FAQ

By default, the wp-admin path is visible for all logged users.

However, Hide My WP Ghost gives you the option to only show the wp-admin path for site administrators.

Switch on Hide My WP > Change Paths > Admin Security > Hide “wp-admin” from Non-Admin Users and logged site users will only be able to access the wp-admin path if they are website administrators.

Note! Having the wp-admin path visible when you’re logged as administrator will prevent your website from crashing if you deactivate the plugin or if another plugin uses the old admin path in the backend.

Having the common paths hidden with Hide My WP Ghost will protect your site against hackers attacks. Also, make sure to activate the Brute Force protection from Hide My WP Ghost to prevent Brute Force attacks.

XML-RPC on WordPress is actually an API or “application program interface“. It gives developers who make mobile apps, desktop apps, and other services the ability to talk to your WordPress site. The XML-RPC API that WordPress provides gives developers a way to write applications (for you) that can do many of the things that you can do when logged into WordPress via the web interface.

These include:

• Publish a post
• Edit a post
• Delete a post.
• Upload a new file (e.g. an image for a post)
• Get a list of comments
• Edit comments

For a full list of the WordPress API functions available to developers via XML-RPC, take a look at this page on the WordPress codex.

If you disable the XML-RPC service on WordPress, you lose the ability for any application to use this API to talk to WordPress.

Let’s use an example to illustrate: You have an app on your iPhone that lets you moderate WordPress comments. Someone advises you to disable XML-RPC. Your iPhone app suddenly stops working because it can no longer communicate with your website using the API you just disabled.

There are two common attacks on XML-RPC:

• DDoS via XML-RPC pingbacks.
• Brute force attacks via XML-RPC.

If you still want to disable XML-RPC, you can switch on this option in Hide My WP Ghost.

Hide My WP Ghost adds a redirecting layer over WordPress to let you customize the old paths without physically changing them.
It also gives you the possibility to disable access to the old paths for hackers and protect the WordPress plugins and themes.

All these changes will not affect the WordPress directory structure through FTP and it will not break it if you deactivate the plugin.

It looks like a simple plugin but it’s a complex system behind it and a good firewall against Script Injection and Brute Force attacks.

Hide My WP Ghost adds a redirecting layer over WordPress to let you customize the old paths without physically change them.

It also gives you the possibility to disable access to the old paths for hackers and protect the WordPress plugins and themes.

All these changes will not affect the WordPress directory structure through FTP and it will not break it when you deactivate the Hide My WP Ghost plugin.

It looks like a simple plugin but it’s a complex system behind it and a good firewall against Script Injection and Brute Force attacks.

XML-RPC on WordPress is actually an API or “application program interface“. It gives developers who make mobile apps, desktop apps, and other services the ability to talk to your WordPress site. The XML-RPC API that WordPress provides gives developers a way to write applications (for you) that can do many of the things that you can do when logged into WordPress via the web interface.

Hide My Wp Ghost was tested with all the popular cache plugins like:

• W3 Total Cache
• WP Super Cache
• Wp Fastest Cache
• WP-Rocket
• LiteSpeed Cache
• Autoptimize
• Cache Enabler

If you use a cache plugin that is not in this list and you notice any compatibility issue, please contact us and we will work to make Hide My WP Ghost compatible with it.

Yes, from version 2.3.030 of Hide My Wp Ghost plugin is compatible with BuddyBoss Theme .

Yes, from version 2.3.030 of Hide My Wp Ghost plugin is compatible with Jupiter Theme from Themeforest.

Once you change the admin path and switch on to Hide My WP > Permalinks > Hide the new admin path, you can’t access the new admin URL as a visitor.

You need to go to the new login path, and after you login, you will be redirected to the new admin URL.

Yes, since version 2.3.017, Hide My Wp Ghost plugin is compatible with Classiera Theme from Themeforest.