Let's talk
All Security snippets
Security

Lock Down the Theme & Plugin File Editor

Turns off the built-in code editor under Appearance/Plugins in wp-admin, so nobody can edit theme or plugin files straight from the dashboard — a common target once an account gets compromised.

php 
define( 'DISALLOW_FILE_EDIT', true );

Setup:

  1. Open wp-config.php in the root of your WordPress install.
  2. Add the line above anywhere before the /* That's all, stop editing! */ comment.
  3. Save the file — no need to touch anything else.

More Security snippets

Hide the WordPress Version Number

Strips the WordPress version string out of your site's <head>, so it's not sitting in plain sight for anyone scanning your site for a known vulnerability tied to a specific version.