smart User Slug Hider

Description

The smart User Slug Hider Plugin hides usernames in Author Pages URLs to enhance Security

If you like this plugin please do me favor and leave a review here on wordpress.org so that other people know it is helpful for you. Thanks!

Usage

The plugin automatically replaces user names with 16 digits coded strings. Just install and forget. Deactivating the Plugin restores the default WordPress behavior.

Why use this plugin?

WordPress uses the pattern example.com/author/name for author page URLs where name represents the users login name. This means that the login names from all your users are publicly visible which is a serious security flaw. The smart User Slug Hider Plugin changes all author page URLs from e.g. example.com/author/john to something like example.com/author/e9e716def73f76ac. The codes are generated automatically and its impossible to make conclusions about the user names. The WordPress default URLs will cause a 404 (not found) error.

Also works for BuddyPress member pages.

Future Safe Mode

Version 2 of this plugin introduced a new encryption mode, called Future Safe Mode. As of PHP version 7.1.0 the functions so far used by this plugin for encryption are marked as deprecated and your webserver may show a PHP Warning.

If Future Safe Mode is activated the plugin creates different Author Page URLs. If you have not used this plugin yet, it is recommended to activate Future Safe Mode. If you have already used the plugin you have to decide if you prefer to change the URLs of all Author Pages or to ignore the PHP Warnings.

Support

For support check the Support Forum.

GDPR Info

This plugin does not collect any data.

Shortcodes

The plugin adds three shortcodes you can use in your posts:

  • [smart_user_slug] – the user slug of the post author – e.g. e9e716def73f76ac
  • [smart_user_url] – the url of the post author’s profile page – e.g. example.com/author/e9e716def73f76ac
  • [smart_user_link] – adds a link to the post author’s profile page

Theme Functions

The plugin adds two functions that can be used in theme files:

  • get_smart_user_slug( $author_id ) to get the user slug for the author – the parameter $author_id is optional, if omitted the author`s ID of the current post is used
  • the_smart_user_slug( $author_id ) to display the user slug for the author – the parameter $author_id is optional, if omitted the author`s ID of the current post is used

More plugins from Peter

Reviews

Works perfectly for me, thank you

Thank you for this plugin – it works perfectly for me. I like that the plugin is set and forget. Just install and that’s it, everything is automatic; no settings to make. There is an unobtrusive settings page (under the main settings menu) with information about the plugin and a toggle to activate ‘future safe mode’, which is clearly explained. This is a very lightweight plugin and looking at the code it’s nicely written. So all in all, very happy to install this on my sites.

Always the first plugin I install on a new WP

One of the most annoying things on WordPress is how easily it shows the username of the admin user, making it 50% easier to hack the website. I like to create strong usernames and strong passwords, but what is that good for, if half of the equation is given out for free on every post you write? This plugin is the first one I install on every WordPress installation I make, and there’s been a few.

Great for stopping the bots

This is a lightweight plug-in that works well for throwing off the bots by hiding the username. It’s a nice little tool to have in your security arsenal.

Read all 21 reviews

Contributors & Developers

“smart User Slug Hider” is open source software. The following people have contributed to this plugin.

Contributors

“smart User Slug Hider” has been translated into 1 locale. Thank you to the translators for their contributions.

Translate “smart User Slug Hider” into your language.

Interested in development?

Browse the code, check out the SVN repository, or subscribe to the development log by RSS.

Changelog

2 (2018-03-14)

  • Future Safe Mode

1.5 (2017-11-16)

  • faulty display in WP 4.9 fixed

1.4 (2017-07-15)

  • fix for BuddyExtender plugin

1.3 (2017-07-17)

  • BuddyPress compatibility
  • redesigned admin interface
  • code improvement

1.2 (2016-10-04)

  • Shortcodes added: [smart_user_slug], [smart_user_url], [smart_user_link]
  • Theme Functions added: get_smart_user_slug(), the_smart_user_slug()

1.1 (2016-06-30)

  • Code optimization
  • Plugin info page added

1.0 (2014-10-02)

  • Initial Release (tanks to joeymalek for drawing my attention to this problem)