There is a tag in your WordPress header file that generates it’s version number, every time someone loads the page. A simple view of the source code will reveal that you have WordPress 2.x. If you’ve chosen not to upgrade because you like 2.3′s interface or have some plugins that will not be compatible, your don’t want people (ahem, hackers) knowing that do you?? I thought not.
The Simple Fix:
- Download your current theme’s “Header.php” via FTP, or edit it in the WordPress Theme Editor.
- Open it up in Notepad++ (That I Recommended Last Post) and find the line that says:
- Delete it and save your file.
- Your Done! Wasn’t so hard was it?
meta name=”generator” content=”WordPress <php bloginfo(‘version’); >” / <!– leave this for stats please –>
I actually knew about this fix for a long time, but I even still had it in my theme. Doh! 
Related posts:
- Weekend WordPress Security Tip: Restrict Your Wp-Admin
- Weekend WordPress Security Tip: What To Do When Your Blog Is H4CK3D
- Weekend WordPress Security Tip: Index.html
This entry was posted in Web Security and tagged Web Security. Bookmark the permalink. Post a comment or leave a trackback: Trackback URL.
2 Comments
I just don’t create my wordpress themes with that tag.
tek’s last blog post..HTC’s “Dream” pictures leaked
Nice tip! WordPress is great, but it is amazing some of the “stuff” put into it that isn’t necessary. As much as I study blogging in general and WordPress specifically, there’s always more to learn. Thanks.
DR’s Money Management’s last blog post..50 Ways to Make Money Blogging