{"id":18390439,"url":"https://github.com/codeconut-ltd/wordpress-plugin-default-config","last_synced_at":"2025-10-08T04:14:50.829Z","repository":{"id":133669826,"uuid":"300571514","full_name":"Codeconut-Ltd/WordPress-Plugin-Default-Config","owner":"Codeconut-Ltd","description":"WordPress plugin with some hardcoded, opinionated defaults for enhanced security and frontend performance. Reduced feature set that might not work with all plugins. Only use if you know what you need.","archived":false,"fork":false,"pushed_at":"2023-07-25T09:41:12.000Z","size":65,"stargazers_count":5,"open_issues_count":0,"forks_count":0,"subscribers_count":0,"default_branch":"main","last_synced_at":"2025-03-22T11:51:10.325Z","etag":null,"topics":["composer","configuration","configuration-management","default-project","opinionated-defaults","ph7","php","phpcs","phpcs-wordpress","plugin","security","security-hardening","wordpress","wordpress-development","wordpress-plugin","wordpress-security","wordpress-settings"],"latest_commit_sha":null,"homepage":"","language":"PHP","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/Codeconut-Ltd.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE.md","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2020-10-02T09:54:56.000Z","updated_at":"2023-04-24T20:46:36.000Z","dependencies_parsed_at":null,"dependency_job_id":"622b2143-4dfd-43f9-a12d-410f7416448f","html_url":"https://github.com/Codeconut-Ltd/WordPress-Plugin-Default-Config","commit_stats":null,"previous_names":[],"tags_count":1,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Codeconut-Ltd%2FWordPress-Plugin-Default-Config","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Codeconut-Ltd%2FWordPress-Plugin-Default-Config/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Codeconut-Ltd%2FWordPress-Plugin-Default-Config/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Codeconut-Ltd%2FWordPress-Plugin-Default-Config/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/Codeconut-Ltd","download_url":"https://codeload.github.com/Codeconut-Ltd/WordPress-Plugin-Default-Config/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":247583661,"owners_count":20962063,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["composer","configuration","configuration-management","default-project","opinionated-defaults","ph7","php","phpcs","phpcs-wordpress","plugin","security","security-hardening","wordpress","wordpress-development","wordpress-plugin","wordpress-security","wordpress-settings"],"created_at":"2024-11-06T01:47:46.962Z","updated_at":"2025-10-08T04:14:50.824Z","avatar_url":"https://github.com/Codeconut-Ltd.png","language":"PHP","readme":"![WordPress Plugin Default Config](teaser.png)\n\n# WordPress Plugin – Default Config\n\nSecurity \u0026 Performance focus\n\n- [About](#about)\n- [Features](#features)\n- [How to use](#how-to-use)\n- [Credits](#credits)\n\n\u003cbr\u003e\n\n---\n\n## About\n\nOnly use if you know what you need. WordPress plugin with some hardcoded, opinionated defaults for enhanced security and reduced feature set. Generic and theme-independent implementation with a modern code style.\n\n**Intended for developers – Not end users**\n\n_Due to use of many 3rd party sources, this plugin is not official. Take what you need or use the setup as boilerplate for your own plugins._\n\n\u003cbr\u003e\u003cbr\u003e\n\n## Features\n\nSome features are **breaking changes** and limit functionality of plugins.\nUnneeded features can be disabled in code.\n\n### Security\n\n- Disable XMLRPC API (breaks mobile app use!)\n- Disallow login via email address (use username instead)\n- Disable oEmbed\n- Remove login error message\n- Remove meta tags and version numbers\n- Remove links + HTML from posted comments (anti-spam)\n\n### Performance\n\n- Disable Emoji font and styles (can still be used via Unicode)\n- Remove unused links from `\u003chead\u003e` (e.g. feeds)\n- Move all loaded scripts to document end (remove from head)\n\n### General\n\n- Disable redundant self ping (reduce server load)\n- Delay post publication via RSS (ideal for last-minute QA and fixes)\n- Set image quality to 100% (use plugins for compression)\n\n### Developer\n\n- Clean and modern OOP style\n\n\u003cbr\u003e\u003cbr\u003e\n\n## How to use\n\nCopy the folder content in your WordPress installation.\n\n#### Features\n\nAll features are loaded modular and can be edited here:\n\n- `/wp-content/plugins/codeconut-global/app/class.php`\n\n#### Git workflow\n\nUse of submodules is recommended:\n\n- `git submodule add USER:REPOSITORY wp-content/plugins/codeconut-global`\n\nCall this from web root. The path must not be preceded with a slash.\n\n\u003cbr\u003e\u003cbr\u003e\n\n## Credits\n\nThis plugin combines a few great public resources into one package.\n\n### Authors\n\nAndreas Hecht\n\n- https://www.drweb.de/wordpress-snippets\n\nCloudflare\n\n- https://blog.cloudflare.com/wordpress-pingback-attacks-and-our-waf\n- https://blog.cloudflare.com/a-look-at-the-new-wordpress-brute-force-amplification-attack\n\nWpBeginner\n\n- https://www.wpbeginner.com/beginners-guide/vital-tips-and-tools-to-combat-comment-spam-in-wordpress\n- https://www.wpbeginner.com/wp-tutorials/25-extremely-useful-tricks-for-the-wordpress-functions-file\n","funding_links":[],"categories":[],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcodeconut-ltd%2Fwordpress-plugin-default-config","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fcodeconut-ltd%2Fwordpress-plugin-default-config","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcodeconut-ltd%2Fwordpress-plugin-default-config/lists"}