Andi Dittrich

Aenon Dynamics

<p>This plugin is a collection of common used tweaks and features – each of them can be <strong>controlled independently</strong><br />
It is designed as compact <strong>all-in-one solution</strong> espacially for <strong>Web-Agencies</strong> and <strong>Advanced Users</strong> with security in mind: just audit and trust a single plugin.</p>
<h4>Visual Editor</h4>
<ul>
<li>VisualComponent Extension visualizes the HTML Element Structure (headings,section,p)</li>
<li>Remove the fixed-width restriction of the Editor-Area (set to 80% max)</li>
</ul>
<h4>E-Mail</h4>
<ul>
<li>Use <strong>External SMTP Mailserver</strong> to deliver mails transmitted by <code>wp_mail</code></li>
<li>No Third Party libraries required! WordPress Internal <strong>PHPMailer</strong> class is used</li>
<li>Support for <strong>TLS/SSL</strong> Connections</li>
<li>Set the Mail-From-Name and Mail-From-Address manually</li>
<li>Fix phpmailerExceptions by setting the mail-from parameter to a valid address</li>
<li>Control New User Registration E-Mails (send to admin and/or user)</li>
</ul>
<h4>Automatic Updates</h4>
<ul>
<li>Control Automatic-Update policy</li>
<li>Enable automatic Theme Updates</li>
<li>Enable automatic Plugin Updates</li>
<li>Disable Automatic Updates</li>
<li>Disable Update Notification (E-Mail)</li>
</ul>
<h4>Permalinks/Rewrite Rules</h4>
<ul>
<li>Add <code>.html</code> extension to pages – e.g. <code>privacy-protecton.html</code></li>
<li>Add <code>.html</code> extension to categories – e.g. <code>category/uncategorized.html</code></li>
<li>Optional or enforced html extensions (backward compatibility)</li>
<li>Remove <strong>embed</strong> Rewrite Rules</li>
<li>Remove <strong>feed</strong> Rewrite Rules</li>
</ul>
<h4>Virtual Permalink URLs</h4>
<ul>
<li>Placeholders like <code>link://post.local/1234</code> can be used within the Link-Insert-Dialogs and got replaced by the real link during rendering – this avoids problems with different domains names.</li>
</ul>
<h4>XML Sitemap</h4>
<ul>
<li>Automatical XML Sitemap generation <code>sitemap.xml</code> (SEO)</li>
<li>Modern Search-Engines like Google, Bing can easier index your posts/pages</li>
<li>Only <strong>Posts</strong> and <strong>Pages</strong> are displayed</li>
<li>Password protected posts/pages or unpublished content is ignored!</li>
<li>XML Format regarding the <a href="https://www.sitemaps.org/protocol.html" rel="nofollow ugc">sitemaps.org specification</a></li>
</ul>
<h4>Security</h4>
<ul>
<li>Disable XMLRPC API (Really!)</li>
<li>Restrict REST (JSON) API Access to <strong>Admin</strong> and <strong>Editor</strong> User</li>
</ul>
<h4>System Tweaks</h4>
<ul>
<li>Disable Emojis</li>
<li>Disable Smileys</li>
<li>Disable oEmbeds</li>
<li>Hide Admin Toolbar</li>
<li>Hide WordPress Generator Tag</li>
<li>Hide Windows Live Writer manifest file link</li>
<li>Hide Meta Pagination Links</li>
<li>Hide Feed Links</li>
<li>Hide Resource Hints</li>
<li>Disable RSS Feeds</li>
<li>Disable Atom Feeds</li>
<li>Disable RDF Feeds</li>
</ul>
<h4>Google Analytics</h4>
<ul>
<li>Google Analytics Support – just add your Tracking-ID</li>
<li>AnonymizeIP Option</li>
<li>OPT-OUT Shortcode/Button (required by GDPR/DSGVO) – also works with Caching Plugins or CDN Servers</li>
<li>IE8 Compatible</li>
</ul>
<h4>Matomo/Piwik Analytics</h4>
<ul>
<li>Matomo v3 Support – add your Host URL + Site ID – thats it!</li>
<li>OPT-OUT Shortcode/Button (required by GDPR/DSGVO) – also works with Caching Plugins or CDN Servers</li>
<li>Simple Page Name Option (Records the Document Title without Blog Name)</li>
<li>DoNoTrack Option</li>
<li>Option to add the Hostname to your Document Title (useful for multidomain sites)</li>
</ul>


Tweakr – Utility Toolkit

Supercharges your Blog with production grade Tweaks, Features and Utilities

Luis Celadita

<p><strong>This plugin is fully compatible with Autoptimize and any cache plugin (Cache Enabler or Wp Super Cache by example)</strong></p>
<p>Some of the tweaks that this plugin automatically applies securely are the following:</p>
<h4>SET HTTP SECURITY HEADERS</h4>
<ul>
<li>X-Frame-Options: SAMEORIGIN</li>
<li>X-XSS-Protection: 1;mode=block</li>
<li>Referrer-Policy: no-referrer-when-downgrade</li>
<li>X-Content-Type-Options: nosniff</li>
<li>Strict-Transport-Security: max-age=15552000</li>
<li>Content-Security-Policy</li>
</ul>
<h4>REMOVE THIS</h4>
<ul>
<li>Remove Really Simple Discovery link from header</li>
<li>Remove wlwmanifest.xml (Windows Live Writer) from header</li>
<li>Remove Shortlink URL from header</li>
<li>Remove WordPress Generator Version from header</li>
<li>Remove s.w.org DNS Prefetch</li>
<li>Remove generator name from RSS Feeds</li>
<li>Remove Capital P Dangit filter</li>
<li>Remove WordPress and WooCommerce meta generator tags</li>
<li>Remove Jquery_migrate</li>
<li>Remove Dashicons in admin bar (only for non logged users)</li>
<li>Remove Post oEmbed</li>
</ul>
<h4>AND MORE AUTO SETTINGS</h4>
<ul>
<li>Change Control Heartbeat API interval (60 seconds)</li>
<li>Disable the XML-RPC interface</li>
<li>Disable PDF thumbnails preview</li>
<li>Disable Self Pingbacks</li>
<li>Limit Post Revisions to 1</li>
<li>Add IDs to posts, pages, and categories</li>
</ul>
<p>Just activate the plugin and test your site’s speed in your favourite tool (GTMetrix, Pingdom Tools, Securityheaders.com, etc.)</p>


AutoTweaks

WP Classic Setup: Removes WP version, dashicons, oEmbed, Jquery Migrate, XMLRPC. Set Http security headers, heartbeat to 60s, Post revisions to 1, etc

Tweakr – Utility Toolkit vs AutoTweaks