__( 'Security', 'zero-spam' ), 'icon' => 'modules/security/icon-security.svg', ); return $sections; } /** * Admin settings * * @param array $settings Array of available settings. */ public function settings( $settings ) { $options = get_option( 'zero-spam-security' ); $settings['remove_resource_query_parameters'] = array( 'title' => __( 'Remove Resource Query Parameters', 'zero-spam' ), 'desc' => wp_kses( __( 'Web scanners love the &ver=x.x.x type arguments that are appended to your CSS and JS files. This is useful for caching systems and implementing this change could affect the quality of your cache. As long as you are aware of the effects or risks, there really shouldn’t be any other detrimental effects.', 'zero-spam' ), array( 'code' => array(), 'strong' => array(), 'a' => array( 'target' => array(), 'href' => array(), 'rel' => array(), ), ) ), 'module' => 'security', 'type' => 'checkbox', 'options' => array( 'enabled' => false, ), 'value' => ! empty( $options['remove_resource_query_parameters'] ) ? $options['remove_resource_query_parameters'] : false, ); $settings['disable_emojis'] = array( 'title' => __( 'Disable WordPress Emoj\'s', 'zero-spam' ), 'desc' => wp_kses( __( 'WordPress emoji’s are one of the vectors scanners use in order to enumerate version information, disable them if you\'re not using them.', 'zero-spam' ), array( 'code' => array(), 'strong' => array(), 'a' => array( 'target' => array(), 'href' => array(), 'rel' => array(), ), ) ), 'module' => 'security', 'type' => 'checkbox', 'options' => array( 'enabled' => false, ), 'value' => ! empty( $options['disable_emojis'] ) ? $options['disable_emojis'] : false, 'recommended' => 'enabled', ); $settings['disable_rss_feed'] = array( 'title' => __( 'Disable WordPress RSS Feed', 'zero-spam' ), 'desc' => wp_kses( __( 'Having the RSS feed exposed is another way that scanners use to detect your WordPress version as well as other pertinent information such as authors, disable it if you\'re not using it.', 'zero-spam' ), array( 'code' => array(), 'strong' => array(), 'a' => array( 'target' => array(), 'href' => array(), 'rel' => array(), ), ) ), 'module' => 'security', 'type' => 'checkbox', 'options' => array( 'enabled' => false, ), 'value' => ! empty( $options['disable_rss_feed'] ) ? $options['disable_rss_feed'] : false, ); return $settings; } /** * Disables emojis */ public function disable_emojis( $plugins ) { if ( is_array( $plugins ) ) { return array_diff( $plugins, array( 'wpemoji' ) ); } else { return array(); } } /** * Disables RSS feeds */ public function disable_rss() { wp_die( __( 'No feed available.', 'zero-spam' ) ); } /** * Removes resource query parameters */ public function remove_resource_query_params( $src ) { if ( strpos( $src, 'ver=' . get_bloginfo( 'version' ) ) ) { $src = remove_query_arg( 'ver', $src ); } return $src; } /** * Handles detections. * * @param array $details Detection details. */ public function handle_detection( $details ) { } /** * Block access to xmlrpc.php */ public function block_xmlrpc() { $current_url = rtrim( $_SERVER['REQUEST_URI'], '/' ); add_filter( 'bloginfo_url', function ( $output, $property ) { return ( $property == 'pingback_url' ) ? null : $output; }, 11, 2 ); add_filter( 'xmlrpc_enabled', '__return_false' ); if ( strpos( $current_url, '/xmlrpc.php' ) !== false ) { status_header( 404 ); nocache_headers(); wp_die( __( 'This file is not accessible.', 'zero-spam' ) ); } } }