaning up unnecessary code, securing your login page, or customizing the admin experience, this plugin puts the power in your hands.
Each feature can be enabled or disabled individually with just one click — no coding required. A clean, organized dashboard shows you exactly what’s active and what’s not.
What’s Inside? (33 Modules)
Performance: 
* Header Cleanup – Strip out unnecessary wp_head bloat for faster loading. 
* Feed Management – Take control of your RSS/Atom feeds. 
* Disable Emoji – Remove WordPress emoji scripts. 
* Disable jQuery Migrate – Drop legacy jquery-migrate for leaner pages. 
* Disable oEmbed – Stop automatic embedding of YouTube, Vimeo, Twitter, and other external URLs. 
* Remove Asset Version Query Strings – Strip ?ver= from frontend CSS and JS URLs. 
* Post Revisions Limit – Keep your database tidy by limiting stored revisions. 
* Auto-save Interval – Control how often WordPress auto-saves your work. 
* Trash Auto-Delete – Set how long items stay in trash before permanent deletion. 
* Heartbeat API Control – Tune or disable Heartbeat in admin, frontend, and post editor.
Security: 
* Disable XML-RPC – Lock down the XML-RPC interface completely. 
* Disable Trackback/Pingback – Stop spam by disabling trackbacks and pingbacks. 
* Disable File Editor – Hide the built-in code editor for extra security. 
* Automatic Updates Control – Global tri-state control for automatic plugin, theme, translation, and core (minor, major, development) updates; reschedule update checks (WordPress default twice daily, daily, or every 3/7/14 days). Respects <code>AUTOMATIC_UPDATER_DISABLED</code> and <code>WP_AUTO_UPDATE_CORE</code> in wp-config.php when defined. 
* Login Error Messages – Make login errors generic to prevent username fishing. 
* Restrict Admin Access – Choose which roles can access wp-admin. 
* REST API Restrictions – Smart restrictions for sensitive REST API endpoints. 
* Login Limit – Block brute-force attacks by limiting failed login attempts. 
* Verified Upload – Block disguised uploads such as double extensions, MIME mismatches, and embedded script markers.
Visual: 
* Hide Admin Bar – Selectively hide the admin bar for specific roles. 
* Block Visibility (Mobile) – Show/hide Gutenberg blocks on mobile or desktop. 
* Login Page Customization – Brand your wp-login.php with custom logo and colors.
Email: 
* Email Notifications – Fine-tune or disable WordPress system emails. 
* Email sending – Configure external SMTP or disable all emails completely.
Miscellaneous: 
* Disable Comments – Turn off comments site-wide (with WooCommerce review support). 
* External Links in New Window – Auto-open external links in new tabs (with proper rel attributes). 
* Enable Page Excerpt – Enable excerpt fields for pages (not just posts). 
* Clean Upload Filenames – Sanitize image and document filenames on upload (accents, spaces, special characters). 
* SVG Upload – Allow SVG uploads with built-in security filtering. 
* AVIF Upload – Support modern AVIF image format uploads. 
* Role Redirects – Send users to custom pages after login or logout based on their role. 
* Maintenance Mode – Temporarily block visitors while you work on the site. 
* Dynamic Year Shortcodes – Display the current year via <code>[refi-year]</code> or duration via <code>[refi-year from="2006"]</code> shortcodes.
Do you have other plugins? Yes, check my plugins website: <a href="https://rotistudio.com/" rel="nofollow ugc">rotistudio.com</a> 
Where can we learn more about your work? Check my personal website there: <a href="https://rottenbacher.hu/" rel="nofollow ugc">rottenbacher.hu</a> 
Plugin GitHub repository: <a href="https://github.com/rotisoft/refitune" rel="nofollow ugc">github.com/rotisoft/refitune</a>
<h3>Translations</h3>
RefiTune – Site refiner toolkit speaks your language! Currently available in: 
* 🇬🇧 English (default — source strings in code and <code>refitune.pot</code>) 
* 🇭🇺 Hungarian (Magyar) — <code>refitune-hu_HU.po</code>
The plugin is fully translation-ready. Want to contribute a translation? Language files go in <code>/wp-content/plugins/refitune/languages/</code>. Compile <code>.po</code> to <code>.mo</code> (e.g. with Poedit, Loco Translate, or <code>wp i18n make-mo</code>) for WordPress to load translations.
Text Domain: <code>refitune</code>

RefiTune – Site refiner toolkit

Take control of WordPress with smart performance tweaks, security enhancements, and usability improvements. RefiTune is all in one toolkit.

