x3mgroup

<p>This will add site-wide tweaks to the FUNCTIONS.PHP of any wp-theme, and increases the security of a WordPress Site.<br />
The creation of this plugin was based on Webfactory’s Ninja Security Plugin!</p>
<p>There is no setup or configuration screen on the current version, but it’s easy enough to edit the plugin. Supports WP Multisite installations</p>
<p>These are the tweaks:</p>
<p>Removes WordPress<br />
META HEADER version info, so hackers can’t find  which version of WP is running!</p>
<p>Replaces the login information  so hackers will not know if the USERNAME or the PASSWORD was wrong!</p>
<p>Disables the EDITING of Themes and Plugins by NON ADMIN users!</p>
<p>Removes<br />
WLW (Windows Live Writer) link is present in the header,<br />
which is only needed if Winodws Live Writer needs to be used!</p>
<p>Please feel free to add your own tweaks. If you do, please be so kind and leave a message at support!</p>


X3M Site-Wide Ninja Tweaks

Andi Dittrich

Aenon Dynamics

<p>This plugin is a collection of common used tweaks and features – each of them can be <strong>controlled independently</strong><br />
It is designed as compact <strong>all-in-one solution</strong> espacially for <strong>Web-Agencies</strong> and <strong>Advanced Users</strong> with security in mind: just audit and trust a single plugin.</p>
<h4>Visual Editor</h4>
<ul>
<li>VisualComponent Extension visualizes the HTML Element Structure (headings,section,p)</li>
<li>Remove the fixed-width restriction of the Editor-Area (set to 80% max)</li>
</ul>
<h4>E-Mail</h4>
<ul>
<li>Use <strong>External SMTP Mailserver</strong> to deliver mails transmitted by <code>wp_mail</code></li>
<li>No Third Party libraries required! WordPress Internal <strong>PHPMailer</strong> class is used</li>
<li>Support for <strong>TLS/SSL</strong> Connections</li>
<li>Set the Mail-From-Name and Mail-From-Address manually</li>
<li>Fix phpmailerExceptions by setting the mail-from parameter to a valid address</li>
<li>Control New User Registration E-Mails (send to admin and/or user)</li>
</ul>
<h4>Automatic Updates</h4>
<ul>
<li>Control Automatic-Update policy</li>
<li>Enable automatic Theme Updates</li>
<li>Enable automatic Plugin Updates</li>
<li>Disable Automatic Updates</li>
<li>Disable Update Notification (E-Mail)</li>
</ul>
<h4>Permalinks/Rewrite Rules</h4>
<ul>
<li>Add <code>.html</code> extension to pages – e.g. <code>privacy-protecton.html</code></li>
<li>Add <code>.html</code> extension to categories – e.g. <code>category/uncategorized.html</code></li>
<li>Optional or enforced html extensions (backward compatibility)</li>
<li>Remove <strong>embed</strong> Rewrite Rules</li>
<li>Remove <strong>feed</strong> Rewrite Rules</li>
</ul>
<h4>Virtual Permalink URLs</h4>
<ul>
<li>Placeholders like <code>link://post.local/1234</code> can be used within the Link-Insert-Dialogs and got replaced by the real link during rendering – this avoids problems with different domains names.</li>
</ul>
<h4>XML Sitemap</h4>
<ul>
<li>Automatical XML Sitemap generation <code>sitemap.xml</code> (SEO)</li>
<li>Modern Search-Engines like Google, Bing can easier index your posts/pages</li>
<li>Only <strong>Posts</strong> and <strong>Pages</strong> are displayed</li>
<li>Password protected posts/pages or unpublished content is ignored!</li>
<li>XML Format regarding the <a href="https://www.sitemaps.org/protocol.html" rel="nofollow ugc">sitemaps.org specification</a></li>
</ul>
<h4>Security</h4>
<ul>
<li>Disable XMLRPC API (Really!)</li>
<li>Restrict REST (JSON) API Access to <strong>Admin</strong> and <strong>Editor</strong> User</li>
</ul>
<h4>System Tweaks</h4>
<ul>
<li>Disable Emojis</li>
<li>Disable Smileys</li>
<li>Disable oEmbeds</li>
<li>Hide Admin Toolbar</li>
<li>Hide WordPress Generator Tag</li>
<li>Hide Windows Live Writer manifest file link</li>
<li>Hide Meta Pagination Links</li>
<li>Hide Feed Links</li>
<li>Hide Resource Hints</li>
<li>Disable RSS Feeds</li>
<li>Disable Atom Feeds</li>
<li>Disable RDF Feeds</li>
</ul>
<h4>Google Analytics</h4>
<ul>
<li>Google Analytics Support – just add your Tracking-ID</li>
<li>AnonymizeIP Option</li>
<li>OPT-OUT Shortcode/Button (required by GDPR/DSGVO) – also works with Caching Plugins or CDN Servers</li>
<li>IE8 Compatible</li>
</ul>
<h4>Matomo/Piwik Analytics</h4>
<ul>
<li>Matomo v3 Support – add your Host URL + Site ID – thats it!</li>
<li>OPT-OUT Shortcode/Button (required by GDPR/DSGVO) – also works with Caching Plugins or CDN Servers</li>
<li>Simple Page Name Option (Records the Document Title without Blog Name)</li>
<li>DoNoTrack Option</li>
<li>Option to add the Hostname to your Document Title (useful for multidomain sites)</li>
</ul>


Tweakr – Utility Toolkit

Supercharges your Blog with production grade Tweaks, Features and Utilities

X3M Site-Wide Ninja Tweaks vs Tweakr – Utility Toolkit