What to do after installing WordPress CMS? – Part 2

Now let us move on to some more advice that might be applied after installing WordPress. Simple adjustments will boost your site’s performance, which will increase installation security and give users a better browsing experience, as we discussed in the first section of this post.

WordPress has been improving its configuration with each new update, one of the changes made was the improvement in security during login of the administrative area.

Hide Login errors in the Admin section of WordPress

Just add the code below into the functions.php file of your template. This will cause the error messages to be hidden:

function no_errors_please(){
  return 'ERRO NO LOGIN! – TENTE NOVAMENTE';
}
add_filter( 'login_errors', 'no_errors_please' );

Prevent browsing in the WordPress folder structure

Another change that helps with the security of your installation is to prevent anyone from browsing through files and folders. For this, you just need to add the following line to your htaccess file.

Options All –Indexes<span style="font-family: Georgia, 'Times New Roman', 'Bitstream Charter', Times, serif; font-size: 13px; line-height: 19px;"> </span>

In order for it to work properly make sure there is a blank index.php file in the wp-content / themes and wp-content / plugins folders of your installation.

Disable the use of HTML codes in WordPress comments

The box for inserting comments into WordPress posts is an HTML editor that allows the use of HTML tags such as <b>, <a>, <i>. This allows your visitors to even add links in your comment.

To not allow HTML in WordPress comments, add the short excerpt to your template’s functions.php file:

add_filter( 'pre_comment_content', 'wp_specialchars' );

Disable posts review feature in WordPress

WordPress includes the revision control feature, which allows you to control the versions of your posts.

However, this control adds a row to the posts table for each change made. To disable this feature of WordPress, open the wp-config.php file in the root directory of WordPress and add the line below:

define ('WP_POST_REVISIONS', false);

Change the Auto Save feature interval

Post drafts are programmed to be saved automatically every minute, but you can change this default interval by saving resources on your server.

Let’s consider you want to change to 120 seconds (or 2 minutes), just add the line below to your wp-config.php file.

define( 'AUTOSAVE_INTERVAL', 120 );

Prohibit indexing of WordPress scripts

It is advisable to prohibit that the files used by WordPress in the folders of templates or plugins are indexed by the search engines. To do this open the robots.txt file in the root of the installation of your WordPress and add the lines below:

User-agent: *
Disallow: / wp-admin /
Disallow: / wp-includes /
Disallow: / wp-content/plugins /
Disallow: / wp-content/themes /
Disallow: / feed /
Disallow: * / feed /

Set expiration times for static file cache

There are several static files in your WordPress site like images, CSS files, JavaScript, txt, etc. Because these files are not edited frequently, you must set how long these files will be cached in the user’s browser.

This will allow the next visits to your site to load relatively faster since the JS and CSS files will be loaded from the local cache.

The code below can be edited in the htaccess file located at the root of your site’s installation:

ExpiresActive On
ExpiresByType image/gif "access plus 30 days"
ExpiresByType image/jpeg "access plus 30 days"
ExpiresByType image/png "access plus 30 days"
ExpiresByType text/css "access plus 1 week"
ExpiresByType text/javascript "access plus 1 week"

If you are using a cache plugin like W3 Total Cache, this cache control is managed by the plugin itself.

Conclusion

These are the adjustments that, in my opinion, can improve any WordPress management. They are easy to use and have several advantages.
Make adjustments to your installations, add your own modifications, and let us know how you improve WordPress. I hope you had fun.