URL Mapping is a security feature that allows you to change internal URLs in your WordPress website’s source code.
It is designed to hide identifiable paths, such as plugin names or file structures, to prevent theme detectors and hackers from identifying that your site runs on WordPress.
URL Mapping works by letting you replace internal URLs with custom paths while keeping the same file extensions. For example, you can change: https://domain.com/assets/plugin-name/style.css
to: https://domain.com/assets/custom-path/style.css.
This ensures the website’s functionality remains intact while hiding sensitive information about the site’s structure.
Begin by activating Safe Mode or Ghost Mode to open the path customization process.
After enabling Safe Mode or Ghost Mode in WP Ghost and customizing the paths, if you still notice plugin names or identifiable paths in your source code, even after customization, activate URL Mapping to replace URLs that might expose your site’s structure to bots or scanners.
To change a URL using URL Mapping, follow these steps:
Note! It’s important to include only internal URLs from your frontend source code.
| From URL | To URL |
|---|---|
| /core/module/ff55dedaeb/woocommerce.css | /core/module/ff55dedaeb/shop.css |
| /core/cache/litespeed/ | /core/mycache/ |
| /core/module/f9f4ca341/main.css | /mystyle.css |
| /core/module/f9f4ca341/ | /custom_assets/ |
Note! If you have an Nginx server, remember to reload the service after saving the settings.
If you’re mapping a static URL with a CSS or JS extension, we recommend keeping the same extension to load the file as static for performance. Try to keep the original file extension when creating new URLs that will replace current ones.
If you already have a cache plugin installed, check if the cache plugin has the option to minify/combine the CSS and JS files that can be detected. Use these features to combine and hide filenames for even better security.
If the plugin name is present in a CSS or JS file, another solution to hide the CSS and JS filenames is to use the option to minify/combine the CSS and JS files using a cache plugin like LiteSpeed, WP Rocket or Autoptimize. This way, you combine all files into one undiscoverable file for theme detectors.
We recommend using cache plugins for our compatibility list that are periodically tested with WP Ghost.
Because hackers often use bots to search for security flaws in your website, it is…
The easiest way to change the default media uploads path is to use the WP…
To hide all CSS and JS you need to follow the steps to Combine the…
https://youtu.be/6ylhojSi-_E In this video, we’ll explore why website security matters and what can happen if…
The security of your WordPress site depends on multiple factors, such as the strength of…
When you enable two-factor authentication (2FA) for your WordPress website, it adds an extra layer…