=== WP Best Practices === Contributors: edorsini Tags: meta, generator, security, remove generator, wordpress version, standards, practices Requires at least: 2.0.2 Tested up to: 3.2.1 Stable tag: 1.2 This plugin is designed to implement the latest WordPress best practices around security into your WordPress website. == Description == This plugin is designed to implement the latest WordPress best practices around security into your WordPress website. = Features = 1. Removes the meta name generator tag from the header of every page, including RSS feeds, which contains your site's WordPress version 2. Deletes the readme.html file which contains your site's WordPress version 3. Provides the ability to hide the login page and therefore the WordPress version within the login page, read more at the plugin's website. 4. Adds an entry to your .htaccess file to lockdown your wp-config.php 5. Creates a log.txt file within the plugin directory for referencing when a readme.html file was deleted For more information, read more at the plugin's website. == Installation == This section describes how to install the plugin and get it working. 1. Upload the `wp-best-standards.zip` to the `/wp-content/plugins/` directory 2. Unzip the file 3. Activate the plugin through the 'Plugins' menu in WordPress 4. You are all set! Enjoy! == Frequently Asked Questions == = The Meta Name Generator is still displaying the WordPress version. How could this be? = Make sure that your template does not have a hard coded reference within the header.php file. Some older templates seem to have this reference. Please delete or comment the line. = Is there a way to keep track when the readme.html file is deleted? = Yes. There is a log.txt file within the plugin folder that allows you to see each time the readme.html file was deleted. The idea behind this is to make sure that the WordPress version is not visible to hackers. = When is the readme.html file deleted? = The readme.html file is deleted only when activating the plugin. It is recommended that you deactivate the plugins when upgrading to a newer WordPress version. Upgrading to a newer version of WordPress is the time where the readme.html file is created. Therefore, this plugin removes the readme.html file if found when activating the plugin. = I cannot see the logs.txt file within the wp-best-practices directory. Why? = Most likely this is a permissions issue. Check to see that the wp-best-practices directory has write permissions. = I cannot access my wp-login.php page anymore. Why? = Please make sure you are passing the proper password string. If you cannot remember the password string, please take a look at your .htaccess file. == Screenshots == 1. This screen shot illustrates the admin section of the plugin which allows you to hide the login page == Changelog == = 1.1 = * This release included the ability to hide the WordPress version from the wp-login.php file. * Minor code cleanup. = 1.0 = * The original release of this plugin. * This release included the ability to remove the WordPress version from the meta generator tag and the readme.html file. == Upgrade Notice == = 1.1 = This version allows you to hide the WordPress version number from the wp-login.php page. Basically, you get to hide the login page from the average user and therefore prevent the WordPress version from been displayed. Please read more about this on the official plugin site.