Remove the Core Version From Script and Style URLs
Strips ?ver= from front-end CSS and JavaScript URLs when it equals the WordPress version, hiding it from the page source. Plugin and theme versions are left alone.
Snippet Library
3,040 free snippets from the WPIDE team and the community. Copy the code, or add any snippet to your site in one click with WPIDE.
Strips ?ver= from front-end CSS and JavaScript URLs when it equals the WordPress version, hiding it from the page source. Plugin and theme versions are left alone.
Adds common HTTP security headers to front-end responses: nosniff, same-origin framing, a strict referrer policy and a restrictive permissions policy.
Blocks REST API routes for logged-out visitors except the namespaces you list (for example oEmbed, contact forms and the WooCommerce Store API), shrinking the public attack surface without breaking front-end features.
Adds the defer attribute to the front-end scripts you list by handle, so they no longer block page rendering.
Hides the front-end admin bar for all users, including administrators. The admin area is not affected.
Keeps the Heartbeat API (autosave and post locking) in the editor but turns it off on every other admin and front-end page to save server requests.
Hides chosen posts or pages (thank-you pages, landing pages, legal pages) from front-end search results.
Shows a small floating Edit button in the corner of posts and pages for users who can edit them, which is handy when the admin bar is hidden or on phones.
Adds a [wpide_change_password] shortcode where members change their password by entering the current one and the new one twice, and stay logged in afterwards.
Adds a [wpide_edit_profile] shortcode where logged-in members can update their name, display name, email, website and bio without visiting wp-admin.
Adds a [wpide_register] shortcode that shows a sign-up form on any page, styled by your theme, using WordPress's normal registration process and emails.
Adds an [acf_submit_form] shortcode that lets logged-in users submit a new post (saved as pending review) using your ACF field groups.
Leaves sold-out products out of the front-end search results while keeping them visible on the shop and category pages.
Lets administrators add ?wpide_query=1 to a front-end URL to print the main query's variables, the SQL it ran and the number of posts found at the bottom of the page.
Caps uploads at 30 files per hour for each user who is not an administrator, which limits the damage a compromised author account or a buggy front-end upload form can do.
Restricts front-end search results to blog posts, leaving out pages and other post types.
When SAVEQUERIES is enabled, lets administrators add ?wpide_queries=1 to a front-end URL to see every SQL query of the page with its time and calling function, slowest first.
Lets administrators add ?wpide_hooks=1 to any front-end URL to see, at the bottom of the page, every action and filter that ran and how many times, in firing order.
Records front-end URLs that run more database queries than a limit you set, with the query count and load time, and lists the worst offenders under Tools > Heavy Pages.
Adds an HTML comment at the bottom of front-end and admin pages with the number of database queries, generation time and peak memory. Visible to administrators only.
Adds a "REST" link to the front-end admin bar for administrators that opens the JSON for the post, page, term or author being viewed, which speeds up headless and integration work.
Gives memory-hungry admin tasks like image processing and imports more room, without raising the limit for every front-end visit.
Sends subscribers, customers and other users without editing rights from wp-admin to the WooCommerce My Account page or the homepage, with options to keep the profile screen open and hide the admin bar. AJAX and front-end forms keep working.
Sends nosniff, a strict referrer policy, a restrictive permissions policy and a cross-origin opener policy on dashboard and login pages, which front-end header snippets do not cover.