WP 6.6+
Sanitize Uploaded SVG Files to Prevent Stored XSS Attacks
Enables SVG file uploads while stripping malicious embedded JavaScript tags, onclick handlers, and foreign entities before saving to disk.
WordPress 6.6+ & PHP 8.2+ Tested
WordPress Code Snippet Library
Production-ready, copy-paste PHP functions, WooCommerce hooks, and speed tweaks.
-
-
WP 6.6+
Remove WordPress Version Query Strings from Static Scripts and Styles
Strips ‘?ver=6.6.1’ query parameters from enqueued CSS and JS files to enable static CDN proxy caching and hide WP version details.
-
WP 6.6+
Force SSL on All WordPress Login and Admin Sessions
Enforces HTTPS encryption on all login forms and wp-admin administrative sessions to prevent session cookie interception on public networks.
-
WP 6.6+
Delete Expired and Orphaned Transients from wp_options via SQL
Clean thousands of abandoned and expired transient records from wp_options to instantly reduce database memory footprint and table fragmentation.
-
WP 6.6+
Add Featured Image Thumbnail Column to WP Admin Post List
Adds a clean preview thumbnail column to the admin post list (wp-admin/edit.php) so editors can visually verify featured images.
-
WP 6.6+
Customize Admin Footer Branding and Support Links
Replace the default ‘Thank you for creating with WordPress’ footer text with custom agency branding, contact links, or copyright notices.
-
WP 6.6+
Replace WordPress Login Logo and Link with Custom Site Logo
White-label the wp-login.php screen with your own custom logo and redirect the logo click to your homepage instead of WordPress.org.
-
WP 6.6+
Disable WordPress REST API for Unauthenticated Guest Users
Restricts public /wp-json/ user and data endpoints to authenticated users and logged-in administrators only.
-
WP 6.6+
Block Author URL Enumeration Scans (?author=1)
Prevents automated bots from discovering valid WordPress administrator usernames by requesting /?author=1 query parameters.
-
WP 6.6+
Hide Generic WordPress Login Error Hints to Prevent Username Probing
Replaces informative login error messages (‘Invalid username’ vs ‘Incorrect password’) with a generic notice to prevent credential enumeration.
-
WP 6.6+
Limit Maximum Post Revisions to 5 via Filter
Prevents database bloat in wp_posts by capping the maximum number of revisions stored per post to 5 without modifying wp-config.php.
-
WP 6.6+
Throttle WordPress Heartbeat API Frequency to 60 Seconds
Reduces high CPU usage from admin-ajax.php by slowing down the background Heartbeat API frequency from 15s to 60s in the post editor.
-
WP 6.6+
Disable Dashicons CSS for Unauthenticated Guest Visitors
Prevents loading the heavy 30KB Dashicons font and stylesheet for normal site visitors who are not logged into the WordPress admin.
-
WP 6.6+
Hide All Other Shipping Methods When Free Shipping Is Available in WooCommerce
Streamline checkout by hiding expensive flat-rate and local pickup options whenever the customer qualifies for Free Shipping.
-
WP 6.6+
Disable WooCommerce Cart Fragments AJAX Script on Non-Shop Pages
WooCommerce loads wc-cart-fragments.js on every page to update mini-carts via AJAX. This snippet disables it on blog and content pages to save 300ms TTFB.