WordPress.org

1. tmarques
   Member
   Posted 3 years ago #

   Hi.
   I've been tweaking my wordpress theme and I noticed that WordPress itself is outputing the wordpress version in the HTML the client will receive to see the blog.
   I rather hide that it's using wordpress but that's not an issue. Given that wordpress has some serious security vulnerabilities from time to time, isn't it a better practice to not output it's version!?!
   This way the attacker would have to digg harder to find which exploits are available... Right?

   This file is including wordpress's version: wp-includes/general-template.php

   Best regards,
   Tiago Marques

2. Matt Hill
   Member
   Posted 3 years ago #

   http://just-thinkin.net/2008/04/wordpress-25-plugin-keeps-the-version-out-of-source/

3. tmarques
   Member
   Posted 3 years ago #

   tks!

Topic Closed

This topic has been closed to new replies.