The clickjaking usually happens AFTER your website was hacked.
HMWP Ghost was created to protect your website and prevent script injection by hackers bots into vulnerable files.
To learn more about how Hide My WP Ghost helps you protect your WordPress site against hacker bots and spammers, check out the Features list here.
Hide My WP Ghost is compatible with most Apache server types.
For NGINX Servers, access to the nginx config file is needed to include the rewrite rules file from Hide My WP Ghost. So, in order to use Hide My WP Ghost, you need to have access to NGINX config file and access to restart the service.
Or, you need to be able contact the host to add the path_to_file/hidemywp.conf file in NGINX and restart the service for you.
Yes, Hide My WP Ghost plugin works with SiteGround host.
As SiteGround is a combination of Nginx & Apache, the rules will be added in the .htaccess file and processed by SiteGround.
However, to hide the WordPress common paths to files like CSS, JS, TXT, and HTML, you need to switch off the Nginx caching option from SiteGroung website panel.
This will not affect the website speed but it will improve the security on your website especially if you’re using 7G firewall from Hide My WP Ghost
To change the File Permission and protect wp-config.php to 640, go to your SiteGround panel and access Website Tools > Site > File manager and right-click on wp-config.php file. Click to change the permissions and unselect Read All.
To change the User Permission in MySQL and protect the DB access, go to your SiteGround panel, access Website Tools > MySQL, and click on the user database connection. Click on the Manage Access icon in the popup window.
Select the custom access to MySQL and choose the required access for WordPress plugins like in the image below:
After you install and configure the Hide My WP Ghost on your SiteGroung website. Run a Security Check and see if the changed you made are correct.
Currently, the plugin is completely translated to Spanish and Romanian. (that’s in addition to English).
Also, we have plans to translate the plugin in more languages, as you can see on our Roadmap here >>
We are always looking to our customers to help us prioritize, so if you have a language you’d like to see Hide My WP Ghost translated to, we’d love to get your input.
Yes, you can use Hide My WP Ghost with the AppMySite plugin.
By default, for both Safe Mode and Ghost Mode, Hide My WP Ghost will leave the default wp-json as the custom wp-json Path.
When using Hide My WP Ghost with the AppMySite plugin, make sure NOT to change the REST API Path or disable the REST API access.
For more details on this, please check out this resource >>
The rewrite rules are added in .htaccess file for Apache Servers.
Rewrites happen when a browser accesses files and paths.
The files aren’t changed physically. We also add the security filters in .htaccess so no other config file is changed.
QUESTION: Will Hide My WP Ghost help my WP sites against all bots in general? I have a problem with my sites reaching the allowed inode quota due to bots. Will this be a solution for this issue?
Yes, once you change the common WordPress paths and hide them from bots, it will show a 404 error instead of loading the server resources.
What Hide My WP Ghost can’t stop are manually-triggered actions on your website, such as:
But it will stop the automated posts to the old wp-comments-post.php file.
You can use Hide My WP Ghost together with a plugin like Wordfence to boost your site’s security by enabling both proactive protection and website integrity protection.
Yes, Hide My WP Ghost has 7G Firewall protection for Apache-based servers.
7G Firewall is the most advanced firewall supported by Jeff Starr: https://perishablepress.com/7g-firewall/
The 7G Firewall offers lightweight, server-level protection against a wide range of malicious requests, bad bots, automated attacks, spam, and many other types of threats and nonsense.
Note! 7G Firewall may not work with all server configurations. Select minimal or medium protection for more compatibility.
To activate 7G Firewall in Hide My WP Ghost follow this tutorial:
https://hidemywpghost.com/kb/customize-paths-in-hide-my-wp-ghost/#firewall_script_injection
When activating either Safe Mode or Ghost Mode, you will be asked to perform a test (enables you to check website functionality from a preview popup).
If you notice any issues at this point, you can abort.
You will also receive a SAFE URL (it’s very important that you save this). This way, you will be able to simply copy the safe URL to be able to login if there is a compatibility issue.
You can learn more about this process here >>
Also read: How to Disable Hide My WP Ghost In Case Of an Error.
Yes, from Tweaks > Disable Options
To reach the Disable options available in Hide My WP Ghost, navigate to Hide My WP > Tweaks > Disable Options. There is where you will find the Disable Inspect Element option.
By activating this option, Hide My WP Ghost will disable the key combination that shows the Inspect Element on your website.
To learn more about the Disable Options that Hide My WP Ghost currently provides, please check out this resource >>