Support » Plugin: WP Security Safe » anyway to rename directory names of wordpress core

  • Resolved alexlii

    (@alexlii)


    Hello,

    anyway to rename or hide directory names like theme, plugins, and other wordpress core ?

    Thanks.

    Alex

    • This topic was modified 1 year, 7 months ago by alexlii.
Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author sovstack

    (@sovstack)

    Alex,

    The best way to accomplish this would be to rename the wp-content directory, which would result in all of these folders changing locations. This plugin does not provide that capability, but WordPress does allow you to natively do this using constant variables to point to the new locations. See https://codex.wordpress.org/Editing_wp-config.php#Moving_wp-content_folder

    For Security Safe, that particular feature would be difficult to implement as it would introduce more problems that are outside the scope of security such as:

    – The site will break immediately (old references to old directories that no longer exists)
    – Internal Broken Links (404 errors)
    – External Broken Links (404 errors)
    – Old shared website content no longer shows images on your Facebook page (broken external links)
    – Some plugin incompatibilities (rare and nothing you can do about it)

    To address internal broken link issues, a search and replace plugin or database tool would be needed to replace the old directory names with the new location names. Be sure to backup your website before doing this type of work.

    To address external broken link issues, you would need to implement 301 redirects in .htaccess (Apache Server), the NGINX conf files (NGINX Server), or use a 301 redirect plugin.

    Also, if you implement a 301 redirect for the wp-content folder to the new location so that all of your old images work on social media accounts, that defeats the point of changing locations of your directories for security through obscurity. To get the best of both worlds, you could just redirect specific files versus the entire folder.

    Often other minor problems will emerge after a week or so post the wp-content folder relocation. It is hard to know what all it affects as each site is often unique with only the above common denominators. I would highly recommend that you only change these folder locations if the site is fairly new and/or you are prepared to address problems quickly. You may want to run a test version of the site before rolling changes like this to the live site.

    As you can see, this type of task probably shouldn’t be accomplished by a plugin.

    – Steven

    Plugin Author sovstack

    (@sovstack)

    Alex,

    Keep in mind, you cannot “hide” these directories as they need to be accessible publicly, so you can only move them to a different location to make it less obvious.

    I forgot to address the WordPress core portion of your question. My previous comment addresses these directories:

    /wp-content/plugins
    /wp-content/themes
    /wp-content/mu-plugins
    /wp-content/uploads

    The rest of core cannot be easily changed without making future updates more difficult. In addition, changing any of these location does not “secure” your website. It obscures it. Obscurity is an additional layer of security. Security is an onion. There are many layers to it. I wouldn’t worry about the rest of the WordPress core directory structure.

    -Steven

    • This reply was modified 1 year, 7 months ago by sovstack.
Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘anyway to rename directory names of wordpress core’ is closed to new replies.