[Wordpress Enhanced Security] Small tweaks via functions.php to improve wordpress security. #wordpress #security

.htaccess

# disabling PHP file execution in directories where it’s not needed such as /wp-content/uploads/
<Files *.php>
deny from all
</Files>

# Disable file indexing
Options -Indexes

functions.php

# Disable Login Hints for a Generic Error Message
# Source: https://www.wpbeginner.com/wp-tutorials/11-vital-tips-and-hacks-to-protect-your-wordpress-admin-area/
function no_wordpress_errors(){
  return 'Something is wrong!';
}
add_filter( 'login_errors', 'no_wordpress_errors' );

# Disable the function responsible of showing the WP version in generator and rss
# Source: https://www.wpbeginner.com/wp-tutorials/the-right-way-to-remove-wordpress-version-number/
function wp_remove_version() {
return '';
}
add_filter('the_generator', 'wp_remove_version');