Changing WordPress paths with WP Ghost is a vital security measure that hides common paths used by hackers, protecting your website from attacks. However, proper configuration is necessary to ensure compatibility with plugins and user functionality.
This tutorial explains when and why you should enable or disable path changes for logged and non-logged users.
Why Change Paths on the Frontend?
Most server configurations work fine with paths changed for both logged-in and non-logged-in users. However, certain situations may require paths to remain unchanged for logged-in users to avoid conflicts, especially with plugins like page builders.
Why Changing Paths Only for Visitors (Non-Logged Users)
- Page Builder Compatibility: Some plugins and page builder plugins may not work correctly if the paths are changed for logged-in users.
- Protection Against Automated Bots: Changing and hiding the paths from visitors will also protect your website against hacker bots. This makes it more complicated for bots to target vulnerabilities in default paths.
Why Changing Paths for All Users
- E-commerce Security: Prevents logged-in customers and members from discovering default WordPress paths.
Why Changing Paths on Admin Dashboard
- Membership Security: Changing paths on the admin dashboard can provide additional benefits for membership websites but must be approached cautiously.
Even if we don’t recommend this action, WP Ghost offers the option to change the paths and parameters within the WordPress admin dashboard when using the WP Ghost – Admin Mapping plugin.
Activate Changes for Logged Users
- Go to WP Ghost > Tweaks > Change Options.
- Switch on the Change Paths for Logged Users option to change the paths for logged users.
Troubleshooting
Paths Remain Changed After Disabling the Option
When the paths remain changed for the logged users even after this option is switched off, it is because there is cache data that still shows the changed paths.
Solution:
- If you have a caching plugin installed, clear all cache. Also, check with your hosting provider for server-level caching and clear it.
Page Builder or Plugins Not Working
Some builders may depend on default paths for page preview functionality while editing the pages.
Solution:
- Disable path changes for logged-in users by switching off the option as described above.
By carefully configuring WP Ghost settings, you can achieve robust security while maintaining compatibility with essential tools and plugins. Always test thoroughly to ensure the smooth functioning of your website.