WP 6.6+
Sanitize Uploaded SVG Files to Prevent Stored XSS Attacks
Enables SVG file uploads while stripping malicious embedded JavaScript tags, onclick handlers, and foreign entities before saving to disk.
WordPress 6.6+ & PHP 8.2+ Tested Code Snippets
Engineered for WordPress Developers
Curated copy-paste code snippets, interactive developer tools, and zero-bloat performance guides.
⌘K
⚡ wp-config Generator
🔒 Instant Salts Key
🚀 .htaccess Speed Builder
🛠️ CPT Generator
🤖 robots.txt AI Ready
⏱️ Cron Generator
Latest Tested Snippets
Browse Full Archive →-
-
WP 6.6+
Remove WordPress Version Query Strings from Static Scripts and Styles
Strips ‘?ver=6.6.1’ query parameters from enqueued CSS and JS files to enable static CDN proxy caching and hide WP version details.
-
WP 6.6+
Force SSL on All WordPress Login and Admin Sessions
Enforces HTTPS encryption on all login forms and wp-admin administrative sessions to prevent session cookie interception on public networks.
-
WP 6.6+
Delete Expired and Orphaned Transients from wp_options via SQL
Clean thousands of abandoned and expired transient records from wp_options to instantly reduce database memory footprint and table fragmentation.
-
WP 6.6+
Add Featured Image Thumbnail Column to WP Admin Post List
Adds a clean preview thumbnail column to the admin post list (wp-admin/edit.php) so editors can visually verify featured images.
-
WP 6.6+
Customize Admin Footer Branding and Support Links
Replace the default ‘Thank you for creating with WordPress’ footer text with custom agency branding, contact links, or copyright notices.
-
WP 6.6+
Replace WordPress Login Logo and Link with Custom Site Logo
White-label the wp-login.php screen with your own custom logo and redirect the logo click to your homepage instead of WordPress.org.
-
WP 6.6+
Disable WordPress REST API for Unauthenticated Guest Users
Restricts public /wp-json/ user and data endpoints to authenticated users and logged-in administrators only.
-
WP 6.6+
Block Author URL Enumeration Scans (?author=1)
Prevents automated bots from discovering valid WordPress administrator usernames by requesting /?author=1 query parameters.
-
WP 6.6+
Hide Generic WordPress Login Error Hints to Prevent Username Probing
Replaces informative login error messages (‘Invalid username’ vs ‘Incorrect password’) with a generic notice to prevent credential enumeration.
-
WP 6.6+
Limit Maximum Post Revisions to 5 via Filter
Prevents database bloat in wp_posts by capping the maximum number of revisions stored per post to 5 without modifying wp-config.php.
-
WP 6.6+
Throttle WordPress Heartbeat API Frequency to 60 Seconds
Reduces high CPU usage from admin-ajax.php by slowing down the background Heartbeat API frequency from 15s to 60s in the post editor.
-
WP 6.6+
Disable Dashicons CSS for Unauthenticated Guest Visitors
Prevents loading the heavy 30KB Dashicons font and stylesheet for normal site visitors who are not logged into the WordPress admin.
-
WP 6.6+
Hide All Other Shipping Methods When Free Shipping Is Available in WooCommerce
Streamline checkout by hiding expensive flat-rate and local pickup options whenever the customer qualifies for Free Shipping.
-
WP 6.6+
Disable WooCommerce Cart Fragments AJAX Script on Non-Shop Pages
WooCommerce loads wc-cart-fragments.js on every page to update mini-carts via AJAX. This snippet disables it on blog and content pages to save 300ms TTFB.
-
WP 6.6+
Auto-Complete Virtual and Downloadable WooCommerce Orders on Successful Payment
Automatically marks orders containing only virtual or downloadable products as Completed immediately after successful payment.
-
WP 6.6+
Find and Replace URL in Entire WordPress Database via Raw SQL
When migrating a WordPress site or switching domain names, execute these SQL queries in phpMyAdmin to replace old URLs across post content, excerpts, post meta, options, and comments in one pass.
-
WP 6.6+
Disable Dashboard Welcome Panel and Default Widgets for All Users
Declutter the WordPress admin dashboard for clients and content managers by removing unnecessary default boxes such as WordPress Events and News, Quick Draft, and the Welcome panel.