Link to home
Start Free TrialLog in
Avatar of Bakaka Bakaka
Bakaka BakakaFlag for Ghana

asked on

how do i hide my website using wp from source code?

Hi experts,

I did some research on Google on how to hide the fact that i am using wordpress cms. Its for security reasons.

When you view the source code you can see that its a wordpress cms.

The research i did on Google showed some great result on how to tackle it even the plugins on http://codecanyon.net/item/hide-my-wp-no-one-can-know-you-use-wordpress/4177158/comments

I was wondering if someone can walk me through on how to do that and cleaning my wp source code or even change the name from wp-content to my liking.


Thanks,
B
ASKER CERTIFIED SOLUTION
Avatar of COBOLdinosaur
COBOLdinosaur
Flag of Canada image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Bakaka Bakaka

ASKER

something else doesnt make any sense here COBOL? Be precise on what you are stating.
I am saying that if you want to waste your money on something that does not work go right ahead.  The only way people are not going to know you are a WP site is when you quit using WP.  To put it bluntly A FOOL AND HIS MONEY ARE SOON PARTED.  Anyone who thinks the can successfully hide a WP site without seriously damaging the site is a fool.

Clear enough?

Cd&
Cd&,

Are you saying there is no way at all in doing this?
>>> Are you saying there is no way at all in doing this?

With unlimited time and unlimited resources it is possible to do anything, so if you have enough time, money, and other resources to devote 100% of your time to this there might be a solution in your lifetime.  However right now in real time on planet Earth, I do not believe it can be done.

Wordpress requires a known structure and format for the code to work across the many themes, and plugins available.  Making changes that might make it more difficult to know it is wordpress would require changes for how things get generated.  Any of those changes will have a high risk of creating imcompatibilities, and might even make it impossible to update to a new version of Wordpress.  If you can't update then you will miss security patches and that will leave the site vulnerable to attack.  Doing an update will almost certainly knock out changes made to hide the Wordpress identifying traits.

In the best case, and Expert familiar with Wordpress would be able to identify it as a Wordpress site, and even if you managed to completely disguise it. The fact is that it would still be identifiable from the server side which is how most hackers targeting Wordpress find  those sites anyway.

If you are trying to do this because you think it will improve your security, you are 100% wrong; it will, in fact, make you more vulnerable to attack because trying to disquise it will most certainly weaken the perimeter security that Wordpress relies on for the bulk of it security.

If you don't want the site to be identified as Wordpress then use another CMS, or write a custome version of the site.

Cd&
Thanks for that Cobol.

I used Dreamweaver to design site along with Fireworks and Photoshop. I found dreamweaver to be a bit hard for the client especially when i do my handover (after completion of the site). I usually get the client to install a 30 day trial of dreamweaver so they can do their update etc.

But when wordpress was out - i found it easier for me and the client to work together as their is no need of software to do update (apart from filezilar for example) as the'll just log onto the url given at wp.

So this is my concern now because in dreamweaver the code are generated within the software itself and its much more professional as it will not show the cms platform you are using apart from wp.

Otherwise, it looks like i might have to go back to dreamweaver then. the only concern for me is that how do i do the hand over to the client. i experience too that the client doesnt want to pay for a full license of dreamweaver.

Just wondering if there is a way to go about where i can give a url to the client, much like wp, to maintain their update, etc if they dont want to purchase the license dreamweaver.

B
If they don't want to pay for the Dreamweaver license, then they are not purchasing updatability, and when the site gets out of date they will have to pay you to do it for them.  There is a price for everything.

For my own clients I don't want them touching anything and include the cost of a support plan in the cost of development.  When I run across a client that does not want to pay for things, I give them the phone number of a school kid who works cheap; I don't waste my time on anyone not willing to pay professional level rates for professional level work.

Cd&
Thanks COBOL.

One final argument or point which i want to raise that relates to this.

For those big companies who develops site. How did they go about this after completion of the work. Some company uses WP and when they handover it makes sense that the client will use the WP URL to maintain update. Again this is not professional for a company to develop site for a regular client. I am very countable to the word PROFESSIONAL.

Then you have the other company who aren't using WP CMS (i presume they are using dreamweaver) for their clients. How are they going about this with their clients to do the update once handover?

1. they get their client to purchase the license so they can maintain the update.
2. is there any other way to go about the update without using the dreamweaver app? (eg. dedicated url to login and update, like the wp functions)?
I do all custom development for clients whohave high security requirements and anything off the shelf is difficult to secure.   They all have their own IT staff, but they are either overworked or lack the experience to do the kind of secure site we specialize in. Every project contract includes support provisions.  In some cases where the client wants in-house control of changes we provide maintenance screens designed to work within the client security model. Our support portion then becomes limited to required patches, bug fixes.  We would never use WP or Dreamweaver for development, as we have our own tools built to work with our custom framework.

What other developers do depends on the kind of clients they service and the size of the operation.  Smaller development operations tend to us more of the shelf stuff and have users do a lot of maintenance; but that is problematic if their clients are small companies where they do not have any computer-savvy employees.  The firms that include maintenance and support are generally large enough to have staff dedicated to those tasks.

If you surveyed a 100 different development organizations you would probably get a dozen different variations on how they address maintenance and support because it really needs to tailored to what the client needs and is willing to pay for.

Cd&
Thanks for that.

I guess ill have to go with Dreamweaver then as there is no directions you given me here to go too.

Ill do some more research.

B