Thoriq Firdaus

This plugin gives you the ability to manage core WordPress features like Comments, the Block Editor (Gutenberg), Emojis, XML-RPC, Feeds, Updates, Automatic Updates, Cron, Heartbeat, and more. If you don’t need certain features, you can easily toggle them off or customize their behavior.
It also includes additional utility features, like showing your site’s environment type in the admin bar, enabling maintenance or private mode, or using random URLs for media pages, which you can enable or disable as needed.
<h3>Features</h3>
This plugin organizes these settings into sections so you can quickly find and manage what you need:
<h4>General</h4>
Tweak key WordPress features to fit your needs:
<ul>
<li>Block Editor: Prefer the Classic Editor? Disable the Block Editor for all or specific post types.</li>
<li>Block-based Widgets: Turn off the “Block Widgets Editor”.</li>
<li>Comments: Disable comments and remove related elements in the admin area.</li>
<li>Revisions: Disable or limit the number of post revisions to save to improve performance.</li>
<li>Post Embed: Stop other sites from embedding your post content.</li>
<li>Self-ping: Prevent pingbacks to your own site.</li>
<li>Feeds: Disable RSS feeds if you don’t need them.</li>
</ul>
<h4>Admin</h4>
Customize your admin experience:
<ul>
<li>Dashboard Widgets: Remove unwanted or all dashboard widgets.</li>
<li>Footer Text: Get rid of the Thank you for creating with WordPress footer text.</li>
<li>Update Nags: Hide update notices for WordPress, plugins, and themes.</li>
<li>Admin Bar: Remove the admin bar on your site’s front end.</li>
<li>Howdy Text: Replace the Howdy greeting in the admin bar.</li>
<li>Environment Type: Display site’s environment type (e.g. Development, Staging, Production) in the admin bar.</li>
</ul>
<h4>Media</h4>
Adjust media-related settings:
<ul>
<li>Attachment Page: Disable attachment pages or re-enable them on WordPress 6.4+.</li>
<li>Attachment Slug: Use random URLs for media pages to avoid slug conflicts.</li>
<li>Infinite Scroll: Restore infinite scroll in the Media Library.</li>
<li>Big Image Size: Prevent WordPress to scale down big images.</li>
<li>Image Quality: Adjust the quality of uploaded images (JPEG only).</li>
</ul>
<h4>Site</h4>
Control access and assets on your site:
<ul>
<li>Search: Prevent use from using search on your site to find posts, pages, and other content.</li>
<li>Sitemap: Disable built-in XML sitemaps in WordPress.</li>
</ul>
Unload some of the assets that are not always necessary for your site:
<ul>
<li>Emojis: Improve performance by removing emoji scripts and styles.</li>
<li>Script Version: Remove version query strings from scripts and styles URLs.</li>
<li>jQuery Migrate: Disable jQuery Migrate if it’s not needed.</li>
</ul>
Clean-up some unused metadata from your site:
<ul>
<li>RSD Link: Remove the Really Simple Discovery (RSD) tag.</li>
<li>Generator Meta Tag: Remove the WordPress version meta tag.</li>
<li>Shortlink: Remove the shortlink meta tag.</li>
</ul>
<h4>Security</h4>
Improve your site’s security by disabling or limiting access to certain features:
<ul>
<li>File Edit: Disable the built-in file editor for themes and plugins.</li>
<li>XML-RPC: Disable the XML-RPC endpoint.</li>
<li>API Authentication: Require authentication for all REST API requests.</li>
</ul>
Manage passwords policy on the site:
<ul>
<li>Reset Password: Prevent users from resetting their passwords.</li>
<li>Application Passwords: Disable Application Passwords and remove related UI elements.</li>
</ul>
<h4>Advanced</h4>
For advanced users, you may configure these following features, but do it carefully:
<ul>
<li>Mailing: Prevent WordPress to send outgoing mail.</li>
<li>Updates: Enable or disable updates for WordPress, plugins, and themes.</li>
<li>Cron: Disable WP-Cron and use a real cron job.</li>
<li>Heartbeat: Adjust or disable the Heartbeat API to reduce resource usage.</li>
</ul>

Feature Flipper

Disable Comments, Gutenberg, Emojis, and other features you don't need in WordPress

RefiTune – Site refiner toolkit vs Feature Flipper