Now it starts to warn my clients for all kinds of vulnerabilities, which makes them nervous. While they don’t have to be nervous, since I’m using a top notch security plugin (Malcare).
I don’t like this way of pushing new options that I don’t need (as well as suggesting I need their Pro version), and have nothing to do with the original task of the plugin: forcing SSL. It’s getting bloated. These extra options should be incorporated in a separate plugin.
]]>For now I don’t feel comfortable making this changes. Maybe in the future I try it again but for the moment I will avoid it due to its complexity.
Also it requires to activate “Lite Mode” and this messages shows up which I also don’t feel safe/comfortable making this change.
Lite Mode will set these predefined paths:
Login Path: /wp-login.php => /newlogin
Core Contents Path: /wp-content => /core
Core Includes Path: /wp-includes => /lib
Uploads Path: /wp-content/uploads => /storage
Author Path: /author => /writer
Plugins Path: /wp-content/plugins => /core/modules
Themes Path: /wp-content/themes => /core/views
Comments Path: /wp-comments-post.php => /comments
Note! Paths are NOT physically change on your server.
The Lite Mode will add the rewrites rules in the config file to hide the old paths from hackers.
However this seems to be an amazing protection but those paths must be set by the WordPress admin because a hacker can simply guess the paths by looking at this “Lite Mode” message.
]]>I highly recommend Muhammad to anyone seeking small to complex customization tasks.
Thank you so much for a job well done!!!
]]>